beta-4820.1.1

Changes since Beta 4820.1.0

Security fixes:

• Linux (CVE-2026-99092, CVE-2026-99098, CVE-2026-99082, CVE-2026-99085, CVE-2026-99083, CVE-2026-99019, CVE-2026-99044, CVE-2026-99041, CVE-2026-99014, CVE-2026-99028, CVE-2026-99027, CVE-2026-98974, CVE-2026-98981, CVE-2026-99009, CVE-2026-98977, CVE-2026-99002, CVE-2026-98993, CVE-2026-98985, CVE-2026-98975, CVE-2026-98916)

Bug fixes:

• Alpha and Beta only: Fixed SSH client that was broken by a configuration file with bad permissions being unreadable. (scripts#4338)

Changes:

• sysext-podman: Alpha and Beta only: Fix crun (and therefore podman) that was broken by a missing libblake3 library.
• The system CA bundle now only contains roots that Mozilla trusts for TLS. The 49 roots that Mozilla trusts only for S/MIME (email) were removed from /etc/ssl/certs and ca-certificates.crt, reducing the bundle from 167 to 118 roots. (scripts#4333)

Updates:

• Linux (6.12.114)
• ca-certificates (3.132)