# Flatcar Container Linux stable-4757.2.0 > Provisioning & Runtime · 2026-09-14 A security-focused maintenance release with extensive Linux and OpenSSH vulnerability remediation, broad dependency updates, and platform and image changes. Operators should account for the dropped platform and image support and the new Vagrant 2.2.5 requirement. ## Action needed - **[security · critical]** containerd vulnerability remediation - `containerd` is updated with remediation for `CVE-2026-47262`, `CVE-2026-50195`, `CVE-2026-53488`, `CVE-2026-53489`, and `CVE-2026-53492`. - **[security · critical]** go vulnerability remediation - `go` is updated with remediation for the listed vulnerabilities, including `CVE-2025-61726`, `CVE-2025-61727`, and `CVE-2025-61728`. - **[security · high]** bind vulnerability remediation - `bind` is updated with remediation for `CVE-2025-40778`, `CVE-2025-40780`, and `CVE-2025-8677`. - **[security · high]** glib vulnerability remediation - `glib` is updated with remediation for `CVE-2025-13601` and `CVE-2025-14087`. - **[security · high]** glibc vulnerability remediation - `glibc` is updated with remediation for `CVE-2025-15281`, `CVE-2026-0861`, and `CVE-2026-0915`. - **[security · high]** gnutls vulnerability remediation - `gnutls` is updated with remediation for the listed vulnerabilities, including `CVE-2025-14831`, `CVE-2025-9820`, and `CVE-2026-1584`. - **[security · high]** incus vulnerability remediation - `incus` is updated with remediation for `CVE-2026-23953`. - **[security · high]** libtasn1 vulnerability remediation - `libtasn1` is updated with remediation for `CVE-2025-13151`. - **[security · high]** `nvidia-drivers` vulnerability remediation - `nvidia-drivers` is updated with remediation for the listed vulnerabilities, including `CVE-2025-33219`, `CVE-2025-33221`, and `CVE-2026-24182`. - **[security · high]** podman vulnerability remediation - `podman` is updated with remediation for `CVE-2025-52881` and `CVE-2025-9566`. - **[security · high]** sssd vulnerability remediation - `sssd` is updated with remediation for `CVE-2025-11561` and `CVE-2026-6245`. - **[security · high]** urllib3 vulnerability remediation - `urllib3` is updated with remediation for `CVE-2025-66418` and `CVE-2025-66471`. - **[security · high]** openssh vulnerability remediation - `openssh` is updated with remediation for `CVE-2026-59995`, `CVE-2026-59996`, `CVE-2026-59997`, `CVE-2026-59998`, `CVE-2026-59999`, `CVE-2026-60000`, `CVE-2026-60001`, and `CVE-2026-60002`. - **[security · medium]** `c-ares` vulnerability remediation - `c-ares` is updated with remediation for `CVE-2025-62408`. - **[security · high]** curl vulnerability remediation - `curl` is updated with remediation for `CVE-2025-13034`, `CVE-2025-14017`, `CVE-2025-14524`, `CVE-2025-14819`, `CVE-2025-15079`, `CVE-2025-15224`, `CVE-2026-1965`, `CVE-2026-3783`, `CVE-2026-3784`, and `CVE-2026-3805`. - **[security · medium]** libarchive vulnerability remediation - `libarchive` is updated with remediation for `CVE-2025-60753` and `CVE-2026-4426`. - **[security · medium]** libxml2 vulnerability remediation - `libxml2` is updated with remediation for `CVE-2026-0989`, `CVE-2026-0990`, `CVE-2026-0992`, and `CVE-2026-1757`. - **[security · medium]** libxslt vulnerability remediation - `libxslt` is updated with remediation for `CVE-2025-10911` and `CVE-2025-11731`. - **[security · medium]** `p11-kit` vulnerability remediation - `p11-kit` is updated with remediation for `CVE-2026-2100`. - **[security · high]** rsync vulnerability remediation - `rsync` is updated with remediation for the listed vulnerabilities, including `CVE-2025-10158`, `CVE-2026-29518`, and `CVE-2026-41035`. - **[security · medium]** `util-linux` vulnerability remediation - `util-linux` is updated with remediation for `CVE-2025-14104` and `CVE-2026-27456`. - **[security · low]** `intel-microcode` vulnerability remediation - `intel-microcode` is updated with remediation for `CVE-2025-31648`. - **[security · low]** libpcap vulnerability remediation - `libpcap` is updated with remediation for `CVE-2025-11961` and `CVE-2025-11964`. - **[security · critical]** `Linux` vulnerability remediation - `Linux` is updated with remediation for the listed vulnerabilities, including `CVE-2026-80888` and the other advisories recorded for this change. - **[security · high]** bubblewrap vulnerability remediation - `bubblewrap` is updated with remediation for `CVE-2026-41163`. - **[security · medium]** expat vulnerability remediation - `expat` is updated with remediation for `CVE-2026-24515`, `CVE-2026-25210`, `CVE-2026-32776`, `CVE-2026-32777`, `CVE-2026-32778`, `CVE-2026-41080`, and `CVE-2026-45186`. - **[security · high]** gnupg vulnerability remediation - `gnupg` is updated with remediation for `CVE-2026-24881`, `CVE-2026-24882`, and `CVE-2026-24883`. - **[security · medium]** libcap vulnerability remediation - `libcap` is updated with remediation for `CVE-2026-4878`. - **[security · medium]** libgcrypt vulnerability remediation - `libgcrypt` is updated with remediation for `CVE-2026-41989`. - **[security · high]** openssh vulnerability remediation - `openssh` is updated with remediation for `CVE-2026-35385`, `CVE-2026-35386`, `CVE-2026-35387`, `CVE-2026-35388`, and `CVE-2026-35414`. - **[security · critical]** openssl vulnerability remediation - `openssl` is updated with remediation for the listed vulnerabilities, including `CVE-2026-2673`, `CVE-2026-28386`, and `CVE-2026-28387`. - **[security · low]** runc vulnerability remediation - `runc` is updated with remediation for `CVE-2026-41579`. - **[security · medium]** systemd vulnerability remediation - `systemd` is updated with remediation for `CVE-2026-40223`, `CVE-2026-40225`, and `CVE-2026-40226`. - **[security · low]** `xz-utils` vulnerability remediation - `xz-utils` is updated with remediation for `CVE-2026-34743`. - **[security · low]** zlib vulnerability remediation - `zlib` is updated with remediation for `CVE-2026-27171`. - **[breaking]** Equinix Metal (Packet) support removal - Support for Equinix Metal (Packet) is dropped. - **[breaking]** `Rackspace` support removal - Support for `Rackspace`, including OnMetal, is dropped. - **[breaking]** The `Oklo` release codename, removed - The `Oklo` release codename is dropped. - **[breaking]** VMware "insecure" image removal - The VMware "insecure" image is dropped. - **[breaking]** Vagrant VirtualBox image removal - The Vagrant VirtualBox image is dropped. - **[breaking]** `Vagrant` 2.2.5 requirement - `Vagrant` 2.2.5 is now required. ## Other recorded changes - 56 (value_changed 46, added 5, defect_corrected 2, constraint_changed 2, renamed 1) [Full analysis](https://ratatosk.io/en/releases/flatcar/stable-4757.2.0) [Original release notes](https://github.com/flatcar/scripts/releases/tag/stable-4757.2.0)