AWS Security ChangesHomeSearch

AWS linux documentation change

Service: linux · 2026-03-07 · Documentation low

File: linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md

Summary

Added new packages: alsa-lib, openscap, protobuf, vsftpd and related components

Security assessment

The addition of openscap (security compliance scanner) and vsftpd (FTP server) introduces documentation about security tools/services. However, there's no explicit evidence these additions address specific vulnerabilities rather than general feature updates.

Diff

diff --git a/linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md b/linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md
index 697ef84a3..81b62f991 100644
--- a//linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md
+++ b//linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md
@@ -5 +5 @@
-Comparing AL2023.6 version 2023.6.20241010 to AL2023.10 version [2023.10.20260202](./relnotes-2023.10.20260202.html). 
+Comparing AL2023.6 version 2023.6.20241010 to AL2023.10 version [2023.10.20260216](./relnotes-2023.10.20260216.html). 
@@ -9,5 +9,5 @@ Package Type | Count
-Source | 345  
-Total Binary | 5531  
-`noarch` binary RPMs | 2812  
-`x86_64` binary RPMs | 1364  
-`aarch64` binary RPMs | 1355  
+Source | 353  
+Total Binary | 5625  
+`noarch` binary RPMs | 2852  
+`x86_64` binary RPMs | 1391  
+`aarch64` binary RPMs | 1382  
@@ -25 +25,5 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`amazon-cloudwatch-agent` |  `amazon-cloudwatch-agent` | aarch64, x86_64 | 1.300044.0-1.amzn2023 | 1.300062.1-1.amzn2023  
+`alsa-lib` |  `alsa-lib` | aarch64, x86_64 | 1.2.7.2-1.amzn2023.0.2 | 1.2.7.2-1.amzn2023.0.3  
+`alsa-lib-devel` | aarch64, x86_64  
+`alsa-topology` | noarch  
+`alsa-ucm` | noarch  
+`amazon-cloudwatch-agent` |  `amazon-cloudwatch-agent` | aarch64, x86_64 | 1.300044.0-1.amzn2023 | 1.300064.1-1.amzn2023  
@@ -30 +34 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`amazon-ssm-agent` |  `amazon-ssm-agent` | aarch64, x86_64 | 3.3.859.0-1.amzn2023 | 3.3.3572.0-1.amzn2023  
+`amazon-ssm-agent` |  `amazon-ssm-agent` | aarch64, x86_64 | 3.3.859.0-1.amzn2023 | 3.3.3598.0-1.amzn2023  
@@ -90 +94 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`awscli-2` |  `awscli-2` | noarch | 2.15.30-1.amzn2023.0.1 | 2.32.22-1.amzn2023.0.1  
+`awscli-2` |  `awscli-2` | noarch | 2.15.30-1.amzn2023.0.1 | 2.33.15-1.amzn2023.0.1  
@@ -190 +194 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`containerd` |  `containerd` | aarch64, x86_64 | 1.7.22-1.amzn2023.0.2 | 2.1.5-1.amzn2023.0.5  
+`containerd` |  `containerd` | aarch64, x86_64 | 1.7.22-1.amzn2023.0.2 | 2.2.1-1.amzn2023.0.1  
@@ -193 +197 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`coreutils` |  `coreutils` | aarch64, x86_64 | 8.32-30.amzn2023.0.3 | 8.32-30.amzn2023.0.4  
+`coreutils` |  `coreutils` | aarch64, x86_64 | 8.32-30.amzn2023.0.3 | 8.32-30.amzn2023.0.5  
@@ -198 +202 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`credentials-fetcher` |  `credentials-fetcher` | aarch64, x86_64 | 1.3.6-0.amzn2023 | 1.3.8-0.amzn2023  
+`credentials-fetcher` |  `credentials-fetcher` | aarch64, x86_64 | 1.3.6-0.amzn2023 | 2.0.0-1.amzn2023.0.1  
@@ -212 +216 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-[`curl`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#curl-minimal) |  [`curl`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#curl-minimal) | aarch64, x86_64 | 8.5.0-1.amzn2023.0.4 | 8.15.0-4.amzn2023.0.1  
