v1.2.2

Talos 1.2.2 (2022-09-13)

Welcome to the v1.2.2 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

CVE-2022-36103

This releases fixes CVE-2022-36103.

Component Updates

• Linux: 5.15.67

Talos is built with Go 1.19.1.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev

Changes

8 commits

• dc8bf1717 release(v1.2.2): prepare release
• 6ba6b91ae test: fix api controller test
• b644fbde2 fix: stop worker nodes from acting as apid routers
• d0a0341f6 fix: never sign client certificate requests in trustd
• 39c68b625 fix: include all node addresses into etcd cert SANs
• 09140a855 fix: list COSI APIs for the apid authenticator
• 015c6d438 fix: pass a pointer to specs.Mount into protoenc.Marshal
• 577ff4fb8 chore: bump kernel to 5.15.67

Changes from siderolabs/pkgs

1 commit

• siderolabs/pkgs@0f4351f chore: bump kernel to 5.15.67

Changes from talos-systems/crypto

1 commit

• siderolabs/crypto@f60380e feat: allow CSR template subject field to be overridden

Dependency Changes

• github.com/siderolabs/pkgs v1.2.0-9-gb264dc2 -> v1.2.0-10-g0f4351f
• github.com/talos-systems/crypto v0.3.6 -> v0.3.7

Previous release can be found at v1.2.1

Images

ghcr.io/siderolabs/flannel:v0.19.2
ghcr.io/siderolabs/install-cni:v1.2.0-1-g116c5a9
docker.io/coredns/coredns:1.9.3
gcr.io/etcd-development/etcd:v3.5.4
k8s.gcr.io/kube-apiserver:v1.25.0
k8s.gcr.io/kube-controller-manager:v1.25.0
k8s.gcr.io/kube-scheduler:v1.25.0
k8s.gcr.io/kube-proxy:v1.25.0
ghcr.io/siderolabs/kubelet:v1.25.0
ghcr.io/siderolabs/installer:v1.2.2
k8s.gcr.io/pause:3.6