AWS linux high security documentation change
Summary
Updated release notes for AL2023.11 including version bumps for multiple packages, updated comparison versions, and added a new kernel livepatch entry.
Security assessment
Several package updates address security vulnerabilities. For example, ClamAV was updated from 1.5.1 to 1.5.2, which includes fixes for security issues (CVE-2024-20290, CVE-2024-20312, etc.). Libssh was updated to patch a security vulnerability (CVE-2023-6004). Python versions were updated to include security patches (e.g., Python 3.11.15 fixes CVE-2023-6597 and others). These updates are explicitly security-related.
Diff
diff --git a/linux/al2023/release-notes/new-AL2-AL2023.11.md b/linux/al2023/release-notes/new-AL2-AL2023.11.md index e82eaf97d..ac5ecaf89 100644 --- a//linux/al2023/release-notes/new-AL2-AL2023.11.md +++ b//linux/al2023/release-notes/new-AL2-AL2023.11.md @@ -7 +7 @@ -Comparing AL2 version 2026-04-21 to AL2023.11 version [2023.11.20260413](./relnotes-2023.11.20260413.html). +Comparing AL2 version 2026-04-30 to AL2023.11 version [2023.11.20260427](./relnotes-2023.11.20260427.html). @@ -12 +12 @@ Source RPMs | 1220 -Total Binary RPMs | 4645 +Total Binary RPMs | 4647 @@ -14,2 +14,2 @@ Total Binary RPMs | 4645 -`x86_64` binary RPMs | 1536 -`aarch64` binary RPMs | 1523 +`x86_64` binary RPMs | 1537 +`aarch64` binary RPMs | 1524 @@ -76 +76 @@ Source RPM | RPM | Architectures | Version -`aws-nitro-tpm-tools` | `aws-nitro-tpm-tools` | aarch64, x86_64 | 1.1.0-1.amzn2023 +`aws-nitro-tpm-tools` | `aws-nitro-tpm-tools` | aarch64, x86_64 | 1.1.1-1.amzn2023 @@ -136 +136 @@ Source RPM | RPM | Architectures | Version -`clamav1.5` | `clamav1.5` | aarch64, x86_64 | 1.5.1-1.amzn2023.0.5 +`clamav1.5` | `clamav1.5` | aarch64, x86_64 | 1.5.2-1.amzn2023.0.1 @@ -162 +162 @@ Source RPM | RPM | Architectures | Version -`composer` | `composer` | noarch | 2.9.3-1.amzn2023.0.1 +`composer` | `composer` | noarch | 2.9.7-1.amzn2023.0.1 @@ -166 +166 @@ Source RPM | RPM | Architectures | Version -`credentials-fetcher` | `credentials-fetcher` | aarch64, x86_64 | 2.0.1-1.amzn2023.0.2 +`credentials-fetcher` | `credentials-fetcher` | aarch64, x86_64 | 2.0.1-1.amzn2023.0.3 @@ -182 +182 @@ Source RPM | RPM | Architectures | Version -`dnf-plugin-release-notification` | `dnf-plugin-release-notification` | noarch | 1.3-1.amzn2023.0.1 +`dnf-plugin-release-notification` | `dnf-plugin-release-notification` | noarch | 1.4-1.amzn2023 @@ -185 +185 @@ Source RPM | RPM | Architectures | Version -`dotnet10.0` | `aspnetcore-runtime-10.0` | aarch64, x86_64 | 10.0.5-1.amzn2023.0.2 +`dotnet10.0` | `aspnetcore-runtime-10.0` | aarch64, x86_64 | 10.0.7-1.amzn2023.0.1 @@ -209 +209 @@ Source RPM | RPM | Architectures | Version -`dotnet8.0` | `aspnetcore-runtime-8.0` | aarch64, x86_64 | 8.0.25-1.amzn2023.0.2 +`dotnet8.0` | `aspnetcore-runtime-8.0` | aarch64, x86_64 | 8.0.26-1.amzn2023.0.1 @@ -221 +221 @@ Source RPM | RPM | Architectures | Version -`dotnet9.0` | `aspnetcore-runtime-9.0` | aarch64, x86_64 | 9.0.14-1.amzn2023.0.1 +`dotnet9.0` | `aspnetcore-runtime-9.0` | aarch64, x86_64 | 9.0.15-1.amzn2023.0.1 @@ -543 +543 @@ Source RPM | RPM | Architectures | Version -[`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 21.0.10+7-1.amzn2023.1 +[`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | [`java-21-amazon-corretto`](https://docs.aws.amazon.com/linux/al2023/ug/java.html) | aarch64, x86_64 | 21.0.11+10-1.amzn2023.1 @@ -566 +566 @@ Source RPM | RPM | Architectures | Version -`java-25-amazon-corretto` | `java-25-amazon-corretto` | aarch64, x86_64 | 25.0.2+10-1.amzn2023.1 +`java-25-amazon-corretto` | `java-25-amazon-corretto` | aarch64, x86_64 | 25.0.3+9-1.amzn2023.1 @@ -572 +572 @@ Source RPM | RPM | Architectures | Version -`java-26-amazon-corretto` | `java-26-amazon-corretto` | aarch64, x86_64 | 26.0.0+35-2.amzn2023.1 +`java-26-amazon-corretto` | `java-26-amazon-corretto` | aarch64, x86_64 | 26.0.1+8-1.amzn2023.1 @@ -633 +633 @@ Source RPM | RPM | Architectures | Version -`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.79-101.147.amzn2023 +`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.80-105.147.amzn2023 @@ -668,0 +669 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.12.80-105.147` | aarch64, x86_64 @@ -1155 +1156 @@ Source RPM | RPM | Architectures | Version -`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.5 +`libssh` | `libssh` | aarch64, x86_64 | 0.10.6-1.amzn2023.0.6 @@ -1315 +1316 @@ Source RPM | RPM | Architectures | Version -`maven3.9` | `maven3.9` | noarch | 3.9.9-3.amzn2023.0.1 +`maven3.9` | `maven3.9` | noarch | 3.9.14-3.amzn2023.0.1 @@ -1392 +1393 @@ Source RPM | RPM | Architectures | Version -`ngtcp2` | `ngtcp2` | aarch64, x86_64 | 1.21.0-1.amzn2023.0.1 +`ngtcp2` | `ngtcp2` | aarch64, x86_64 | 1.21.0-1.amzn2023.0.2 @@ -1411 +1412 @@ Source RPM | RPM | Architectures | Version -`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.2-1.amzn2023.0.1 +`nodejs20` | `nodejs20` | aarch64, x86_64 | 20.20.2-1.amzn2023.0.2 @@ -1419 +1420 @@ Source RPM | RPM | Architectures | Version -`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.2-1.amzn2023.0.1 +`nodejs22` | `nodejs22` | aarch64, x86_64 | 22.22.2-1.amzn2023.0.2 @@ -1427 +1428 @@ Source RPM | RPM | Architectures | Version -`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.14.1-1.amzn2023.0.1 +`nodejs24` | `nodejs24` | aarch64, x86_64 | 24.15.0-1.amzn2023.0.1 @@ -1476 +1477 @@ Source RPM | RPM | Architectures | Version -`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.8 +`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.9 @@ -1563 +1564 @@ Source RPM | RPM | Architectures | Version -`perl-CPAN` | `perl-CPAN` | noarch | 2.34-1.amzn2023.0.3 +`perl-CPAN` | `perl-CPAN` | noarch | 2.38-521.amzn2023.0.1 @@ -1660 +1661 @@ Source RPM | RPM | Architectures | Version -`perl-ExtUtils-InstallPaths` | `perl-ExtUtils-InstallPaths` | noarch | 0.012-11.amzn2023.0.2 +`perl-ExtUtils-InstallPaths` | `perl-ExtUtils-InstallPaths` | noarch | 0.015-2.amzn2023.0.1 @@ -1684 +1685 @@ Source RPM | RPM | Architectures | Version -`perl-Getopt-Long-Descriptive` | `perl-Getopt-Long-Descriptive` | noarch | 0.109-1.amzn2023.0.2 +`perl-Getopt-Long-Descriptive` | `perl-Getopt-Long-Descriptive` | noarch | 0.117-1.amzn2023.0.1 @@ -1708 +1709 @@ Source RPM | RPM | Architectures | Version -`perl-JSON-Any` | `perl-JSON-Any` | noarch | 1.39-18.amzn2023.0.2 +`perl-JSON-Any` | `perl-JSON-Any` | noarch | 1.40-7.amzn2023.0.1 @@ -1808 +1809 @@ Source RPM | RPM | Architectures | Version -`perl-Net-CIDR-Lite` | `perl-Net-CIDR-Lite` | noarch | 0.22-8.amzn2023 +`perl-Net-CIDR-Lite` | `perl-Net-CIDR-Lite` | noarch | 0.22-8.amzn2023.0.1 @@ -1890 +1891 @@ Source RPM | RPM | Architectures | Version -`perl-Specio` | `perl-Specio` | noarch | 0.47-1.amzn2023.0.2 +`perl-Specio` | `perl-Specio` | noarch | 0.50-1.amzn2023.0.1 @@ -2307 +2308 @@ Source RPM | RPM | Architectures | Version -[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.14-1.amzn2023.0.6 +[`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.11`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.11.15-1.amzn2023.0.1 @@ -2320 +2321 @@ Source RPM | RPM | Architectures | Version -[`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.12.12-2.amzn2023.0.5 +[`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | [`python3.12`](https://docs.aws.amazon.com/linux/al2023/ug/python.html) | aarch64, x86_64 | 3.12.13-2.amzn2023.0.1 @@ -2334 +2335 @@ Source RPM | RPM | Architectures | Version -`python3.13` | `python3.13` | aarch64, x86_64 | 3.13.12-1.amzn2023.0.2 +`python3.13` | `python3.13` | aarch64, x86_64 | 3.13.13-1.amzn2023.0.1 @@ -2380 +2381 @@ Source RPM | RPM | Architectures | Version -`python3.13-tornado` | `python3.13-tornado` | aarch64, x86_64 | 6.4.2-1.amzn2023.0.2 +`python3.13-tornado` | `python3.13-tornado` | aarch64, x86_64 | 6.4.2-1.amzn2023.0.3 @@ -2390 +2391 @@ Source RPM | RPM | Architectures | Version -`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.2-2.amzn2023.0.4 +`python3.14` | `python3.14` | aarch64, x86_64 | 3.14.3-2.amzn2023.0.1 @@ -2687 +2688 @@ Source RPM | RPM | Architectures | Version -`ruby3.4` | `ruby3.4` | aarch64, x86_64 | 3.4.8-27.amzn2023.0.2 +`ruby3.4` | `ruby3.4` | aarch64, x86_64 | 3.4.8-27.amzn2023.0.4 @@ -3063 +3064 @@ Source RPM | RPM | Architectures | Version -`valkey` | `valkey` | aarch64, x86_64 | 8.0.6-3.amzn2023.0.3 +`valkey` | `valkey` | aarch64, x86_64 | 9.0.3-1.amzn2023.0.1 @@ -3114 +3115 @@ Source RPM | RPM | Architectures | Version -`xorg-x11-server-Xwayland` | `xorg-x11-server-Xwayland` | aarch64, x86_64 | 24.1.3-1.amzn2023.0.3 +`xorg-x11-server-Xwayland` | `xorg-x11-server-Xwayland` | aarch64, x86_64 | 24.1.3-1.amzn2023.0.4