AWS linux medium security documentation change
Summary
Updated version comparison document from AL2023.6 to AL2023.10 with new package versions and counts, including updates to security-related packages like aide, container-selinux, libssh, selinux-policy, and various libraries
Security assessment
The diff shows updates to multiple security-critical packages including aide (file integrity checker), container-selinux (SELinux policies for containers), libssh (SSH library), selinux-policy (SELinux policy framework), and various libraries with known vulnerabilities (libpng, libtiff, libxml2, freerdp). These updates likely include security patches for vulnerabilities, though specific CVEs aren't mentioned in the diff. The addition of new packages like sscg (Simple Signed Certificate Generator) also has security implications.
Diff
diff --git a/linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md b/linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md index 81b62f991..b2bd638b9 100644 --- a//linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md +++ b//linux/al2023/release-notes/vercmp-AL2023.6-AL2023.10.md @@ -5 +5 @@ -Comparing AL2023.6 version 2023.6.20241010 to AL2023.10 version [2023.10.20260216](./relnotes-2023.10.20260216.html). +Comparing AL2023.6 version 2023.6.20241010 to AL2023.10 version [2023.10.20260325](./relnotes-2023.10.20260325.html). @@ -9,5 +9,5 @@ Package Type | Count -Source | 353 -Total Binary | 5625 -`noarch` binary RPMs | 2852 -`x86_64` binary RPMs | 1391 -`aarch64` binary RPMs | 1382 +Source | 376 +Total Binary | 5761 +`noarch` binary RPMs | 2928 +`x86_64` binary RPMs | 1421 +`aarch64` binary RPMs | 1412 @@ -24,0 +25 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`aide` | `aide` | aarch64, x86_64 | 0.18.6-1.amzn2023.0.1 | 0.18.6-1.amzn2023.0.2 @@ -32 +33 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -[`amazon-efs-utils`](https://docs.aws.amazon.com/linux/al2023/ug/efs.html) | [`amazon-efs-utils`](https://docs.aws.amazon.com/linux/al2023/ug/efs.html) | aarch64, x86_64 | 2.1.0-1.amzn2023 | 2.4.1-1.amzn2023 +[`amazon-efs-utils`](https://docs.aws.amazon.com/linux/al2023/ug/efs.html) | [`amazon-efs-utils`](https://docs.aws.amazon.com/linux/al2023/ug/efs.html) | aarch64, x86_64 | 2.1.0-1.amzn2023 | 2.4.2-1.amzn2023 @@ -53 +54 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`appstream-data` | `appstream-data` | noarch | 2023-1.amzn2023 | 2023-102.amzn2023 +`appstream-data` | `appstream-data` | noarch | 2023-1.amzn2023 | 2023-103.amzn2023 @@ -63,0 +65,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`assertj-core` | `assertj-core` | noarch | 3.19.0-5.amzn2023.0.3 | 3.19.0-5.amzn2023.0.4 +`assertj-core-javadoc` | noarch @@ -196 +199 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`container-selinux` | `container-selinux` | noarch | 2.222.0-325.amzn2023 | 2.242.0-1.amzn2023 +`container-selinux` | `container-selinux` | noarch | 2.222.0-325.amzn2023 | 2.245.0-1.amzn2023 @@ -239 +242 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.2-1.amzn2023 | 1.10-1.amzn2023 +`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.2-1.amzn2023 | 1.11-1.amzn2023 @@ -283 +286 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`ec2-hibinit-agent` | `ec2-hibinit-agent` | noarch | 1.0.8-0.amzn2023 | 1.0.10-1.amzn2023 +`ec2-hibinit-agent` | `ec2-hibinit-agent` | noarch | 1.0.8-0.amzn2023 | 1.0.10-2.amzn2023 @@ -285,2 +288,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -[`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) | [`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) | aarch64, x86_64 | 1.87.0-1.amzn2023 | 1.101.3-1.amzn2023 -`ecs-service-connect-agent` | `ecs-service-connect-agent` | aarch64, x86_64 | v1.29.6.1-1.amzn2023 | v1.34.12.0-1.amzn2023 +[`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) | [`ecs-init`](https://docs.aws.amazon.com/linux/al2023/ug/ecs.html) | aarch64, x86_64 | 1.87.0-1.amzn2023 | 1.102.0-1.amzn2023 +`ecs-service-connect-agent` | `ecs-service-connect-agent` | aarch64, x86_64 | v1.29.6.1-1.amzn2023 | v1.34.12.1-1.amzn2023 @@ -341 +344 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`freerdp` | `freerdp` | aarch64, x86_64 | 3.6.3-1.amzn2023 | 3.6.3-1.amzn2023.0.3 +`freerdp` | `freerdp` | aarch64, x86_64 | 3.6.3-1.amzn2023 | 3.6.3-1.amzn2023.0.5 @@ -346,0 +350,3 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`freetype` | `freetype` | aarch64, x86_64 | 2.13.2-5.amzn2023.0.1 | 2.13.2-5.amzn2023.0.2 +`freetype-demos` | aarch64, x86_64 +`freetype-devel` | aarch64, x86_64 @@ -672 +678 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | [`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | aarch64, x86_64 | 1.22.7-1.amzn2023.0.1 | 1.24.13-1.amzn2023.0.1 +[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | [`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | aarch64, x86_64 | 1.22.7-1.amzn2023.0.1 | 1.25.8-1.amzn2023.0.1 @@ -1050 +1056 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`ibus-anthy` | `ibus-anthy` | aarch64, x86_64 | 1.5.14-4.amzn2023.0.1 | 1.5.16-188.amzn2023 +`ibus-anthy` | `ibus-anthy` | aarch64, x86_64 | 1.5.14-4.amzn2023.0.1 | 1.5.18-1.amzn2023.0.1 @@ -1088 +1094 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`ImageMagick` | `ImageMagick` | aarch64, x86_64 | 6.9.12.82-1.amzn2023.0.7 | 6.9.13.29-1.amzn2023.0.5 +`ImageMagick` | `ImageMagick` | aarch64, x86_64 | 6.9.12.82-1.amzn2023.0.7 | 6.9.13.40-1.amzn2023.0.1 @@ -1123 +1129 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`javapackages-bootstrap` | `javapackages-bootstrap` | noarch | 1.5.0^20220105.git9f283b7-3.amzn2023.0.4 | 1.5.0^20220105.git9f283b7-3.amzn2023.0.7 +`javapackages-bootstrap` | `javapackages-bootstrap` | noarch | 1.5.0^20220105.git9f283b7-3.amzn2023.0.4 | 1.5.0^20220105.git9f283b7-3.amzn2023.0.8 @@ -1131 +1137 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`kernel` | `bpftool` | aarch64, x86_64 | 6.1.112-122.189.amzn2023 | 6.1.161-183.298.amzn2023 +`kernel` | `bpftool` | aarch64, x86_64 | 6.1.112-122.189.amzn2023 | 6.1.164-196.303.amzn2023 @@ -1160 +1166 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`lcms2` | `lcms2` | aarch64, x86_64 | 2.12-1.amzn2023.0.3 | 2.16-73.amzn2023 +`lcms2` | `lcms2` | aarch64, x86_64 | 2.12-1.amzn2023.0.3 | 2.16-74.amzn2023 @@ -1249 +1255 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`libpng` | `libpng` | aarch64, x86_64 | 1.6.37-10.amzn2023.0.6 | 1.6.37-10.amzn2023.0.10 +`libpng` | `libpng` | aarch64, x86_64 | 1.6.37-10.amzn2023.0.6 | 1.6.37-10.amzn2023.0.11 @@ -1253 +1259 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`libpq` | `libpq` | aarch64, x86_64 | 16.4-1.amzn2023.0.1 | 17.7-1.amzn2023.0.1 +`libpq` | `libpq` | aarch64, x86_64 | 16.4-1.amzn2023.0.1 | 17.8-1.amzn2023.0.1 @@ -1269,0 +1276,3 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`libsodium` | `libsodium` | aarch64, x86_64 | 1.0.19-4.amzn2023 | 1.0.19-5.amzn2023 +`libsodium-devel` | aarch64, x86_64 +`libsodium-static` | aarch64, x86_64 @@ -1273 +1282 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.1 | 0.10.6-1.amzn2023.0.3 +`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.1 | 0.10.6-1.amzn2023.0.5 @@ -1279 +1288 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`libtiff` | `libtiff` | aarch64, x86_64 | 4.4.0-4.amzn2023.0.19 | 4.4.0-4.amzn2023.0.24 +`libtiff` | `libtiff` | aarch64, x86_64 | 4.4.0-4.amzn2023.0.19 | 4.4.0-4.amzn2023.0.25 @@ -1293 +1302 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`libxml2` | `libxml2` | aarch64, x86_64 | 2.10.4-1.amzn2023.0.6 | 2.10.4-1.amzn2023.0.17 +`libxml2` | `libxml2` | aarch64, x86_64 | 2.10.4-1.amzn2023.0.6 | 2.10.4-1.amzn2023.0.18 @@ -1328 +1337 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`lustre-client` | `lustre-client` | aarch64, x86_64 | 2.15.3-3.amzn2023 | 2.15.6-25.amzn2023 +`lustre-client` | `lustre-client` | aarch64, x86_64 | 2.15.3-3.amzn2023 | 2.15.6-27.amzn2023 @@ -1391,0 +1401,8 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`ncurses` | `ncurses` | aarch64, x86_64 | 6.2-4.20200222.amzn2023.0.6 | 6.6-1.amzn2023.0.1 +`ncurses-base` | noarch +`ncurses-c++-libs` | aarch64, x86_64 +`ncurses-compat-libs` | aarch64, x86_64 +`ncurses-devel` | aarch64, x86_64 +`ncurses-libs` | aarch64, x86_64 +`ncurses-static` | aarch64, x86_64 +`ncurses-term` | noarch @@ -1420 +1437 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.12.2-1.amzn2023.0.2 | 20.20.0-1.amzn2023.0.1 +`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.12.2-1.amzn2023.0.2 | 20.20.1-1.amzn2023.0.2 @@ -1427,0 +1445,6 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`ocaml` | `ocaml` | aarch64, x86_64 | 4.13.1-4.amzn2023.0.2 | 4.13.1-4.amzn2023.0.3 +`ocaml-compiler-libs` | aarch64, x86_64 +`ocaml-docs` | aarch64, x86_64 +`ocaml-ocamldoc` | aarch64, x86_64 +`ocaml-runtime` | aarch64, x86_64 +`ocaml-source` | aarch64, x86_64 @@ -1429 +1452 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.4 | 3.1.5-1.amzn2023.0.6 +`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.4 | 3.1.5-1.amzn2023.0.7 @@ -1595,0 +1619 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.004-5.amzn2023.0.2 | 0.007-12.amzn2023.0.1 @@ -1596,0 +1621,7 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`perl-Capture-Tiny` | `perl-Capture-Tiny` | noarch | 0.48-10.amzn2023.0.2 | 0.50-4.amzn2023.0.1 +`perl-CGI` | `perl-CGI` | noarch | 4.52-1.amzn2023.0.2 | 4.71-1.amzn2023.0.1 +`perl-CGI-tests` | noarch +`perl-Class-Data-Inheritable` | `perl-Class-Data-Inheritable` | noarch | 0.08-37.amzn2023.0.2 | 0.10-4.amzn2023.0.1 +`perl-Config-General` | `perl-Config-General` | noarch | 2.63-14.amzn2023.0.2 | 2.64-1.amzn2023.0.1 +`perl-Convert-ASN1` | `perl-Convert-ASN1` | noarch | 0.27-22.amzn2023.0.2 | 0.34-7.amzn2023.0.1 +`perl-Convert-ASN1-tests` | noarch @@ -1599,0 +1631,6 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.37-2.amzn2023.0.2 | 1.45-2.amzn2023.0.1 +`perl-DBD-Pg` | `perl-DBD-Pg` | aarch64, x86_64 | 3.14.2-3.amzn2023.0.4 | 3.18.0-6.amzn2023.0.1 +`perl-Encode` | `perl-Encode` | aarch64, x86_64 | 3.15-462.amzn2023.0.2 | 3.21-520.amzn2023.0.1 +`perl-Encode-devel` | aarch64, x86_64 +`perl-encoding` | aarch64, x86_64 +`perl-Error` | `perl-Error` | noarch | 0.17029-5.amzn2023.0.2 | 0.17030-2.amzn2023.0.1 @@ -1602,0 +1640,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`perl-JSON` | `perl-JSON` | noarch | 4.03-3.amzn2023.0.2 | 4.10-9.amzn2023.0.1 +`perl-JSON-tests` | noarch @@ -1611 +1650 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`perl-Net-SSLeay` | `perl-Net-SSLeay` | aarch64, x86_64 | 1.92-2.amzn2023.0.2 | 1.94-1.amzn2023.0.1 +`perl-Net-SSLeay` | `perl-Net-SSLeay` | aarch64, x86_64 | 1.92-2.amzn2023.0.2 | 1.94-3.amzn2023.0.1 @@ -1671 +1710 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -[`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | [`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | aarch64, x86_64 | 8.3.10-1.amzn2023.0.1 | 8.3.29-1.amzn2023.0.1 +[`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | [`php8.3`](https://docs.aws.amazon.com/linux/al2023/ug/php.html) | aarch64, x86_64 | 8.3.10-1.amzn2023.0.1 | 8.3.30-1.amzn2023.0.1 @@ -1716 +1755 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`postgresql15` | `postgresql15` | aarch64, x86_64 | 15.8-1.amzn2023.0.1 | 