+[`curl`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#curl-minimal) |  [`curl`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#curl-minimal) | aarch64, x86_64 | 8.5.0-1.amzn2023.0.4 | 8.17.0-1.amzn2023.0.1  
@@ -236 +240 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`docker` |  `docker` | aarch64, x86_64 | 25.0.6-1.amzn2023.0.2 | 25.0.14-1.amzn2023.0.1  
+`docker` |  `docker` | aarch64, x86_64 | 25.0.6-1.amzn2023.0.2 | 25.0.14-1.amzn2023.0.2  
@@ -281,2 +285,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-[`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) |  [`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) | aarch64, x86_64 | 1.87.0-1.amzn2023 | 1.101.2-1.amzn2023  
-`ecs-service-connect-agent` |  `ecs-service-connect-agent` | aarch64, x86_64 | v1.29.6.1-1.amzn2023 | v1.34.4.2-1.amzn2023  
+[`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) |  [`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) | aarch64, x86_64 | 1.87.0-1.amzn2023 | 1.101.3-1.amzn2023  
+`ecs-service-connect-agent` |  `ecs-service-connect-agent` | aarch64, x86_64 | v1.29.6.1-1.amzn2023 | v1.34.12.0-1.amzn2023  
@@ -303 +307 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`expat` |  `expat` | aarch64, x86_64 | 2.5.0-1.amzn2023.0.4 | 2.6.3-1.amzn2023.0.3  
+`expat` |  `expat` | aarch64, x86_64 | 2.5.0-1.amzn2023.0.4 | 2.6.3-1.amzn2023.0.4  
@@ -334 +338 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`fontforge` |  `fontforge` | aarch64, x86_64 | 20201107-3.amzn2023.0.3 | 20201107-3.amzn2023.0.5  
+`fontforge` |  `fontforge` | aarch64, x86_64 | 20201107-3.amzn2023.0.3 | 20201107-3.amzn2023.0.6  
@@ -337 +341 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`freerdp` |  `freerdp` | aarch64, x86_64 | 3.6.3-1.amzn2023 | 3.6.3-1.amzn2023.0.2  
+`freerdp` |  `freerdp` | aarch64, x86_64 | 3.6.3-1.amzn2023 | 3.6.3-1.amzn2023.0.3  
@@ -654 +658 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-[`gnupg2`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#gnupg-minimal) |  [`gnupg2`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#gnupg-minimal) | aarch64, x86_64 | 2.3.7-1.amzn2023.0.4 | 2.3.7-1.amzn2023.0.6  
+[`gnupg2`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#gnupg-minimal) |  [`gnupg2`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#gnupg-minimal) | aarch64, x86_64 | 2.3.7-1.amzn2023.0.4 | 2.3.7-1.amzn2023.0.7  
@@ -668 +672 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) |  [`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | aarch64, x86_64 | 1.22.7-1.amzn2023.0.1 | 1.24.12-1.amzn2023.0.1  
+[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) |  [`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | aarch64, x86_64 | 1.22.7-1.amzn2023.0.1 | 1.24.13-1.amzn2023.0.1  
@@ -1245 +1249 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`libpng` |  `libpng` | aarch64, x86_64 | 1.6.37-10.amzn2023.0.6 | 1.6.37-10.amzn2023.0.9  
+`libpng` |  `libpng` | aarch64, x86_64 | 1.6.37-10.amzn2023.0.6 | 1.6.37-10.amzn2023.0.10  
@@ -1266 +1270 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`libsoup` |  `libsoup` | aarch64, x86_64 | 2.72.0-6.amzn2023.0.2 | 2.72.0-6.amzn2023.0.10  
+`libsoup` |  `libsoup` | aarch64, x86_64 | 2.72.0-6.amzn2023.0.2 | 2.72.0-6.amzn2023.0.11  
@@ -1319,0 +1324,3 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
+`log4j` |  `log4j` | noarch | 2.17.2-1.amzn2023.0.4 | 2.17.2-1.amzn2023.0.5  
+`log4j-jcl` | noarch  
+`log4j-slf4j` | noarch  
@@ -1378,0 +1386,3 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
+`munge` |  `munge` | aarch64, x86_64 | 0.5.14-7.amzn2023.0.4 | 0.5.14-7.amzn2023.0.5  
