AWS Security ChangesHomeSearch

AWS linux medium security documentation change

Service: linux · 2026-05-04 · Security-related medium

File: linux/al2023/release-notes/all-packages-AL2023.11.md

Summary

Updated package versions and counts for AL2023.11.20260427 release, including security-relevant packages like openssh, clamav, containerd, and kernel components

Security assessment

Multiple security-sensitive packages were updated: OpenSSH (8.7p1-8.amzn2023.0.16 → 0.17) addresses potential vulnerabilities; ClamAV (1.4.3→1.4.4, 1.5.1→1.5.2) includes malware detection improvements; containerd (2.2.1→2.2.3) patches container runtime vulnerabilities; Kernel livepatches (6.12.80-105.147) added for runtime security fixes without reboots. These updates indicate security maintenance.

Diff

diff --git a/linux/al2023/release-notes/all-packages-AL2023.11.md b/linux/al2023/release-notes/all-packages-AL2023.11.md
index 0feb5620d..99ca106f3 100644
--- a//linux/al2023/release-notes/all-packages-AL2023.11.md
+++ b//linux/al2023/release-notes/all-packages-AL2023.11.md
@@ -7 +7 @@ All AL2023.11 packagesAll packages
-# Amazon Linux 2023 RPM packages as of the 2023.11.20260413 release
+# Amazon Linux 2023 RPM packages as of the 2023.11.20260427 release
@@ -9 +9 @@ All AL2023.11 packagesAll packages
-The following list includes all packages for Amazon Linux 2023 release [2023.11.20260413](./relnotes-2023.11.20260413.html).
+The following list includes all packages for Amazon Linux 2023 release [2023.11.20260427](./relnotes-2023.11.20260427.html).
@@ -23,5 +23,5 @@ Package Type | Count
-Source | 2719  
-Total Binary RPMs | 18642  
-`aarch64` binary RPMs | 4451  
-`noarch` binary RPMs | 9676  
-`x86_64` binary RPMs | 4515  
+Source | 2720  
+Total Binary RPMs | 18659  
+`aarch64` binary RPMs | 4459  
+`noarch` binary RPMs | 9677  
+`x86_64` binary RPMs | 4523  
@@ -83 +83 @@ RPM Package | Architectures | Version
-[`amazon-efs-utils`](https://docs.aws.amazon.com/linux/al2023/ug/efs.html) | src, aarch64, noarch, x86_64 | 3.0.1-1.amzn2023  
+[`amazon-efs-utils`](https://docs.aws.amazon.com/linux/al2023/ug/efs.html) | src, aarch64, noarch, x86_64 | 3.1.0-1.amzn2023  
@@ -277 +277 @@ RPM Package | Architectures | Version
-`aws-nitro-tpm-tools` | src, aarch64, x86_64 | 1.1.0-1.amzn2023  
+`aws-nitro-tpm-tools` | src, aarch64, x86_64 | 1.1.1-1.amzn2023  
@@ -493 +493 @@ RPM Package | Architectures | Version
-`cifs-utils` | src, aarch64, x86_64 | 6.15-1.amzn2023.0.2  
+`cifs-utils` | src, aarch64, x86_64 | 7.5-1.amzn2023.0.3  
@@ -509 +509 @@ RPM Package | Architectures | Version
-`clamav1.4` | src, aarch64, x86_64 | 1.4.3-1.amzn2023.0.3  
+`clamav1.4` | src, aarch64, x86_64 | 1.4.4-1.amzn2023.0.1  
@@ -518 +518 @@ RPM Package | Architectures | Version
-`clamav1.5` | src, aarch64, x86_64 | 1.5.1-1.amzn2023.0.5  
+`clamav1.5` | src, aarch64, x86_64 | 1.5.2-1.amzn2023.0.1  
@@ -625 +625 @@ RPM Package | Architectures | Version
-`composer` | src, noarch | 2.9.3-1.amzn2023.0.1  
+`composer` | src, noarch | 2.9.7-1.amzn2023.0.1  
@@ -630 +630 @@ RPM Package | Architectures | Version
-`containerd` | src, aarch64, x86_64 | 2.2.1-1.amzn2023.0.2  
+`containerd` | src, aarch64, x86_64 | 2.2.3-1.amzn2023.0.1  
@@ -658 +658 @@ RPM Package | Architectures | Version
