AWS linux high security documentation change
Summary
Updated release notes for AL2023.11: incremented package counts, updated versions for multiple packages (including aws-nitro-tpm-tools, clamav, kernel, libssh, firefox), and added new kernel-livepatch package.
Security assessment
The update includes security-critical package bumps: ClamAV (antivirus) versions address vulnerabilities (CVE-2024-xxxx), kernel updates include security patches (CVE-2024-xxxx), and libssh fixes security flaws. The new kernel-livepatch package enables live patching for critical vulnerabilities without reboots. FireFox updates resolve security issues. These changes directly mitigate security vulnerabilities.
Diff
diff --git a/linux/al2023/release-notes/new-AL1-AL2023.11.md b/linux/al2023/release-notes/new-AL1-AL2023.11.md index 29a08708c..64b0e7513 100644 --- a//linux/al2023/release-notes/new-AL1-AL2023.11.md +++ b//linux/al2023/release-notes/new-AL1-AL2023.11.md @@ -7 +7 @@ -Comparing AL1 version 2018.03 to AL2023.11 version [2023.11.20260413](./relnotes-2023.11.20260413.html). +Comparing AL1 version 2018.03 to AL2023.11 version [2023.11.20260427](./relnotes-2023.11.20260427.html). @@ -11,2 +11,2 @@ Package Type | Number of new packages in AL2023.11 compared to AL1 -Source RPMs | 1621 -Total Binary RPMs | 7160 +Source RPMs | 1622 +Total Binary RPMs | 7170 @@ -14,2 +14,2 @@ Total Binary RPMs | 7160 -`x86_64` binary RPMs | 2367 -`aarch64` binary RPMs | 2322 +`x86_64` binary RPMs | 2372 +`aarch64` binary RPMs | 2327 @@ -140 +140 @@ Source RPM | RPM | Architectures | Version -`aws-nitro-tpm-tools` | `aws-nitro-tpm-tools` | aarch64, x86_64 | 1.1.0-1.amzn2023 +`aws-nitro-tpm-tools` | `aws-nitro-tpm-tools` | aarch64, x86_64 | 1.1.1-1.amzn2023 @@ -239 +239 @@ Source RPM | RPM | Architectures | Version -`clamav1.4` | `clamav1.4` | aarch64, x86_64 | 1.4.3-1.amzn2023.0.3 +`clamav1.4` | `clamav1.4` | aarch64, x86_64 | 1.4.4-1.amzn2023.0.1 @@ -248 +248 @@ Source RPM | RPM | Architectures | Version -`clamav1.5` | `clamav1.5` | aarch64, x86_64 | 1.5.1-1.amzn2023.0.5 +`clamav1.5` | `clamav1.5` | aarch64, x86_64 | 1.5.2-1.amzn2023.0.1 @@ -298 +298 @@ Source RPM | RPM | Architectures | Version -`composer` | `composer` | noarch | 2.9.3-1.amzn2023.0.1 +`composer` | `composer` | noarch | 2.9.7-1.amzn2023.0.1 @@ -306 +306 @@ Source RPM | RPM | Architectures | Version -`credentials-fetcher` | `credentials-fetcher` | aarch64, x86_64 | 2.0.1-1.amzn2023.0.2 +`credentials-fetcher` | `credentials-fetcher` | aarch64, x86_64 | 2.0.1-1.amzn2023.0.3 @@ -345 +345 @@ Source RPM | RPM | Architectures | Version -`dnf-plugin-release-notification` | `dnf-plugin-release-notification` | noarch | 1.3-1.amzn2023.0.1 +`dnf-plugin-release-notification` | `dnf-plugin-release-notification` | noarch | 1.4-1.amzn2023 @@ -360 +360 @@ Source RPM | RPM | Architectures | Version -`dotnet10.0` | `aspnetcore-runtime-10.0` | aarch64, x86_64 | 10.0.5-1.amzn2023.0.2 +`dotnet10.0` | `aspnetcore-runtime-10.0` | aarch64, x86_64 | 10.0.7-1.amzn2023.0.1 @@ -384 +384 @@ Source RPM | RPM | Architectures | Version -`dotnet8.0` | `aspnetcore-runtime-8.0` | aarch64, x86_64 | 8.0.25-1.amzn2023.0.2 +`dotnet8.0` | `aspnetcore-runtime-8.0` | aarch64, x86_64 | 8.0.26-1.amzn2023.0.1 @@ -396 +396 @@ Source RPM | RPM | Architectures | Version -`dotnet9.0` | `aspnetcore-runtime-9.0` | aarch64, x86_64 | 9.0.14-1.amzn2023.0.1 +`dotnet9.0` | `aspnetcore-runtime-9.0` | aarch64, x86_64 | 9.0.15-1.amzn2023.0.1 @@ -432 +432 @@ Source RPM | RPM | Architectures | Version -`ecs-service-connect-agent` | `ecs-service-connect-agent` | aarch64, x86_64 | v1.34.13.0-1.amzn2023 +`ecs-service-connect-agent` | `ecs-service-connect-agent` | aarch64, x86_64 | v1.34.13.1-1.amzn2023 @@ -483 +483 @@ Source RPM | RPM | Architectures | Version -`firefox` | `firefox` | aarch64, x86_64 | 140.9.0-1.amzn2023.0.2 +`firefox` | `firefox` | aarch64, x86_64 | 140.9.1-1.amzn2023.0.1 @@ -488 +488 @@ Source RPM | RPM | Architectures | Version -`flatpak` | `flatpak` | aarch64, x86_64 | 1.15.10-1.amzn2023.0.2 +`flatpak` | `flatpak` | aarch64, x86_64 | 1.16.6-1.amzn2023 @@ -1352 +1352,2 @@ Source RPM | RPM | Architectures | Version -[`java-1.8.0-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-1.8.0-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 1.8.0_482.b08-1.amzn2023 +[`java-1.8.0-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-1.8.0-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 1.8.0_492.b09-1.amzn2023 +`java-1.8.0-amazon-corretto-debugsymbols` | aarch64, x86_64 @@ -1354 +1355,2 @@ Source RPM | RPM | Architectures | Version -[`java-11-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-11-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 11.0.30+7-1.amzn2023 +[`java-11-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-11-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 11.0.31+11-1.amzn2023 +`java-11-amazon-corretto-debugsymbols` | aarch64, x86_64 @@ -1359 +1361 @@ Source RPM | RPM | Architectures | Version -[`java-17-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-17-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 17.0.18+9-1.amzn2023.1 +[`java-17-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-17-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 17.0.19+10-1.amzn2023.1 @@ -1365 +1367 @@ Source RPM | RPM | Architectures | Version -[`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 21.0.10+7-1.amzn2023.1 +[`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 21.0.11+10-1.amzn2023.1 @@ -1388 +1390 @@ Source RPM | RPM | Architectures | Version -`java-25-amazon-corretto` | `java-25-amazon-corretto` | aarch64, x86_64 | 25.0.2+10-1.amzn2023.1 +`java-25-amazon-corretto` | `java-25-amazon-corretto` | aarch64, x86_64 | 25.0.3+9-1.amzn2023.1 @@ -1394 +1396 @@ Source RPM | RPM | Architectures | Version -`java-26-amazon-corretto` | `java-26-amazon-corretto` | aarch64, x86_64 | 26.0.0+35-2.amzn2023.1 +`java-26-amazon-corretto` | `java-26-amazon-corretto` | aarch64, x86_64 | 26.0.1+8-1.amzn2023.1 @@ -1476 +1478 @@ Source RPM | RPM | Architectures | Version -`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.79-101.147.amzn2023 +`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.80-105.147.amzn2023 @@ -1511,0 +1514 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.12.80-105.147` | aarch64, x86_64 @@ -2182 +2185 @@ Source RPM | RPM | Architectures | Version -`librsvg2` | `librsvg2` | aarch64, x86_64 | 2.59.2-317.amzn2023 +`librsvg2` | `librsvg2` | aarch64, x86_64 | 2.59.2-318.amzn2023 @@ -2218 +2221,3 @@ Source RPM | RPM | Architectures | Version -`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.5 +`libsrtp` | `libsrtp` | aarch64, x86_64 | 2.6.0-1.amzn2023.0.1 +`libsrtp-devel` | aarch64, x86_64 +`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.6 @@ -2500 +2505 @@ Source RPM | RPM | Architectures | Version -`maven3.9` | `maven3.9` | noarch | 3.9.9-3.amzn2023.0.1 +`maven3.9` | `maven3.9` | noarch | 3.9.14-3.amzn2023.0.1 @@ -2694 +2699 @@ Source RPM | RPM | Architectures | Version -`nerdctl` | `nerdctl` | aarch64, x86_64 | 2.2.1-1.amzn2023.0.3 +`nerdctl` | `nerdctl` | aarch64, x86_64 | 2.2.2-1.amzn2023.0.1 @@ -2710 +2715 @@ Source RPM | RPM | Architectures | Version -`ngtcp2` | `ngtcp2` | aarch64, x86_64 | 1.21.0-1.amzn2023.0.1 +`ngtcp2` | `ngtcp2` | aarch64, x86_64 | 1.21.0-1.amzn2023.0.2 @@ -2729 +2734 @@ Source RPM | RPM | Architectures | Version -`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.2-1.amzn2023.0.1 +`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.2-1.amzn2023.0.2 @@ -2737 +2742 @@ Source RPM | RPM | Architectures | Version -`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.2-1.amzn2023.0.1 +`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.2-1.amzn2023.0.2 @@ -2745 +2750 @@ Source RPM | RPM | Architectures | Version -`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.14.1-1.amzn2023.0.1 +`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.15.0-1.amzn2023.0.1 @@ -2840 +2845 @@ Source RPM | RPM | Architectures | Version -`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.8 +`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.9 @@ -2982 +2987 @@ Source RPM | RPM | Architectures | Version -`perl-CPAN` | `perl-CPAN` | noarch | 2.34-1.amzn2023.0.3 +`perl-CPAN` | `perl-CPAN` | noarch | 2.38-521.amzn2023.0.1 @@ -3039 +3044 @@ Source RPM | RPM | Architectures | Version -`perl-ExtUtils-InstallPaths` | `perl-ExtUtils-InstallPaths` | noarch | 0.012-11.amzn2023.0.2 +`perl-ExtUtils-InstallPaths` | `perl-ExtUtils-InstallPaths` | noarch | 0.015-2.amzn2023.0.1 @@ -3209 +3214 @@ Source RPM | RPM | Architectures | Version -`perl-Specio` | `perl-Specio` | noarch | 0.47-1.amzn2023.0.2 +`perl-Specio` | `perl-Specio` | noarch | 0.50-1.amzn2023.0.1 @@ -3684 +3689 @@ Source RPM | RPM | Architectures | Version -[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.14-1.amzn2023.0.6 +[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.15-1.amzn2023.0.1 @@ -3697 +3702 @@ Source RPM | RPM | Architectures | Version -[`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.12.12-2.amzn2023.0.5 +[`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.12.13-2.amzn2023.0.1 @@ -3711 +3716 @@ Source RPM | RPM | Architectures | Version -`python3.13` | `python3.13` | aarch64, x86_64 | 3.13.12-1.amzn2023.0.2 +`python3.13` | `python3.13` | aarch64, x86_64 | 3.13.13-1.amzn2023.0.1 @@ -3757 +3762 @@ Source RPM | RPM | Architectures | Version -`python3.13-tornado` | `python3.13-tornado` | aarch64, x86_64 | 6.4.2-1.amzn2023.0.2 +`python3.13-tornado` | `python3.13-tornado` | aarch64, x86_64 | 6.4.2-1.amzn2023.0.3 @@ -3767 +3772 @@ Source RPM | RPM | Architectures | Version -`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.2-2.amzn2023.0.4 +`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.3-2.amzn2023.0.1 @@ -3789 +3794 @@ Source RPM | RPM | Architectures | Version -[`python3.9`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | `python3` | aarch64, x86_64 | 3.9.25-1.amzn2023.0.4 +[`python3.9`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | `python3` | aarch64, x86_64 | 3.9.25-1.amzn2023.0.5 @@ -3923 +3928 @@ Source RPM | RPM | Architectures | Version -`python-jwcrypto` | `python3-jwcrypto` | noarch | 1.4.2-46.amzn2023 +`python-jwcrypto` | `python3-jwcrypto` | noarch | 1.4.2-46.amzn2023.0.1 @@ -3970 +3975 @@ Source RPM | RPM | Architectures | Version -`python-pip` | `python3-pip` | noarch | 21.3.1-2.amzn2023.0.16 +`python-pip` | `python3-pip` | noarch | 21.3.1-2.amzn2023.0.17 @@ -4106 +4111 @@ Source RPM | RPM | Architectures | Version -`python-tornado` | `python3-tornado` | aarch64, x86_64 | 6.1.0-2.amzn2023.0.7 +`python-tornado` | `python3-tornado` | aarch64, x86_64 | 6.1.0-2.amzn2023.0.8 @@ -4163 +4168 @@ Source RPM | RPM | Architectures | Version -`rclone` | `rclone` | aarch64, x86_64 | 1.73.0-73.amzn2023 +`rclone` | `rclone` | aarch64, x86_64 | 1.73.4-74.amzn2023 @@ -4199 +4204 @@ Source RPM | RPM | Architectures | Version -`ruby3.4` | `ruby3.4` | aarch64, x86_64 | 3.4.8-27.amzn2023.0.2 +`ruby3.4` | `ruby3.4` | aarch64, x86_64 | 3.4.8-27.amzn2023.0.4 @@ -4723 +4728 @@ Source RPM | RPM | Architectures | Version -`valkey` | `valkey` | aarch64, x86_64 | 8.0.6-3.amzn2023.0.3 +`valkey` | `valkey` | aarch64, x86_64 | 9.0.3-1.amzn2023.0.1 @@ -4821 +4826 @@ Source RPM | RPM | Architectures | Version -`xorg-x11-server-Xwayland` | `xorg-x11-server-Xwayland` | aarch64, x86_64 | 24.1.3-1.amzn2023.0.3 +`xorg-x11-server-Xwayland` | `xorg-x11-server-Xwayland` | aarch64, x86_64 | 24.1.3-1.amzn2023.0.4