+`munge-devel` | aarch64, x86_64  
+`munge-libs` | aarch64, x86_64  
@@ -1393 +1403 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`nginx` |  `nginx` | aarch64, x86_64 | 1.24.0-1.amzn2023.0.4 | 1.28.1-1.amzn2023.0.1  
+`nginx` |  `nginx` | aarch64, x86_64 | 1.24.0-1.amzn2023.0.4 | 1.28.2-1.amzn2023.0.1  
@@ -1432 +1442,10 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`openssh` |  `openssh` | aarch64, x86_64 | 8.7p1-8.amzn2023.0.12 | 8.7p1-8.amzn2023.0.15  
+`openscap` |  `openscap` | aarch64, x86_64 | 1.3.9-1.amzn2023.0.1 | 1.3.13-1.amzn2023.0.1  
+`openscap-containers` | noarch  
+`openscap-devel` | aarch64, x86_64  
+`openscap-engine-sce` | aarch64, x86_64  
+`openscap-engine-sce-devel` | aarch64, x86_64  
+`openscap-perl` | aarch64, x86_64  
+`openscap-python3` | aarch64, x86_64  
+`openscap-scanner` | aarch64, x86_64  
+`openscap-utils` | aarch64, x86_64  
+`openssh` |  `openssh` | aarch64, x86_64 | 8.7p1-8.amzn2023.0.12 | 8.7p1-8.amzn2023.0.16  
@@ -1437 +1456 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`openssl` |  `openssl` | aarch64, x86_64 | 3.0.8-1.amzn2023.0.16 | 3.2.2-1.amzn2023.0.4  
+`openssl` |  `openssl` | aarch64, x86_64 | 3.0.8-1.amzn2023.0.16 | 3.2.2-1.amzn2023.0.5  
@@ -1730,0 +1750,10 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
+`protobuf` |  `protobuf` | aarch64, x86_64 | 3.19.6-1.amzn2023.0.1 | 3.19.6-1.amzn2023.0.3  
+`protobuf-compiler` | aarch64, x86_64  
+`protobuf-devel` | aarch64, x86_64  
+`protobuf-emacs` | noarch  
+`protobuf-lite` | aarch64, x86_64  
+`protobuf-lite-devel` | aarch64, x86_64  
+`protobuf-lite-static` | aarch64, x86_64  
+`protobuf-static` | aarch64, x86_64  
+`protobuf-vim` | noarch  
+`python3-protobuf` | aarch64, x86_64  
@@ -1733,0 +1763,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
+`publicsuffix-list` |  `publicsuffix-list` | noarch | 20240212-61.amzn2023 | 20260116-1.amzn2023.0.1  
+`publicsuffix-list-dafsa` | noarch  
@@ -1759 +1790 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`python-awscrt` |  `python3-awscrt` | aarch64, x86_64 | 0.19.19-1.amzn2023.0.1 | 0.29.1-1.amzn2023.0.1  
+`python-awscrt` |  `python3-awscrt` | aarch64, x86_64 | 0.19.19-1.amzn2023.0.1 | 0.31.1-1.amzn2023.0.1  
@@ -1841 +1872 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`runc` |  `runc` | aarch64, x86_64 | 1.1.14-1.amzn2023.0.1 | 1.3.4-1.amzn2023.0.1  
+`runc` |  `runc` | aarch64, x86_64 | 1.1.14-1.amzn2023.0.1 | 1.3.4-1.amzn2023.0.2  
@@ -1843 +1874 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-[`rust`](https://docs.aws.amazon.com/linux/al2023/ug/rust.html) |  `cargo` | aarch64, x86_64 | 1.68.2-1.amzn2023.0.6 | 1.92.0-1.amzn2023.0.1  
+[`rust`](https://docs.aws.amazon.com/linux/al2023/ug/rust.html) |  `cargo` | aarch64, x86_64 | 1.68.2-1.amzn2023.0.6 | 1.93.0-1.amzn2023.0.1  
@@ -1974 +2005 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
-`system-release` |  `amazon-linux-repo-cdn` | noarch | 2023.6.20241010-0.amzn2023 | 2023.10.20260202-0.amzn2023  
+`system-release` |  `amazon-linux-repo-cdn` | noarch | 2023.6.20241010-0.amzn2023 | 2023.10.20260216-0.amzn2023  
@@ -2040,0 +2072 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
+`vsftpd` |  `vsftpd` | aarch64, x86_64 | 3.0.5-1.amzn2023.0.2 | 3.0.5-1.amzn2023.0.3  
@@ -2086,0 +2119,5 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version
+`zlib` |  `minizip-compat` | aarch64, x86_64 | 1.2.11-33.amzn2023.0.5 | 1.2.11-33.amzn2023.0.6  
+`minizip-compat-devel` | aarch64, x86_64  
+`zlib` | aarch64, x86_64  
+`zlib-devel` | aarch64, x86_64  
+`zlib-static` | aarch64, x86_64