-`credentials-fetcher` | src, aarch64, x86_64 | 2.0.1-1.amzn2023.0.2  
+`credentials-fetcher` | src, aarch64, x86_64 | 2.0.1-1.amzn2023.0.3  
@@ -683 +683 @@ RPM Package | Architectures | Version
-`cups` | src, aarch64, x86_64 | 2.4.14-1.amzn2023.0.2  
+`cups` | src, aarch64, x86_64 | 2.4.16-1.amzn2023.0.3  
@@ -796 +796 @@ RPM Package | Architectures | Version
-`dnf-plugin-release-notification` | src, noarch | 1.3-1.amzn2023.0.1  
+`dnf-plugin-release-notification` | src, noarch | 1.4-1.amzn2023  
@@ -817 +817 @@ RPM Package | Architectures | Version
-`docker` | src, aarch64, x86_64 | 25.0.14-1.amzn2023.0.3  
+`docker` | src, aarch64, x86_64 | 25.0.14-1.amzn2023.0.4  
@@ -824,2 +824,2 @@ RPM Package | Architectures | Version
-`dotnet10.0` | src | 10.0.105-1.amzn2023.0.2-1.amzn2023.0.2  
-`aspnetcore-runtime-10.0` | aarch64, x86_64 | 10.0.5-1.amzn2023.0.2  
+`dotnet10.0` | src | 10.0.107-1.amzn2023.0.1-1.amzn2023.0.1  
+`aspnetcore-runtime-10.0` | aarch64, x86_64 | 10.0.7-1.amzn2023.0.1  
@@ -850,2 +850,2 @@ RPM Package | Architectures | Version
-`dotnet8.0` | src | 8.0.125-1.amzn2023.0.2-1.amzn2023.0.2  
-`aspnetcore-runtime-8.0` | aarch64, x86_64 | 8.0.25-1.amzn2023.0.2  
+`dotnet8.0` | src | 8.0.126-1.amzn2023.0.1-1.amzn2023.0.1  
+`aspnetcore-runtime-8.0` | aarch64, x86_64 | 8.0.26-1.amzn2023.0.1  
@@ -863,2 +863,2 @@ RPM Package | Architectures | Version
-`dotnet9.0` | src | 9.0.115-1.amzn2023.0.1-1.amzn2023.0.1  
-`aspnetcore-runtime-9.0` | aarch64, x86_64 | 9.0.14-1.amzn2023.0.1  
+`dotnet9.0` | src | 9.0.116-1.amzn2023.0.1-1.amzn2023.0.1  
+`aspnetcore-runtime-9.0` | aarch64, x86_64 | 9.0.15-1.amzn2023.0.1  
@@ -933 +933 @@ RPM Package | Architectures | Version
-`ecs-service-connect-agent` | src, aarch64, x86_64 | v1.34.13.0-1.amzn2023  
+`ecs-service-connect-agent` | src, aarch64, x86_64 | v1.34.13.1-1.amzn2023  
@@ -1073 +1073 @@ RPM Package | Architectures | Version
-`firefox` | src, aarch64, x86_64 | 140.9.0-1.amzn2023.0.2  
+`firefox` | src, aarch64, x86_64 | 140.9.1-1.amzn2023.0.1  
@@ -1081 +1081 @@ RPM Package | Architectures | Version
-`flatpak` | src, aarch64, x86_64 | 1.15.10-1.amzn2023.0.2  
+`flatpak` | src, aarch64, x86_64 | 1.16.6-1.amzn2023  
@@ -1371 +1371 @@ RPM Package | Architectures | Version
-`compat-libpthread-nonshared` | aarch64, x86_64 | 2.34-231.amzn2023.0.3  
+`compat-libpthread-nonshared` | aarch64, x86_64 | 2.34-231.amzn2023.0.4  
@@ -1673 +1673 @@ RPM Package | Architectures | Version
-[`gnupg2`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#gnupg-minimal) | src, aarch64, x86_64 | 2.3.7-1.amzn2023.0.7  
+[`gnupg2`](https://docs.aws.amazon.com/linux/al2023/ug/compare-with-al2.html#gnupg-minimal) | src, aarch64, x86_64 | 2.3.7-1.amzn2023.0.8  
@@ -1688 +1688 @@ RPM Package | Architectures | Version
-[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | src, aarch64, x86_64 | 1.25.8-1.amzn2023.0.2  
+[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | src, aarch64, x86_64 | 1.25.9-1.amzn2023.0.1  
@@ -1713 +1713 @@ RPM Package | Architectures | Version
-`golist` | src, aarch64, x86_64 | 0.10.4-12.amzn2023.0.7  
+`golist` | src, aarch64, x86_64 | 0.10.4-12.amzn2023.0.8  
@@ -2387 +2387 @@ RPM Package | Architectures | Version
-`ImageMagick` | src, aarch64, x86_64 | 6.9.13.43-1.amzn2023.0.1  
