AWS Security ChangesHomeSearch

AWS linux documentation change

Service: linux · 2026-05-04 · Documentation low

File: linux/al2023/release-notes/al-2023-spal-packages.md

Summary

Updated package list for Amazon Linux 2023 release 2023.11.20260427, including additions of security-related packages (e.g., firejail, openbao, suricata) and version updates.

Security assessment

The diff adds packages like firejail (sandboxing), openbao (secrets management), suricata (IDS), and scitokens-cpp (authentication), which are security tools. However, there is no explicit mention of vulnerability fixes or security incidents. The change primarily documents new security features and tools.

Diff

diff --git a/linux/al2023/release-notes/al-2023-spal-packages.md b/linux/al2023/release-notes/al-2023-spal-packages.md
index 6dd83b8fd..5fd853111 100644
--- a//linux/al2023/release-notes/al-2023-spal-packages.md
+++ b//linux/al2023/release-notes/al-2023-spal-packages.md
@@ -7 +7 @@ SPAL repository
-# List of SPAL packages available as of the 2023.11.20260406 release
+# List of SPAL packages available as of the 2023.11.20260427 release
@@ -17 +17 @@ SPAL also ships a debuginfo repository that contains both debuginfo and debugsou
-The following list includes all SPAL packages for Amazon Linux 2023 release 2023.11.20260406.
+The following list includes all SPAL packages for Amazon Linux 2023 release 2023.11.20260427.
@@ -25,5 +25,5 @@ Package Type | Count
-Source | 2435  
-Total Binary RPMs | 13206  
-`aarch64` binary RPMs | 2257  
-`noarch` binary RPMs | 8666  
-`x86_64` binary RPMs | 2283  
+Source | 2627  
+Total Binary RPMs | 13864  
+`aarch64` binary RPMs | 2482  
+`noarch` binary RPMs | 8872  
+`x86_64` binary RPMs | 2510  
@@ -43,0 +44,4 @@ RPM Package | Architectures | Version
+`afflib` | src, aarch64, x86_64 | 3.7.20-1.1.spal2023  
+`afflib-devel` | aarch64, x86_64  
+`afftools` | aarch64, x86_64  
+`python3-pyaff` | aarch64, x86_64  
@@ -62,0 +67,4 @@ RPM Package | Architectures | Version
+`apache-commons-digester` | src, noarch | 2.1-19.1.spal2023  
+`apache-commons-digester-javadoc` | noarch  
+`apptainer` | src, aarch64, x86_64 | 1.5.0~rc.1-1.1.spal2023  
+`apptainer-suid` | aarch64, x86_64  
@@ -72,0 +81 @@ RPM Package | Architectures | Version
+`aspell-fr` | src, aarch64, x86_64 | 0.50-37.1.spal2023  
@@ -76,0 +86,5 @@ RPM Package | Architectures | Version
+`atril` | src, aarch64, x86_64 | 1.28.1-1.1.spal2023  
+`atril-caja` | aarch64, x86_64  
+`atril-devel` | aarch64, x86_64  
+`atril-libs` | aarch64, x86_64  
+`atril-thumbnailer` | aarch64, x86_64  
@@ -94,0 +109 @@ RPM Package | Architectures | Version
+`boinc-tui` | src, aarch64, x86_64 | 2.7.2-1.1.spal2023  
@@ -98 +113 @@ RPM Package | Architectures | Version
-`bpfilter` | src, aarch64, x86_64 | 0.6.0-1.3.spal2023  
+`bpfilter` | src, aarch64, x86_64 | 0.6.0-2.1.spal2023  
@@ -112,0 +128 @@ RPM Package | Architectures | Version
+`cabal-install` | src, aarch64, x86_64 | 3.2.0.0-10.1.spal2023  
@@ -119,0 +136 @@ RPM Package | Architectures | Version
+`castxml` | src, aarch64, x86_64 | 0.7.0-1.1.spal2023  
@@ -132,0 +150,7 @@ RPM Package | Architectures | Version
+`cdrkit` | src | 1.1.11-48.1.spal2023-48.1.spal2023  
+`dirsplit` | aarch64, x86_64 | 1.1.11-48.1.spal2023  
+`genisoimage` | aarch64, x86_64  
+`icedax` | aarch64, x86_64  
+`libusal` | aarch64, x86_64  
+`libusal-devel` | aarch64, x86_64  
+`wodim` | aarch64, x86_64  
@@ -145,0 +170 @@ RPM Package | Architectures | Version
