Merge pull request #555 from vigh-m/core-kit-v9.1.0

Prepare v9.1.0 release

Author: vigh-m

CHANGELOG.md

@@ -1,3 +1,25 @@
+# v9.1.0 (2025-06-23)
+
+## OS Changes
+* Add an option to write settings once during boot ([#548])
+
+### Third Party Package Updates
+- Update `libcrypto` patches ([#546])
+- Update to latest versions of kubernetes packages ([#551])
+- Update `nvidia-container-toolkit` and `libnvidia-container` to 1.17.8 ([#552])
+- Update core system utilities: `kexec-tools`, `open-vm-tools`, and `iputils` ([#553])
+
+## Orchestrator Changes
+### Kubernetes
+* Add support for Kubernetes setting `memory-swap-behaviour` ([#541]) Thanks @teskje
+
+[#541]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/541
+[#546]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/546
+[#548]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/548
+[#551]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/551
+[#552]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/552
+[#553]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/553
+
 # v9.0.0 (2025-06-10)
 
 ## OS Changes

Twoliter.toml

@@ -1,5 +1,5 @@
 schema-version = 1
-release-version = "9.0.0"
+release-version = "9.1.0"
 
 [vendor.bottlerocket]
 registry = "public.ecr.aws/bottlerocket"

advisories/9.1.0/BRSA-yrtutyr4c95s.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-yrtutyr4c95s"
+title = "iputils CVE-2025-472688"
+cve = "CVE-2025-472688"
+severity = "medium"
+description = "A flaw was found in iputils where a specially crafted ICMP reply could trigger an integer overflow"
+
+[[advisory.products]]
+package-name = "iputils"
+patched-version = "20250605"
+patched-epoch = "1"
+
+[updateinfo]
+author = "vighmah"
+issue-date = 2025-06-23T16:55:50Z
+arches = ["x86_64", "aarch64"]
+version = "9.1.0"