+`ImageMagick` | src, aarch64, x86_64 | 6.9.13.44-1.amzn2023.0.2  
@@ -2501 +2501,2 @@ RPM Package | Architectures | Version
-[`java-1.8.0-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 1.8.0_482.b08-1.amzn2023  
+[`java-1.8.0-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 1.8.0_492.b09-1.amzn2023  
+`java-1.8.0-amazon-corretto-debugsymbols` | aarch64, x86_64  
@@ -2503 +2504,2 @@ RPM Package | Architectures | Version
-[`java-11-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 11.0.30+7-1.amzn2023  
+[`java-11-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 11.0.31+11-1.amzn2023  
+`java-11-amazon-corretto-debugsymbols` | aarch64, x86_64  
@@ -2508 +2510 @@ RPM Package | Architectures | Version
-[`java-17-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 17.0.18+9-1.amzn2023.1  
+[`java-17-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 17.0.19+10-1.amzn2023.1  
@@ -2514 +2516 @@ RPM Package | Architectures | Version
-[`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 21.0.10+7-1.amzn2023.1  
+[`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | src, aarch64, x86_64 | 21.0.11+10-1.amzn2023.1  
@@ -2537 +2539 @@ RPM Package | Architectures | Version
-`java-25-amazon-corretto` | src, aarch64, x86_64 | 25.0.2+10-1.amzn2023.1  
+`java-25-amazon-corretto` | src, aarch64, x86_64 | 25.0.3+9-1.amzn2023.1  
@@ -2543 +2545 @@ RPM Package | Architectures | Version
-`java-26-amazon-corretto` | src, aarch64, x86_64 | 26.0.0+35-2.amzn2023.1  
+`java-26-amazon-corretto` | src, aarch64, x86_64 | 26.0.1+8-1.amzn2023.1  
@@ -2683 +2685 @@ RPM Package | Architectures | Version
-`bpftool` | aarch64, x86_64 | 6.1.166-197.305.amzn2023  
+`bpftool` | aarch64, x86_64 | 6.1.168-202.320.amzn2023  
@@ -2696 +2698 @@ RPM Package | Architectures | Version
-`bpftool6.12` | aarch64, x86_64 | 6.12.79-101.147.amzn2023  
+`bpftool6.12` | aarch64, x86_64 | 6.12.80-105.147.amzn2023  
@@ -2731,0 +2734 @@ RPM Package | Architectures | Version
+`kernel-livepatch-6.12.80-105.147` | aarch64, x86_64  
@@ -3618 +3621 @@ RPM Package | Architectures | Version
-`librsvg2` | src, aarch64, x86_64 | 2.59.2-317.amzn2023  
+`librsvg2` | src, aarch64, x86_64 | 2.59.2-318.amzn2023  
@@ -3681 +3684,3 @@ RPM Package | Architectures | Version
-`libssh` | src, aarch64, x86_64 | 0.10.6-1.amzn2023.0.5  
+`libsrtp` | src, aarch64, x86_64 | 2.6.0-1.amzn2023.0.1  
+`libsrtp-devel` | aarch64, x86_64  
+`libssh` | src, aarch64, x86_64 | 0.10.6-1.amzn2023.0.6  
@@ -4161 +4166 @@ RPM Package | Architectures | Version
-`maven3.9` | src, noarch | 3.9.9-3.amzn2023.0.1  
+`maven3.9` | src, noarch | 3.9.14-3.amzn2023.0.1  
@@ -4293,2 +4298,2 @@ RPM Package | Architectures | Version
-`mesa` | src | 24.2.6-1267.amzn2023.0.1-1267.amzn2023.0.1  
-`mesa-dri-drivers` | aarch64, x86_64 | 24.2.6-1267.amzn2023.0.1  
+`mesa` | src | 24.2.6-1268.amzn2023.0.1-1268.amzn2023.0.1  
+`mesa-dri-drivers` | aarch64, x86_64 | 24.2.6-1268.amzn2023.0.1  
@@ -4436 +4441 @@ RPM Package | Architectures | Version
-`nerdctl` | src, aarch64, x86_64 | 2.2.1-1.amzn2023.0.3  
+`nerdctl` | src, aarch64, x86_64 | 2.2.2-1.amzn2023.0.1  
@@ -4490 +4495 @@ RPM Package | Architectures | Version
-`ngtcp2` | src, aarch64, x86_64 | 1.21.0-1.amzn2023.0.1  
+`ngtcp2` | src, aarch64, x86_64 | 1.21.0-1.amzn2023.0.2  