+`chezmoi` | src, aarch64, x86_64 | 2.69.4-1.1.spal2023  
@@ -149 +174 @@ RPM Package | Architectures | Version
-`chromedriver` | aarch64, x86_64 | 146.0.7680.164-1.1.spal2023  
+`chromedriver` | aarch64, x86_64 | 146.0.7680.177-1.1.spal2023  
@@ -153,0 +179,4 @@ RPM Package | Architectures | Version
+`c-icap` | src, aarch64, x86_64 | 0.6.3-2.1.spal2023  
+`c-icap-devel` | aarch64, x86_64  
+`c-icap-libs` | aarch64, x86_64  
+`c-icap-modules` | src, aarch64, x86_64 | 0.5.7-6.1.spal2023  
@@ -209,0 +239,2 @@ RPM Package | Architectures | Version
+`cpputest` | src | 4.0-1.1.spal2023-1.1.spal2023  
+`cpputest-devel` | aarch64, x86_64 | 4.0-1.1.spal2023  
@@ -247,0 +279,6 @@ RPM Package | Architectures | Version
+`dl-fedora` | src, aarch64, x86_64 | 2.1-1.1.spal2023  
+`dlt-daemon` | src, aarch64, x86_64 | 2.18.10-4.1.spal2023  
+`dlt-examples` | aarch64, x86_64  
+`dlt-libs` | aarch64, x86_64  
+`dlt-libs-devel` | aarch64, x86_64  
+`dlt-tools` | aarch64, x86_64  
@@ -261,0 +299 @@ RPM Package | Architectures | Version
+`dvd+rw-tools` | src, aarch64, x86_64 | 7.1-36.1.spal2023  
@@ -268,0 +307,6 @@ RPM Package | Architectures | Version
+`edac-ctl` | aarch64, x86_64 | 0.18-1.1.spal2023  
+`edac-util` | aarch64, x86_64  
+`edac-utils` | src, aarch64, x86_64  
+`libedac` | aarch64, x86_64  
+`libedac-devel` | aarch64, x86_64  
+`eggdrop` | src, aarch64, x86_64 | 1.10.1-1.1.spal2023  
@@ -342,0 +387 @@ RPM Package | Architectures | Version
+`firejail` | src, aarch64, x86_64 | 0.9.80-1.1.spal2023  
@@ -614,0 +660,4 @@ RPM Package | Architectures | Version
+`ghc-bodhi` | src, aarch64, x86_64 | 0.1.0-1.1.spal2023  
+`ghc-bodhi-devel` | aarch64, x86_64  
+`ghc-bodhi-doc` | noarch  
+`ghc-bodhi-prof` | aarch64, x86_64  
@@ -618,0 +668,4 @@ RPM Package | Architectures | Version
+`ghc-cached-json-file` | src, aarch64, x86_64 | 0.1.1-14.1.spal2023  
+`ghc-cached-json-file-devel` | aarch64, x86_64  
+`ghc-cached-json-file-doc` | noarch  
+`ghc-cached-json-file-prof` | aarch64, x86_64  
@@ -662,0 +716,4 @@ RPM Package | Architectures | Version
+`ghc-cryptohash-sha256` | src, aarch64, x86_64 | 0.11.102.1-1.1.spal2023  
+`ghc-cryptohash-sha256-devel` | aarch64, x86_64  
+`ghc-cryptohash-sha256-doc` | noarch  
+`ghc-cryptohash-sha256-prof` | aarch64, x86_64  
@@ -722,0 +780,20 @@ RPM Package | Architectures | Version
+`ghc-echo` | src, aarch64, x86_64 | 0.1.4-3.1.spal2023  
+`ghc-echo-devel` | aarch64, x86_64  
+`ghc-echo-doc` | noarch  
+`ghc-echo-prof` | aarch64, x86_64  
+`ghc-ed25519` | src, aarch64, x86_64 | 0.0.5.0-23.1.spal2023  
+`ghc-ed25519-devel` | aarch64, x86_64  
+`ghc-ed25519-doc` | noarch  
+`ghc-ed25519-prof` | aarch64, x86_64  
+`ghc-edit-distance` | src, aarch64, x86_64 | 0.2.2.1-20.1.spal2023  
+`ghc-edit-distance-devel` | aarch64, x86_64  
+`ghc-edit-distance-doc` | noarch  
+`ghc-edit-distance-prof` | aarch64, x86_64  
+`ghc-extra` | src, aarch64, x86_64 | 1.7.9-3.1.spal2023  
+`ghc-extra-devel` | aarch64, x86_64  
+`ghc-extra-doc` | noarch  
+`ghc-extra-prof` | aarch64, x86_64  
+`ghc-fedora-releases` | src, aarch64, x86_64 | 0.3.0-1.1.spal2023  
+`ghc-fedora-releases-devel` | aarch64, x86_64  
+`ghc-fedora-releases-doc` | noarch  
+`ghc-fedora-releases-prof` | aarch64, x86_64  
@@ -742,0 +820,4 @@ RPM Package | Architectures | Version
+`ghc-hackage-security` | src, aarch64, x86_64 | 0.6.2.1-1.1.spal2023  
+`ghc-hackage-security-devel` | aarch64, x86_64  
+`ghc-hackage-security-doc` | noarch  
+`ghc-hackage-security-prof` | aarch64, x86_64  