15.15-1.amzn2023.0.1 +`postgresql15` | `postgresql15` | aarch64, x86_64 | 15.8-1.amzn2023.0.1 | 15.16-1.amzn2023.0.1 @@ -1732 +1771 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`postgresql16` | `postgresql16` | aarch64, x86_64 | 16.4-1.amzn2023.0.1 | 16.11-1.amzn2023.0.1 +`postgresql16` | `postgresql16` | aarch64, x86_64 | 16.4-1.amzn2023.0.1 | 16.12-1.amzn2023.0.1 @@ -1771 +1810 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.6-1.amzn2023.0.3 | 3.11.14-1.amzn2023.0.3 +[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.6-1.amzn2023.0.3 | 3.11.14-1.amzn2023.0.5 @@ -1794,0 +1834,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`python-flask` | `python3-flask` | noarch | 1.1.2-5.amzn2023.0.3 | 1.1.4-5.amzn2023.0.1 +`python-flask-doc` | noarch @@ -1797,0 +1839,2 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`python-jwt` | `python3-jwt` | noarch | 2.4.0-1.amzn2023.0.1 | 2.4.0-1.amzn2023.0.2 +`python3-jwt+crypto` | noarch @@ -1800 +1843 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`python-pillow` | `python3-pillow` | aarch64, x86_64 | 9.4.0-2.amzn2023.0.5 | 9.4.0-2.amzn2023.0.6 +`python-pillow` | `python3-pillow` | aarch64, x86_64 | 9.4.0-2.amzn2023.0.5 | 9.4.0-2.amzn2023.0.7 @@ -1812,0 +1856 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`python-pycurl` | `python3-pycurl` | aarch64, x86_64 | 7.45.1-1.amzn2023.0.4 | 7.45.7-1.amzn2023.0.1 @@ -1921 +1965 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`selinux-policy` | `selinux-policy` | noarch | 38.1.45-1.amzn2023.0.1 | 38.1.65-1.amzn2023.0.1 +`selinux-policy` | `selinux-policy` | noarch | 38.1.45-1.amzn2023.0.1 | 38.1.73-1.amzn2023.0.2 @@ -1944,0 +1989 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`sscg` | `sscg` | aarch64, x86_64 | 3.0.3-76.amzn2023 | 3.0.3-77.amzn2023 @@ -1989,0 +2035,3 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`swig` | `swig` | aarch64, x86_64 | 4.1.1-4.amzn2023.0.3 | 4.1.1-4.amzn2023.0.5 +`swig-doc` | noarch +`swig-gdb` | aarch64, x86_64 @@ -2005 +2053 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`system-release` | `amazon-linux-repo-cdn` | noarch | 2023.6.20241010-0.amzn2023 | 2023.10.20260216-0.amzn2023 +`system-release` | `amazon-linux-repo-cdn` | noarch | 2023.6.20241010-0.amzn2023 | 2023.10.20260325-0.amzn2023 @@ -2010 +2058 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`systemtap` | `systemtap` | aarch64, x86_64 | 4.8-3.amzn2023.0.6 | 5.2-1.amzn2023.0.5 +`systemtap` | `systemtap` | aarch64, x86_64 | 4.8-3.amzn2023.0.6 | 5.4-1.amzn2023.0.2 @@ -2025 +2073 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`tomcat10` | `tomcat10` | noarch | 10.1.29-1.amzn2023.0.1 | 10.1.48-1.amzn2023.0.1 +`tomcat10` | `tomcat10` | noarch | 10.1.29-1.amzn2023.0.1 | 10.1.52-1.amzn2023.0.1 @@ -2033 +2081 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`tomcat9` | `tomcat9` | noarch | 9.0.91-1.amzn2023.0.1 | 9.0.111-1.amzn2023.0.1 +`tomcat9` | `tomcat9` | noarch | 9.0.91-1.amzn2023.0.1 | 9.0.115-1.amzn2023.0.1 @@ -2040,0 +2089 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version +`tomcat-native` | `tomcat-native` | aarch64, x86_64 | 2.0.8-4.amzn2023.0.1 | 2.0.12-4.amzn2023.0.2 @@ -2083 +2132 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`wireshark` | `wireshark-cli` | aarch64, x86_64 | 4.0.15-1.amzn2023.0.1 | 4.4.2-1.amzn2023.0.3 +`wireshark` | `wireshark-cli` | aarch64, x86_64 | 4.0.15-1.amzn2023.0.1 | 4.4.2-1.amzn2023.0.4 @@ -2109 +2158 @@ Source RPM | RPM | Architectures | AL2023.6 version | AL2023.10 version -`xorg-x11-server` | `xorg-x11-server-common` | aarch64, x86_64 | 1.20.14-30.amzn2023.0.2 | 21.1.13-5.amzn2023.0.7 +`xorg-x11-server` | `xorg-x11-server-common` | aarch64, x86_64 | 1.20.14-30.amzn2023.0.2 | 21.1.13-5.amzn2023.0.8