AWS linux medium security documentation change
Summary
Updated release notes for AL2023.11, including version updates for numerous packages (e.g., ClamAV, kernel, OpenSSL, .NET, Node.js, PHP, Python, etc.), addition of new packages (dotnet10.0, java-26-amazon-corretto, nghttp3, ngtcp2, postgresql18, sedutil), and increased package counts.
Security assessment
The update includes security-sensitive package upgrades: ClamAV (antivirus) from 1.5.1-1.amzn2023.0.4 to 1.5.1-1.amzn2023.0.5, kernel versions (6.12.74 to 6.12.79 and 6.18.15 to 6.18.20) with new kernel-livepatch packages, OpenSSL from 3.0.17-1.amzn2023.0.4 to 3.0.17-1.amzn2023.0.5, and multiple runtime updates (Node.js, PHP, Python). These version bumps often include security patches. The addition of sedutil (self-encrypting drive utility) is also security-relevant. The changes are indicative of addressing vulnerabilities, though no CVEs are explicitly mentioned.