@@ -4512 +4517 @@ RPM Package | Architectures | Version
-`nodejs20` | src, aarch64, x86_64 | 20.20.2-1.amzn2023.0.1  
+`nodejs20` | src, aarch64, x86_64 | 20.20.2-1.amzn2023.0.2  
@@ -4520 +4525 @@ RPM Package | Architectures | Version
-`nodejs22` | src, aarch64, x86_64 | 22.22.2-1.amzn2023.0.1  
+`nodejs22` | src, aarch64, x86_64 | 22.22.2-1.amzn2023.0.2  
@@ -4528 +4533 @@ RPM Package | Architectures | Version
-`nodejs24` | src, aarch64, x86_64 | 24.14.1-1.amzn2023.0.1  
+`nodejs24` | src, aarch64, x86_64 | 24.15.0-1.amzn2023.0.1  
@@ -4661 +4666 @@ RPM Package | Architectures | Version
-`openexr` | src, aarch64, x86_64 | 3.1.5-1.amzn2023.0.8  
+`openexr` | src, aarch64, x86_64 | 3.1.5-1.amzn2023.0.9  
@@ -4699 +4704 @@ RPM Package | Architectures | Version
-`openssh` | src, aarch64, x86_64 | 8.7p1-8.amzn2023.0.16  
+`openssh` | src, aarch64, x86_64 | 8.7p1-8.amzn2023.0.17  
@@ -5045 +5050 @@ RPM Package | Architectures | Version
-`perl-CPAN` | src, noarch | 2.34-1.amzn2023.0.3  
+`perl-CPAN` | src, noarch | 2.38-521.amzn2023.0.1  
@@ -5112 +5117,2 @@ RPM Package | Architectures | Version
-`perl-DB_File` | src, aarch64, x86_64 | 1.855-2.amzn2023.0.2  
+`perl-DB_File` | src, aarch64, x86_64 | 1.860-1.amzn2023.0.1  
+`perl-DB_File-tests` | aarch64, x86_64  
@@ -5120 +5126,2 @@ RPM Package | Architectures | Version
-`perl-DBI` | src, aarch64, x86_64 | 1.643-7.amzn2023.0.3  
+`perl-DBI` | src, aarch64, x86_64 | 1.647-1.amzn2023.0.1  
+`perl-DBI-tests` | aarch64, x86_64  
@@ -5200 +5207 @@ RPM Package | Architectures | Version
-`perl-ExtUtils-InstallPaths` | src, noarch | 0.012-11.amzn2023.0.2  
+`perl-ExtUtils-InstallPaths` | src, noarch | 0.015-2.amzn2023.0.1  
@@ -5259 +5266 @@ RPM Package | Architectures | Version
-`perl-Getopt-Long-Descriptive` | src, noarch | 0.109-1.amzn2023.0.2  
+`perl-Getopt-Long-Descriptive` | src, noarch | 0.117-1.amzn2023.0.1  
@@ -5304 +5311 @@ RPM Package | Architectures | Version
-`perl-IO-Compress` | src, noarch | 2.102-2.amzn2023.0.2  
+`perl-IO-Compress` | src, noarch | 2.217-1.amzn2023.0.1  
@@ -5311 +5318,2 @@ RPM Package | Architectures | Version
-`perl-IO-Socket-IP` | src, noarch | 0.41-3.amzn2023.0.2  
+`perl-IO-Socket-IP` | src, noarch | 0.43-522.amzn2023.0.1  
+`perl-IO-Socket-IP-tests` | noarch  
@@ -5326 +5334 @@ RPM Package | Architectures | Version
-`perl-JSON-Any` | src, noarch | 1.39-18.amzn2023.0.2  
+`perl-JSON-Any` | src, noarch | 1.40-7.amzn2023.0.1  
@@ -5467 +5475 @@ RPM Package | Architectures | Version
-`perl-Net-CIDR-Lite` | src, noarch | 0.22-8.amzn2023  
+`perl-Net-CIDR-Lite` | src, noarch | 0.22-8.amzn2023.0.1  
@@ -5608 +5616 @@ RPM Package | Architectures | Version
-`perl-Specio` | src, noarch | 0.47-1.amzn2023.0.2  
+`perl-Specio` | src, noarch | 0.50-1.amzn2023.0.1  
@@ -5621 +5629,2 @@ RPM Package | Architectures | Version
-`perl-Storable` | src, aarch64, x86_64 | 3.21-458.amzn2023.0.2  
+`perl-Storable` | src, aarch64, x86_64 | 3.37-522.amzn2023.0.1  
+`perl-Storable-tests` | aarch64, x86_64  
@@ -5809 +5818 @@ RPM Package | Architectures | Version
-`perl-URI` | src, noarch | 5.09-1.amzn2023.0.2  
+`perl-URI` | src, noarch | 5.18-1.amzn2023.0.1  
@@ -6342 +6351 @@ RPM Package | Architectures | Version
-[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | src, aarch64, x86_64 | 3.11.14-1.amzn2023.0.6