@@ -782,0 +864,4 @@ RPM Package | Architectures | Version
+`ghc-html-conduit` | src, aarch64, x86_64 | 1.3.2.2-1.1.spal2023  
+`ghc-html-conduit-devel` | aarch64, x86_64  
+`ghc-html-conduit-doc` | noarch  
+`ghc-html-conduit-prof` | aarch64, x86_64  
@@ -794,0 +880,16 @@ RPM Package | Architectures | Version
+`ghc-http-conduit` | src, aarch64, x86_64 | 2.3.8-2.1.spal2023  
+`ghc-http-conduit-devel` | aarch64, x86_64  
+`ghc-http-conduit-doc` | noarch  
+`ghc-http-conduit-prof` | aarch64, x86_64  
+`ghc-http-date` | src, aarch64, x86_64 | 0.0.11-2.1.spal2023  
+`ghc-http-date-devel` | aarch64, x86_64  
+`ghc-http-date-doc` | noarch  
+`ghc-http-date-prof` | aarch64, x86_64  
+`ghc-http-directory` | src, aarch64, x86_64 | 0.1.10-1.1.spal2023  
+`ghc-http-directory-devel` | aarch64, x86_64  
+`ghc-http-directory-doc` | noarch  
+`ghc-http-directory-prof` | aarch64, x86_64  
+`ghc-http-query` | src, aarch64, x86_64 | 0.1.3-1.1.spal2023  
+`ghc-http-query-devel` | aarch64, x86_64  
+`ghc-http-query-doc` | noarch  
+`ghc-http-query-prof` | aarch64, x86_64  
@@ -814,0 +916,4 @@ RPM Package | Architectures | Version
+`ghc-lukko` | src, aarch64, x86_64 | 0.1.1.3-4.1.spal2023  
+`ghc-lukko-devel` | aarch64, x86_64  
+`ghc-lukko-doc` | noarch  
+`ghc-lukko-prof` | aarch64, x86_64  
@@ -850,0 +956,4 @@ RPM Package | Architectures | Version
+`ghc-pretty-terminal` | src, aarch64, x86_64 | 0.1.0.0-5.1.spal2023  
+`ghc-pretty-terminal-devel` | aarch64, x86_64  
+`ghc-pretty-terminal-doc` | noarch  
+`ghc-pretty-terminal-prof` | aarch64, x86_64  
@@ -874,0 +984,4 @@ RPM Package | Architectures | Version
+`ghc-regex-posix` | src, aarch64, x86_64 | 0.96.0.1-2.1.spal2023  
+`ghc-regex-posix-devel` | aarch64, x86_64  
+`ghc-regex-posix-doc` | noarch  
+`ghc-regex-posix-prof` | aarch64, x86_64  
@@ -878,0 +992,4 @@ RPM Package | Architectures | Version
+`ghc-resolv` | src, aarch64, x86_64 | 0.1.2.0-7.1.spal2023  
+`ghc-resolv-devel` | aarch64, x86_64  
+`ghc-resolv-doc` | noarch  
+`ghc-resolv-prof` | aarch64, x86_64  
@@ -903,0 +1021,12 @@ RPM Package | Architectures | Version
+`ghc-simple-cmd` | src, aarch64, x86_64 | 0.2.7-1.1.spal2023  
+`ghc-simple-cmd-devel` | aarch64, x86_64  
+`ghc-simple-cmd-doc` | noarch  
+`ghc-simple-cmd-prof` | aarch64, x86_64  
+`ghc-simple-cmd-args` | src, aarch64, x86_64 | 0.1.8-1.1.spal2023  
+`ghc-simple-cmd-args-devel` | aarch64, x86_64  
+`ghc-simple-cmd-args-doc` | noarch  
+`ghc-simple-cmd-args-prof` | aarch64, x86_64  
+`ghc-simple-prompt` | src, aarch64, x86_64 | 0.2.3-1.1.spal2023  
+`ghc-simple-prompt-devel` | aarch64, x86_64  
+`ghc-simple-prompt-doc` | noarch  
+`ghc-simple-prompt-prof` | aarch64, x86_64  
@@ -939,0 +1069,4 @@ RPM Package | Architectures | Version
+`ghc-tar` | src, aarch64, x86_64 | 0.5.1.1-9.1.spal2023  
+`ghc-tar-devel` | aarch64, x86_64  
+`ghc-tar-doc` | noarch  
+`ghc-tar-prof` | aarch64, x86_64  
@@ -1055,0 +1189,8 @@ RPM Package | Architectures | Version
+`ghc-xdg-basedir` | src, aarch64, x86_64 | 0.2.2-29.1.spal2023  
+`ghc-xdg-basedir-devel` | aarch64, x86_64  
+`ghc-xdg-basedir-doc` | noarch  
+`ghc-xdg-basedir-prof` | aarch64, x86_64  
+`ghc-xdg-userdirs` | src, aarch64, x86_64 | 0.1.0.2-11.1.spal2023  
+`ghc-xdg-userdirs-devel` | aarch64, x86_64  
+`ghc-xdg-userdirs-doc` | noarch  
+`ghc-xdg-userdirs-prof` | aarch64, x86_64  
@@ -1210,0 +1352,2 @@ RPM Package | Architectures | Version
+`guile30` | src, aarch64, x86_64 | 3.0.7-4.1.spal2023  
+`guile30-devel` | aarch64, x86_64