# Flatcar Container Linux stable-4757.2.3

> Provisioning & Runtime · 2026-10-29

A security and maintenance release with Linux vulnerability fixes, bundled component updates, and a narrower system CA trust store. Linux 6.12.114 and ca-certificates 3.132 are among the bundled component updates, while the CA bundle now contains only Mozilla TLS-trusted roots.

## Action needed
- **[security · high]** `Linux` vulnerability fixes
  - `Linux` vulnerability fixes cover `CVE-2026-99092`, `CVE-2026-99098`, `CVE-2026-99082`, `CVE-2026-99085`, `CVE-2026-99083`, `CVE-2026-99019`, `CVE-2026-99044`, `CVE-2026-99041`, `CVE-2026-99014`, `CVE-2026-99028`, `CVE-2026-99027`, `CVE-2026-98974`, `CVE-2026-98981`, `CVE-2026-99009`, `CVE-2026-98977`, `CVE-2026-99002`, `CVE-2026-98993`, `CVE-2026-98985`, `CVE-2026-98975`, and `CVE-2026-98916`.
- **[breaking]** System CA bundle trust roots
  - The system CA bundle now contains only roots that Mozilla trusts for TLS. The 49 roots trusted only for S/MIME were removed from `/etc/ssl/certs` and `ca-certificates.crt`, reducing the bundle from 167 to 118 roots.

## Other recorded changes
- 2 (value_changed 2)

[Full analysis](https://ratatosk.io/en/releases/flatcar/stable-4757.2.3)

[Original release notes](https://github.com/flatcar/scripts/releases/tag/stable-4757.2.3)