AWS linux medium security documentation change
Summary
Updated Amazon Linux 2023.10 release notes with new package versions, including kernel updates (6.12.74, 6.18.15), security-sensitive packages (libssh, PHP, Node.js, PostgreSQL, Python, Ruby), and new packages (mariadb114, python3.14, ruby3.4, kernel6.18).
Security assessment
The update includes multiple security-relevant package version bumps: libssh (0.10.6-1.amzn2023.0.3 to 0.10.6-1.amzn2023.0.5), kernel6.12 (6.12.68 to 6.12.74), PHP (8.3.29 to 8.3.30, 8.4.16 to 8.4.18, 8.5.1 to 8.5.3), Node.js (20.20.0 to 20.20.1, 22.22.0 to 22.22.1, 24.13.0 to 24.14.0), PostgreSQL (16.11 to 16.12, 17.7 to 17.8), Python JWT (2.4.0-1.amzn2023.0.1 to 2.4.0-1.amzn2023.0.2), and Tomcat (9.0.111 to 9.0.115, 10.1.48 to 10.1.52). These version increments typically include security patches, though the diff doesn't specify CVEs. The addition of kernel-livepatch packages (6.12.73-95.123, 6.12.74-98.124, 6.18.15-14.217, 6.18.8-9.213) indicates live patching for security vulnerabilities without reboots.
Diff
diff --git a/linux/al2023/release-notes/new-AL2-AL2023.10.md b/linux/al2023/release-notes/new-AL2-AL2023.10.md index 8039c9b09..32bd9a3f7 100644 --- a//linux/al2023/release-notes/new-AL2-AL2023.10.md +++ b//linux/al2023/release-notes/new-AL2-AL2023.10.md @@ -5 +5 @@ -Comparing AL2 version 2026-03-05 to AL2023.10 version [2023.10.20260216](./relnotes-2023.10.20260216.html). +Comparing AL2 version 2026-04-07 to AL2023.10 version [2023.10.20260325](./relnotes-2023.10.20260325.html). @@ -9,5 +9,5 @@ Package Type | Number of new packages in AL2023.10 compared to AL2 -Source RPMs | 1203 -Total Binary RPMs | 4392 -`noarch` binary RPMs | 1554 -`x86_64` binary RPMs | 1425 -`aarch64` binary RPMs | 1413 +Source RPMs | 1214 +Total Binary RPMs | 4534 +`noarch` binary RPMs | 1577 +`x86_64` binary RPMs | 1485 +`aarch64` binary RPMs | 1472 @@ -60 +60 @@ Source RPM | RPM | Architectures | Version -`assertj-core` | `assertj-core` | noarch | 3.19.0-5.amzn2023.0.3 +`assertj-core` | `assertj-core` | noarch | 3.19.0-5.amzn2023.0.4 @@ -181 +181 @@ Source RPM | RPM | Architectures | Version -`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.10-1.amzn2023 +`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.11-1.amzn2023 @@ -382,0 +383 @@ Source RPM | RPM | Architectures | Version +`gnome-app-list` | `gnome-app-list` | noarch | 3.0-1.amzn2023 @@ -389,0 +391,3 @@ Source RPM | RPM | Architectures | Version +`gnome-software` | `gnome-software` | aarch64, x86_64 | 47.5-1.amzn2023 +`gnome-software-devel` | aarch64, x86_64 +`gnome-software-fedora-langpacks` | aarch64, x86_64 @@ -469 +473 @@ Source RPM | RPM | Architectures | Version -`ibus-anthy` | `ibus-anthy` | aarch64, x86_64 | 1.5.16-188.amzn2023 +`ibus-anthy` | `ibus-anthy` | aarch64, x86_64 | 1.5.18-1.amzn2023.0.1 @@ -553 +557 @@ Source RPM | RPM | Architectures | Version -`javapackages-bootstrap` | `javapackages-bootstrap` | noarch | 1.5.0^20220105.git9f283b7-3.amzn2023.0.7 +`javapackages-bootstrap` | `javapackages-bootstrap` | noarch | 1.5.0^20220105.git9f283b7-3.amzn2023.0.8 @@ -595 +599 @@ Source RPM | RPM | Architectures | Version -`jpegxl` | `jpegxl-doc` | noarch | 0.10.3-54.amzn2023 +`jpegxl` | `jpegxl-doc` | noarch | 0.10.3-55.amzn2023 @@ -608 +612 @@ Source RPM | RPM | Architectures | Version -`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.68-92.122.amzn2023 +`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.74-98.124.amzn2023 @@ -639,0 +644,2 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.12.73-95.123` | aarch64, x86_64 +`kernel-livepatch-6.12.74-98.124` | aarch64, x86_64 @@ -641,0 +648,15 @@ Source RPM | RPM | Architectures | Version +`kernel6.18` | `bpftool6.18` | aarch64, x86_64 | 6.18.15-14.217.amzn2023 +`kernel6.18` | aarch64, x86_64 +`kernel6.18-devel` | aarch64, x86_64 +`kernel6.18-headers` | aarch64, x86_64 +`kernel6.18-libbpf` | aarch64, x86_64 +`kernel6.18-libbpf-devel` | aarch64, x86_64 +`kernel6.18-libbpf-static` | aarch64, x86_64 +`kernel6.18-modules-extra` | aarch64, x86_64 +`kernel6.18-modules-extra-common` | aarch64, x86_64 +`kernel6.18-tools` | aarch64, x86_64 +`kernel6.18-tools-devel` | aarch64, x86_64 +`kernel-livepatch-6.18.15-14.217` | aarch64, x86_64 +`kernel-livepatch-6.18.8-9.213` | aarch64, x86_64 +`perf6.18` | aarch64, x86_64 +`python3-perf6.18` | aarch64, x86_64 @@ -657 +678 @@ Source RPM | RPM | Architectures | Version -`kiwi` | `dracut-kiwi-lib` | noarch | 10.2.26-3.amzn2023 +`kiwi` | `dracut-kiwi-lib` | noarch | 10.2.38-1.amzn2023 @@ -986 +1007 @@ Source RPM | RPM | Architectures | Version -`libde265` | `libde265` | aarch64, x86_64 | 1.0.16-1.amzn2023.0.1 +`libde265` | `libde265` | aarch64, x86_64 | 1.0.16-1.amzn2023.0.2 @@ -1104 +1125 @@ Source RPM | RPM | Architectures | Version -`libsoup3` | `libsoup3` | aarch64, x86_64 | 3.6.5-55.amzn2023 +`libsoup3` | `libsoup3` | aarch64, x86_64 | 3.6.5-56.amzn2023 @@ -1109 +1130 @@ Source RPM | RPM | Architectures | Version -`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.3 +`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.5 @@ -1246,0 +1268,16 @@ Source RPM | RPM | Architectures | Version +`mariadb114` | `mariadb114` | aarch64, x86_64 | 11.4.10-1.amzn2023.0.1 +`mariadb114-backup` | aarch64, x86_64 +`mariadb114-client-utils` | aarch64, x86_64 +`mariadb114-common` | aarch64, x86_64 +`mariadb114-connect-engine` | aarch64, x86_64 +`mariadb114-cracklib-password-check` | aarch64, x86_64 +`mariadb114-devel` | aarch64, x86_64 +`mariadb114-errmsg` | aarch64, x86_64 +`mariadb114-gssapi-server` | aarch64, x86_64 +`mariadb114-oqgraph-engine` | aarch64, x86_64 +`mariadb114-pam` | aarch64, x86_64 +`mariadb114-rocksdb-engine` | x86_64 +`mariadb114-server` | aarch64, x86_64 +`mariadb114-server-utils` | aarch64, x86_64 +`mariadb114-sphinx-engine` | aarch64, x86_64 +`mariadb114-test` | aarch64, x86_64 @@ -1340 +1377 @@ Source RPM | RPM | Architectures | Version -`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.0-1.amzn2023.0.1 +`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.1-1.amzn2023.0.2 @@ -1348 +1385 @@ Source RPM | RPM | Architectures | Version -`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.0-1.amzn2023.0.1 +`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.1-1.amzn2023.0.1 @@ -1356 +1393 @@ Source RPM | RPM | Architectures | Version -`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.13.0-1.amzn2023.0.1 +`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.14.0-1.amzn2023.0.1 @@ -1369 +1406 @@ Source RPM | RPM | Architectures | Version -`nvidia-release` | `nvidia-release` | noarch | 2023-4.amzn2023 +`nvidia-release` | `nvidia-release` | noarch | 2023-5.amzn2023 @@ -1405 +1442 @@ Source RPM | RPM | Architectures | Version -`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.6 +`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.7 @@ -1463 +1500 @@ Source RPM | RPM | Architectures | Version -`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.004-5.amzn2023.0.2 +`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.007-12.amzn2023.0.1 @@ -1506 +1543 @@ Source RPM | RPM | Architectures | Version -`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.37-2.amzn2023.0.2 +`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.45-2.amzn2023.0.1 @@ -1981 +2018 @@ Source RPM | RPM | Architectures | Version -[`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | [`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | aarch64, x86_64 | 8.3.29-1.amzn2023.0.1 +[`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | [`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | aarch64, x86_64 | 8.3.30-1.amzn2023.0.1 @@ -2020 +2057 @@ Source RPM | RPM | Architectures | Version -`php8.4` | `php8.4` | aarch64, x86_64 | 8.4.16-1.amzn2023.0.1 +`php8.4` | `php8.4` | aarch64, x86_64 | 8.4.18-1.amzn2023.0.1 @@ -2058 +2095 @@ Source RPM | RPM | Architectures | Version -`php8.5` | `php8.5` | aarch64, x86_64 | 8.5.1-1.amzn2023.0.1 +`php8.5` | `php8.5` | aarch64, x86_64 | 8.5.3-1.amzn2023.0.1 @@ -2126 +2163 @@ Source RPM | RPM | Architectures | Version -`postgresql16` | `postgresql16` | aarch64, x86_64 | 16.11-1.amzn2023.0.1 +`postgresql16` | `postgresql16` | aarch64, x86_64 | 16.12-1.amzn2023.0.1 @@ -2142 +2179 @@ Source RPM | RPM | Architectures | Version -`postgresql17` | `postgresql17` | aarch64, x86_64 | 17.7-1.amzn2023.0.1 +`postgresql17` | `postgresql17` | aarch64, x86_64 | 17.8-1.amzn2023.0.1 @@ -2209 +2246 @@ Source RPM | RPM | Architectures | Version -[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.14-1.amzn2023.0.3 +[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.14-1.amzn2023.0.5 @@ -2263 +2300 @@ Source RPM | RPM | Architectures | Version -`python3.13-pip` | `python3.13-pip` | noarch | 24.2-259.amzn2023.0.3 +`python3.13-pip` | `python3.13-pip` | noarch | 24.2-259.amzn2023.0.4 @@ -2291,0 +2329,22 @@ Source RPM | RPM | Architectures | Version +`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.2-2.amzn2023.0.3 +`python3.14-debug` | aarch64, x86_64 +`python3.14-devel` | aarch64, x86_64 +`python3.14-freethreading` | aarch64, x86_64 +`python3.14-freethreading-debug` | aarch64, x86_64 +`python3.14-freethreading-devel` | aarch64, x86_64 +`python3.14-freethreading-idle` | aarch64, x86_64 +`python3.14-freethreading-libs` | aarch64, x86_64 +`python3.14-freethreading-test` | aarch64, x86_64 +`python3.14-freethreading-tkinter` | aarch64, x86_64 +`python3.14-idle` | aarch64, x86_64 +`python3.14-libs` | aarch64, x86_64 +`python3.14-test` | aarch64, x86_64 +`python3.14-tkinter` | aarch64, x86_64 +`python3.14-flit-core` | `python3.14-flit-core` | noarch | 3.12.0-1.amzn2023.0.3 +`python3.14-packaging` | `python3.14-packaging` | noarch | 25.0-1.amzn2023.0.2 +`python3.14-pip` | `python3.14-pip` | noarch | 25.1.1-1.amzn2023.0.1 +`python3.14-pip-wheel` | noarch +`python3.14-setuptools` | `python3.14-setuptools` | noarch | 78.1.1-1.amzn2023.0.2 +`python3.14-setuptools-wheel` | noarch +`python3.14-wheel` | `python3.14-wheel` | noarch | 0.45.1-1.amzn2023.0.2 +`python3.14-wheel-wheel` | noarch @@ -2340 +2399 @@ Source RPM | RPM | Architectures | Version -`python-flask` | `python3-flask` | noarch | 1.1.2-5.amzn2023.0.3 +`python-flask` | `python3-flask` | noarch | 1.1.4-5.amzn2023.0.1 @@ -2378 +2437 @@ Source RPM | RPM | Architectures | Version -`python-jwt` | `python3-jwt` | noarch | 2.4.0-1.amzn2023.0.1 +`python-jwt` | `python3-jwt` | noarch | 2.4.0-1.amzn2023.0.2 @@ -2566,0 +2626,24 @@ Source RPM | RPM | Architectures | Version +`ruby3.4` | `ruby3.4` | aarch64, x86_64 | 3.4.8-27.amzn2023.0.2 +`ruby3.4-bundled-gems` | aarch64, x86_64 +`ruby3.4-default-gems` | noarch +`ruby3.4-devel` | aarch64, x86_64 +`ruby3.4-doc` | noarch +`ruby3.4-libs` | aarch64, x86_64 +`ruby3.4-rubygem-bigdecimal` | aarch64, x86_64 +`ruby3.4-rubygem-bundler` | noarch +`ruby3.4-rubygem-io-console` | aarch64, x86_64 +`ruby3.4-rubygem-irb` | noarch +`ruby3.4-rubygem-json` | aarch64, x86_64 +`ruby3.4-rubygem-minitest` | noarch +`ruby3.4-rubygem-power_assert` | noarch +`ruby3.4-rubygem-psych` | aarch64, x86_64 +`ruby3.4-rubygem-racc` | aarch64, x86_64 +`ruby3.4-rubygem-rake` | noarch +`ruby3.4-rubygem-rbs` | aarch64, x86_64 +`ruby3.4-rubygem-rdoc` | noarch +`ruby3.4-rubygem-rexml` | noarch +`ruby3.4-rubygem-rss` | noarch +`ruby3.4-rubygems` | noarch +`ruby3.4-rubygems-devel` | noarch +`ruby3.4-rubygem-test-unit` | noarch +`ruby3.4-rubygem-typeprof` | noarch @@ -2872 +2955 @@ Source RPM | RPM | Architectures | Version -`tomcat10` | `tomcat10` | noarch | 10.1.48-1.amzn2023.0.1 +`tomcat10` | `tomcat10` | noarch | 10.1.52-1.amzn2023.0.1 @@ -2880 +2963 @@ Source RPM | RPM | Architectures | Version -`tomcat9` | `tomcat9` | noarch | 9.0.111-1.amzn2023.0.1 +`tomcat9` | `tomcat9` | noarch | 9.0.115-1.amzn2023.0.1 @@ -2918 +3001 @@ Source RPM | RPM | Architectures | Version -`valkey` | `valkey` | aarch64, x86_64 | 8.0.6-3.amzn2023.0.2 +`valkey` | `valkey` | aarch64, x86_64 | 8.0.6-3.amzn2023.0.3