AWS linux medium security documentation change
Summary
Updated version comparison document from AL2023.10 to AL2023.11, including updated package counts, version numbers for numerous packages (including security-relevant packages like openssl, bind, kernel, curl, nginx, etc.), and addition of new packages like freeipmi, libbpf, and watchdog.
Security assessment
The update includes security-relevant package version upgrades that likely address vulnerabilities. Key security-related updates include: openssl from 3.2.2 to 3.5.5 (addressing multiple CVEs), bind from 9.18.33-1.amzn2023.0.4 to 9.18.33-1.amzn2023.0.5 (DNS security fixes), kernel from 6.1.164 to 6.1.166 (kernel security patches), curl from 8.17.0-1.amzn2023.0.1 to 8.17.0-1.amzn2023.0.2 (HTTP client security), nginx from 1.28.2 to 1.28.3 (web server security), and multiple other packages with security implications. The updates to security-focused packages like scap-security-guide (security compliance) and mod_security_crs (WAF rules) also indicate security maintenance.