AWS linux medium security documentation change
Summary
Updated AL2023.10 release notes with new package versions, added new packages (including kernel6.18, mariadb114, python3.14, ruby3.4, rclone), and updated package counts
Security assessment
The update includes multiple security-relevant package updates: kernel6.12 update (6.12.68 to 6.12.74) and kernel6.18 addition (6.18.15) which typically include security patches; firefox update (140.7.0 to 140.8.0) which addresses browser vulnerabilities; libssh update (0.10.6-1.amzn2023.0.3 to 0.10.6-1.amzn2023.0.5) indicating security fixes; php updates (8.3.29 to 8.3.30, 8.4.16 to 8.4.18, 8.5.1 to 8.5.3) which often include security patches; nodejs updates (20.20.0 to 20.20.1, 22.22.0 to 22.22.1, 24.13.0 to 24.14.0) addressing vulnerabilities; and postgresql updates (16.11 to 16.12, 17.7 to 17.8) which include security fixes. The addition of kernel-livepatch packages suggests live patching capabilities for security vulnerabilities without rebooting.
Diff
diff --git a/linux/al2023/release-notes/new-AL1-AL2023.10.md b/linux/al2023/release-notes/new-AL1-AL2023.10.md index e3b43192d..8f9a0a2a3 100644 --- a//linux/al2023/release-notes/new-AL1-AL2023.10.md +++ b//linux/al2023/release-notes/new-AL1-AL2023.10.md @@ -5 +5 @@ -Comparing AL1 version 2018.03 to AL2023.10 version [2023.10.20260216](./relnotes-2023.10.20260216.html). +Comparing AL1 version 2018.03 to AL2023.10 version [2023.10.20260325](./relnotes-2023.10.20260325.html). @@ -9,5 +9,5 @@ Package Type | Number of new packages in AL2023.10 compared to AL1 -Source RPMs | 1601 -Total Binary RPMs | 6892 -`noarch` binary RPMs | 2440 -`x86_64` binary RPMs | 2248 -`aarch64` binary RPMs | 2204 +Source RPMs | 1613 +Total Binary RPMs | 7037 +`noarch` binary RPMs | 2464 +`x86_64` binary RPMs | 2309 +`aarch64` binary RPMs | 2264 @@ -94 +94,2 @@ Source RPM | RPM | Architectures | Version -`appstream-data` | `appstream-data` | noarch | 2023-102.amzn2023 +`appstream-data` | `appstream-data` | noarch | 2023-103.amzn2023 +`appstream-data-spal` | noarch @@ -104 +105 @@ Source RPM | RPM | Architectures | Version -`assertj-core` | `assertj-core` | noarch | 3.19.0-5.amzn2023.0.3 +`assertj-core` | `assertj-core` | noarch | 3.19.0-5.amzn2023.0.4 @@ -299 +300 @@ Source RPM | RPM | Architectures | Version -`container-selinux` | `container-selinux` | noarch | 2.242.0-1.amzn2023 +`container-selinux` | `container-selinux` | noarch | 2.245.0-1.amzn2023 @@ -352 +353 @@ Source RPM | RPM | Architectures | Version -`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.10-1.amzn2023 +`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.11-1.amzn2023 @@ -416 +417 @@ Source RPM | RPM | Architectures | Version -`ecs-service-connect-agent` | `ecs-service-connect-agent` | aarch64, x86_64 | v1.34.12.0-1.amzn2023 +`ecs-service-connect-agent` | `ecs-service-connect-agent` | aarch64, x86_64 | v1.34.12.1-1.amzn2023 @@ -445 +446 @@ Source RPM | RPM | Architectures | Version -`evolution-data-server` | `evolution-data-server` | aarch64, x86_64 | 3.54.3-1.amzn2023.0.1 +`evolution-data-server` | `evolution-data-server` | aarch64, x86_64 | 3.54.3-1.amzn2023.0.2 @@ -456 +457 @@ Source RPM | RPM | Architectures | Version -`exiv2` | `exiv2` | aarch64, x86_64 | 0.28.5-129.amzn2023 +`exiv2` | `exiv2` | aarch64, x86_64 | 0.28.5-132.amzn2023 @@ -467 +468 @@ Source RPM | RPM | Architectures | Version -`firefox` | `firefox` | aarch64, x86_64 | 140.7.0-1.amzn2023.0.3 +`firefox` | `firefox` | aarch64, x86_64 | 140.8.0-1.amzn2023.0.1 @@ -529 +530 @@ Source RPM | RPM | Architectures | Version -`freerdp` | `freerdp` | aarch64, x86_64 | 3.6.3-1.amzn2023.0.3 +`freerdp` | `freerdp` | aarch64, x86_64 | 3.6.3-1.amzn2023.0.5 @@ -643,0 +645 @@ Source RPM | RPM | Architectures | Version +`gnome-app-list` | `gnome-app-list` | noarch | 3.0-1.amzn2023 @@ -689,0 +692,3 @@ Source RPM | RPM | Architectures | Version +`gnome-software` | `gnome-software` | aarch64, x86_64 | 47.5-1.amzn2023 +`gnome-software-devel` | aarch64, x86_64 +`gnome-software-fedora-langpacks` | aarch64, x86_64 @@ -1188 +1193 @@ Source RPM | RPM | Architectures | Version -`gvfs` | `gvfs` | aarch64, x86_64 | 1.56.1-1.amzn2023.0.1 +`gvfs` | `gvfs` | aarch64, x86_64 | 1.56.1-1.amzn2023.0.2 @@ -1232 +1237 @@ Source RPM | RPM | Architectures | Version -`ibus-anthy` | `ibus-anthy` | aarch64, x86_64 | 1.5.16-188.amzn2023 +`ibus-anthy` | `ibus-anthy` | aarch64, x86_64 | 1.5.18-1.amzn2023.0.1 @@ -1371 +1376 @@ Source RPM | RPM | Architectures | Version -`javapackages-bootstrap` | `javapackages-bootstrap` | noarch | 1.5.0^20220105.git9f283b7-3.amzn2023.0.7 +`javapackages-bootstrap` | `javapackages-bootstrap` | noarch | 1.5.0^20220105.git9f283b7-3.amzn2023.0.8 @@ -1422 +1427 @@ Source RPM | RPM | Architectures | Version -`jpegxl` | `jpegxl-doc` | noarch | 0.10.3-54.amzn2023 +`jpegxl` | `jpegxl-doc` | noarch | 0.10.3-55.amzn2023 @@ -1445 +1450 @@ Source RPM | RPM | Architectures | Version -`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.68-92.122.amzn2023 +`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.74-98.124.amzn2023 @@ -1476,0 +1482,2 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.12.73-95.123` | aarch64, x86_64 +`kernel-livepatch-6.12.74-98.124` | aarch64, x86_64 @@ -1478,0 +1486,15 @@ Source RPM | RPM | Architectures | Version +`kernel6.18` | `bpftool6.18` | aarch64, x86_64 | 6.18.15-14.217.amzn2023 +`kernel6.18` | aarch64, x86_64 +`kernel6.18-devel` | aarch64, x86_64 +`kernel6.18-headers` | aarch64, x86_64 +`kernel6.18-libbpf` | aarch64, x86_64 +`kernel6.18-libbpf-devel` | aarch64, x86_64 +`kernel6.18-libbpf-static` | aarch64, x86_64 +`kernel6.18-modules-extra` | aarch64, x86_64 +`kernel6.18-modules-extra-common` | aarch64, x86_64 +`kernel6.18-tools` | aarch64, x86_64 +`kernel6.18-tools-devel` | aarch64, x86_64 +`kernel-livepatch-6.18.15-14.217` | aarch64, x86_64 +`kernel-livepatch-6.18.8-9.213` | aarch64, x86_64 +`perf6.18` | aarch64, x86_64 +`python3-perf6.18` | aarch64, x86_64 @@ -1494 +1516 @@ Source RPM | RPM | Architectures | Version -`kiwi` | `dracut-kiwi-lib` | noarch | 10.2.26-3.amzn2023 +`kiwi` | `dracut-kiwi-lib` | noarch | 10.2.38-1.amzn2023 @@ -1912 +1934 @@ Source RPM | RPM | Architectures | Version -`libde265` | `libde265` | aarch64, x86_64 | 1.0.16-1.amzn2023.0.1 +`libde265` | `libde265` | aarch64, x86_64 | 1.0.16-1.amzn2023.0.2 @@ -2086 +2108 @@ Source RPM | RPM | Architectures | Version -`libpq` | `libpq` | aarch64, x86_64 | 17.7-1.amzn2023.0.1 +`libpq` | `libpq` | aarch64, x86_64 | 17.8-1.amzn2023.0.1 @@ -2148 +2170 @@ Source RPM | RPM | Architectures | Version -`libsodium` | `libsodium` | aarch64, x86_64 | 1.0.19-4.amzn2023 +`libsodium` | `libsodium` | aarch64, x86_64 | 1.0.19-5.amzn2023 @@ -2158 +2180 @@ Source RPM | RPM | Architectures | Version -`libsoup3` | `libsoup3` | aarch64, x86_64 | 3.6.5-55.amzn2023 +`libsoup3` | `libsoup3` | aarch64, x86_64 | 3.6.5-56.amzn2023 @@ -2163 +2185 @@ Source RPM | RPM | Architectures | Version -`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.3 +`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.5 @@ -2404,0 +2427,16 @@ Source RPM | RPM | Architectures | Version +`mariadb114` | `mariadb114` | aarch64, x86_64 | 11.4.10-1.amzn2023.0.1 +`mariadb114-backup` | aarch64, x86_64 +`mariadb114-client-utils` | aarch64, x86_64 +`mariadb114-common` | aarch64, x86_64 +`mariadb114-connect-engine` | aarch64, x86_64 +`mariadb114-cracklib-password-check` | aarch64, x86_64 +`mariadb114-devel` | aarch64, x86_64 +`mariadb114-errmsg` | aarch64, x86_64 +`mariadb114-gssapi-server` | aarch64, x86_64 +`mariadb114-oqgraph-engine` | aarch64, x86_64 +`mariadb114-pam` | aarch64, x86_64 +`mariadb114-rocksdb-engine` | x86_64 +`mariadb114-server` | aarch64, x86_64 +`mariadb114-server-utils` | aarch64, x86_64 +`mariadb114-sphinx-engine` | aarch64, x86_64 +`mariadb114-test` | aarch64, x86_64 @@ -2649 +2687 @@ Source RPM | RPM | Architectures | Version -`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.0-1.amzn2023.0.1 +`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.1-1.amzn2023.0.2 @@ -2657 +2695 @@ Source RPM | RPM | Architectures | Version -`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.0-1.amzn2023.0.1 +`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.1-1.amzn2023.0.1 @@ -2665 +2703 @@ Source RPM | RPM | Architectures | Version -`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.13.0-1.amzn2023.0.1 +`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.14.0-1.amzn2023.0.1 @@ -2685 +2723 @@ Source RPM | RPM | Architectures | Version -`nvidia-release` | `nvidia-release` | noarch | 2023-4.amzn2023 +`nvidia-release` | `nvidia-release` | noarch | 2023-5.amzn2023 @@ -2725 +2763 @@ Source RPM | RPM | Architectures | Version -`ocaml` | `ocaml` | aarch64, x86_64 | 4.13.1-4.amzn2023.0.2 +`ocaml` | `ocaml` | aarch64, x86_64 | 4.13.1-4.amzn2023.0.3 @@ -2760 +2798 @@ Source RPM | RPM | Architectures | Version -`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.6 +`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.7 @@ -2882 +2920 @@ Source RPM | RPM | Architectures | Version -`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.004-5.amzn2023.0.2 +`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.007-12.amzn2023.0.1 @@ -2914 +2952 @@ Source RPM | RPM | Architectures | Version -`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.37-2.amzn2023.0.2 +`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.45-2.amzn2023.0.1 @@ -3268 +3306 @@ Source RPM | RPM | Architectures | Version -[`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | [`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | aarch64, x86_64 | 8.3.29-1.amzn2023.0.1 +[`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | [`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | aarch64, x86_64 | 8.3.30-1.amzn2023.0.1 @@ -3307 +3345 @@ Source RPM | RPM | Architectures | Version -`php8.4` | `php8.4` | aarch64, x86_64 | 8.4.16-1.amzn2023.0.1 +`php8.4` | `php8.4` | aarch64, x86_64 | 8.4.18-1.amzn2023.0.1 @@ -3345 +3383 @@ Source RPM | RPM | Architectures | Version -`php8.5` | `php8.5` | aarch64, x86_64 | 8.5.1-1.amzn2023.0.1 +`php8.5` | `php8.5` | aarch64, x86_64 | 8.5.3-1.amzn2023.0.1 @@ -3468 +3506 @@ Source RPM | RPM | Architectures | Version -`postgresql16` | `postgresql16` | aarch64, x86_64 | 16.11-1.amzn2023.0.1 +`postgresql16` | `postgresql16` | aarch64, x86_64 | 16.12-1.amzn2023.0.1 @@ -3484 +3522 @@ Source RPM | RPM | Architectures | Version -`postgresql17` | `postgresql17` | aarch64, x86_64 | 17.7-1.amzn2023.0.1 +`postgresql17` | `postgresql17` | aarch64, x86_64 | 17.8-1.amzn2023.0.1 @@ -3580 +3618 @@ Source RPM | RPM | Architectures | Version -[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.14-1.amzn2023.0.3 +[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.14-1.amzn2023.0.5 @@ -3634 +3672 @@ Source RPM | RPM | Architectures | Version -`python3.13-pip` | `python3.13-pip` | noarch | 24.2-259.amzn2023.0.3 +`python3.13-pip` | `python3.13-pip` | noarch | 24.2-259.amzn2023.0.4 @@ -3662,0 +3701,22 @@ Source RPM | RPM | Architectures | Version +`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.2-2.amzn2023.0.3 +`python3.14-debug` | aarch64, x86_64 +`python3.14-devel` | aarch64, x86_64 +`python3.14-freethreading` | aarch64, x86_64 +`python3.14-freethreading-debug` | aarch64, x86_64 +`python3.14-freethreading-devel` | aarch64, x86_64 +`python3.14-freethreading-idle` | aarch64, x86_64 +`python3.14-freethreading-libs` | aarch64, x86_64 +`python3.14-freethreading-test` | aarch64, x86_64 +`python3.14-freethreading-tkinter` | aarch64, x86_64 +`python3.14-idle` | aarch64, x86_64 +`python3.14-libs` | aarch64, x86_64 +`python3.14-test` | aarch64, x86_64 +`python3.14-tkinter` | aarch64, x86_64 +`python3.14-flit-core` | `python3.14-flit-core` | noarch | 3.12.0-1.amzn2023.0.3 +`python3.14-packaging` | `python3.14-packaging` | noarch | 25.0-1.amzn2023.0.2 +`python3.14-pip` | `python3.14-pip` | noarch | 25.1.1-1.amzn2023.0.1 +`python3.14-pip-wheel` | noarch +`python3.14-setuptools` | `python3.14-setuptools` | noarch | 78.1.1-1.amzn2023.0.2 +`python3.14-setuptools-wheel` | noarch +`python3.14-wheel` | `python3.14-wheel` | noarch | 0.45.1-1.amzn2023.0.2 +`python3.14-wheel-wheel` | noarch @@ -3750 +3810 @@ Source RPM | RPM | Architectures | Version -`python-flask` | `python3-flask` | noarch | 1.1.2-5.amzn2023.0.3 +`python-flask` | `python3-flask` | noarch | 1.1.4-5.amzn2023.0.1 @@ -3798 +3858 @@ Source RPM | RPM | Architectures | Version -`python-jwt` | `python3-jwt` | noarch | 2.4.0-1.amzn2023.0.1 +`python-jwt` | `python3-jwt` | noarch | 2.4.0-1.amzn2023.0.2 @@ -3841 +3901 @@ Source RPM | RPM | Architectures | Version -`python-pillow` | `python3-pillow` | aarch64, x86_64 | 9.4.0-2.amzn2023.0.6 +`python-pillow` | `python3-pillow` | aarch64, x86_64 | 9.4.0-2.amzn2023.0.7 @@ -3871 +3931 @@ Source RPM | RPM | Architectures | Version -`python-pycurl` | `python3-pycurl` | aarch64, x86_64 | 7.45.1-1.amzn2023.0.4