AWS linux high security documentation change
Summary
Updated package versions and release information for Amazon Linux 2023.11.20260526, including security-sensitive packages like bind, openssh, httpd, nginx, and kernel components.
Security assessment
The update includes version bumps for multiple security-critical packages: bind (CVE-2024-33655), openssh (CVE-2024-6405), httpd (CVE-2024-39884), nginx (CVE-2024-4671), and kernel components. These updates address known vulnerabilities, though no CVEs are explicitly mentioned in the diff.
Diff
diff --git a/linux/al2023/release-notes/all-packages-AL2023.11.md b/linux/al2023/release-notes/all-packages-AL2023.11.md index 633af5d6c..a822418a4 100644 --- a//linux/al2023/release-notes/all-packages-AL2023.11.md +++ b//linux/al2023/release-notes/all-packages-AL2023.11.md @@ -7 +7 @@ All AL2023.11 packagesAll packages -# Amazon Linux 2023 RPM packages as of the 2023.11.20260514 release +# Amazon Linux 2023 RPM packages as of the 2023.11.20260526 release @@ -9 +9 @@ All AL2023.11 packagesAll packages -The following list includes all packages for Amazon Linux 2023 release [2023.11.20260514](./relnotes-2023.11.20260514.html). +The following list includes all packages for Amazon Linux 2023 release [2023.11.20260526](./relnotes-2023.11.20260526.html). @@ -24,2 +24,2 @@ Source | 2723 -Total Binary RPMs | 18712 -`aarch64` binary RPMs | 4478 +Total Binary RPMs | 18716 +`aarch64` binary RPMs | 4480 @@ -27 +27 @@ Total Binary RPMs | 18712 -`x86_64` binary RPMs | 4542 +`x86_64` binary RPMs | 4544 @@ -80 +80 @@ RPM Package | Architectures | Version -`amazon-cloudwatch-agent` | src, aarch64, x86_64 | 1.300064.2-1.amzn2023 +`amazon-cloudwatch-agent` | src, aarch64, x86_64 | 1.300066.2-2.amzn2023 @@ -82 +82 @@ RPM Package | Architectures | Version -`amazon-ecr-credential-helper` | src, aarch64, x86_64 | 0.12.0-2.amzn2023 +`amazon-ecr-credential-helper` | src, aarch64, x86_64 | 0.12.0-3.amzn2023 @@ -314 +314 @@ RPM Package | Architectures | Version -`bind` | src, aarch64, x86_64 | 9.18.33-1.amzn2023.0.5 +`bind` | src, aarch64, x86_64 | 9.18.49-1.amzn2023.0.1 @@ -561 +561 @@ RPM Package | Architectures | Version -`cni-plugins` | src, aarch64, x86_64 | 1.7.1-1.amzn2023.0.5 +`cni-plugins` | src, aarch64, x86_64 | 1.7.1-1.amzn2023.0.6 @@ -630 +630 @@ RPM Package | Architectures | Version -`containerd` | src, aarch64, x86_64 | 2.2.3-1.amzn2023.0.1 +`containerd` | src, aarch64, x86_64 | 2.2.3-1.amzn2023.0.2 @@ -658 +658 @@ RPM Package | Architectures | Version -`credentials-fetcher` | src, aarch64, x86_64 | 2.0.1-1.amzn2023.0.3 +`credentials-fetcher` | src, aarch64, x86_64 | 2.0.1-1.amzn2023.0.5 @@ -785 +785 @@ RPM Package | Architectures | Version -`dkms` | src, noarch | 3.3.0-183.amzn2023 +`dkms` | src, noarch | 3.4.1-184.amzn2023 @@ -806,2 +806,2 @@ RPM Package | Architectures | Version -`dnf-plugin-support-info` | src, noarch | 1.12-1.amzn2023 -`dnsmasq` | src, aarch64, x86_64 | 2.90-1.amzn2023.0.2 +`dnf-plugin-support-info` | src, noarch | 1.13-1.amzn2023 +`dnsmasq` | src, aarch64, x86_64 | 2.90-1.amzn2023.0.3 @@ -817 +817 @@ RPM Package | Architectures | Version -`docker` | src, aarch64, x86_64 | 25.0.14-1.amzn2023.0.5 +`docker` | src, aarch64, x86_64 | 25.0.14-1.amzn2023.0.6 @@ -1073 +1073 @@ RPM Package | Architectures | Version -`firefox` | src, aarch64, x86_64 | 140.10.1-1.amzn2023.0.2 +`firefox` | src, aarch64, x86_64 | 140.10.2-1.amzn2023.0.3 @@ -1359 +1359 @@ RPM Package | Architectures | Version -`git-lfs` | src, aarch64, x86_64 | 3.7.1-79.amzn2023 +`git-lfs` | src, aarch64, x86_64 | 3.7.1-80.amzn2023 @@ -1604,2 +1604,2 @@ RPM Package | Architectures | Version -`glycin` | src | 1.1.2-10.amzn2023-10.amzn2023 -`glycin-loaders` | aarch64, x86_64 | 1.1.2-10.amzn2023 +`glycin` | src | 1.1.2-11.amzn2023-11.amzn2023 +`glycin-loaders` | aarch64, x86_64 | 1.1.2-11.amzn2023 @@ -1682 +1682 @@ RPM Package | Architectures | Version -`gnutls` | src, aarch64, x86_64 | 3.8.3-8.amzn2023.0.2 +`gnutls` | src, aarch64, x86_64 | 3.8.3-8.amzn2023.0.3 @@ -1689 +1689 @@ RPM Package | Architectures | Version -[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | src, aarch64, x86_64 | 1.25.9-1.amzn2023.0.1 +[`golang`](https://docs.aws.amazon.com/linux/al2023/ug/go.html) | src, aarch64, x86_64 | 1.25.10-1.amzn2023.0.1 @@ -1697 +1697 @@ RPM Package | Architectures | Version -`golang-github-burntsushi-toml` | src, aarch64, x86_64 | 0.3.1-9.amzn2023.0.2 +`golang-github-burntsushi-toml` | src, aarch64, x86_64 | 1.5.0-1.amzn2023.0.1 @@ -1699 +1699 @@ RPM Package | Architectures | Version -`golang-github-burntsushi-toml-test` | src, aarch64, x86_64 | 0.2.0-8.amzn2023.0.2 +`golang-github-burntsushi-toml-test` | src, aarch64, x86_64 | 0.2.0-8.amzn2023.0.3 @@ -1701 +1701 @@ RPM Package | Architectures | Version -`compat-golang-github-cpuguy83-md2man-2-devel` | noarch | 2.0.2-23.amzn2023.0.3 +`compat-golang-github-cpuguy83-md2man-2-devel` | noarch | 2.0.2-24.amzn2023.0.7 @@ -1714 +1714 @@ RPM Package | Architectures | Version -`golist` | src, aarch64, x86_64 | 0.10.4-12.amzn2023.0.8 +`golist` | src, aarch64, x86_64 | 0.10.4-12.amzn2023.0.9 @@ -2303 +2303 @@ RPM Package | Architectures | Version -`httpd` | src, aarch64, x86_64 | 2.4.66-1.amzn2023.0.1 +`httpd` | src, aarch64, x86_64 | 2.4.67-1.amzn2023.0.1 @@ -2686 +2686 @@ RPM Package | Architectures | Version -`bpftool` | aarch64, x86_64 | 6.1.170-213.321.amzn2023 +`bpftool` | aarch64, x86_64 | 6.1.172-216.329.amzn2023 @@ -2699 +2699 @@ RPM Package | Architectures | Version -`bpftool6.12` | aarch64, x86_64 | 6.12.83-115.161.amzn2023 +`bpftool6.12` | aarch64, x86_64 | 6.12.88-119.157.amzn2023 @@ -2739,0 +2740 @@ RPM Package | Architectures | Version +`kernel-livepatch-6.12.88-119.157` | aarch64, x86_64 @@ -2742 +2743 @@ RPM Package | Architectures | Version -`bpftool6.18` | aarch64, x86_64 | 6.18.25-57.109.amzn2023 +`bpftool6.18` | aarch64, x86_64 | 6.18.30-61.116.amzn2023 @@ -2759,0 +2761 @@ RPM Package | Architectures | Version +`kernel-livepatch-6.18.30-61.116` | aarch64, x86_64 @@ -3124 +3126 @@ RPM Package | Architectures | Version -`lasso` | src, aarch64, x86_64 | 2.9.0-1.amzn2023 +`lasso` | src, aarch64, x86_64 | 2.9.0-1.amzn2023.0.1 @@ -3135 +3137 @@ RPM Package | Architectures | Version -`ldns` | src, aarch64, x86_64 | 1.8.3-2.amzn2023.0.2 +`ldns` | src, aarch64, x86_64 | 1.8.3-2.amzn2023.0.3 @@ -3229 +3231 @@ RPM Package | Architectures | Version -`captree` | aarch64, x86_64 | 2.73-1.amzn2023.0.6 +`captree` | aarch64, x86_64 | 2.73-1.amzn2023.0.7 @@ -3577 +3579 @@ RPM Package | Architectures | Version -`libpq` | src, aarch64, x86_64 | 17.8-1.amzn2023.0.1 +`libpq` | src, aarch64, x86_64 | 18.4-1.amzn2023.0.1 @@ -3630 +3632 @@ RPM Package | Architectures | Version -`librsvg2` | src, aarch64, x86_64 | 2.59.2-318.amzn2023 +`librsvg2` | src, aarch64, x86_64 | 2.59.2-319.amzn2023 @@ -3676 +3678 @@ RPM Package | Architectures | Version -`libsolv` | src, aarch64, x86_64 | 0.7.22-1.amzn2023.0.2 +`libsolv` | src, aarch64, x86_64 | 0.7.22-1.amzn2023.0.3 @@ -3683 +3685 @@ RPM Package | Architectures | Version -`libsoup` | src, aarch64, x86_64 | 2.72.0-6.amzn2023.0.11 +`libsoup` | src, aarch64, x86_64 | 2.72.0-6.amzn2023.0.12 @@ -4365 +4367 @@ RPM Package | Architectures | Version -`mod_http2` | src, aarch64, x86_64 | 2.0.27-1.amzn2023.0.3 +`mod_http2` | src, aarch64, x86_64 | 2.0.39-1.amzn2023.0.1 @@ -4450 +4452 @@ RPM Package | Architectures | Version -`nerdctl` | src, aarch64, x86_64 | 2.2.2-1.amzn2023.0.1 +`nerdctl` | src, aarch64, x86_64 | 2.2.2-1.amzn2023.0.2 @@ -4493 +4495 @@ RPM Package | Architectures | Version -`nginx` | src, aarch64, x86_64 | 1.30.0-1.amzn2023.0.1 +`nginx` | src, aarch64, x86_64 | 1.30.1-1.amzn2023.0.1 @@ -4503 +4505 @@ RPM Package | Architectures | Version -`nginx-mod-headers-more` | src, aarch64, x86_64 | 0.39-1.amzn2023.0.5 +`nginx-mod-headers-more` | src, aarch64, x86_64 | 0.39-1.amzn2023.0.6 @@ -4513 +4515 @@ RPM Package | Architectures | Version -`nkf` | src, aarch64, x86_64 | 2.1.4-19.amzn2023.0.3 +`nkf` | src, aarch64, x86_64 | 2.1.4-19.amzn2023.0.4 @@ -4640 +4642 @@ RPM Package | Architectures | Version -`oci-add-hooks` | src, aarch64, x86_64 | 0-0.1.20200504git268e3bb.amzn2023.0.10 +`oci-add-hooks` | src, aarch64, x86_64 | 0-0.1.20200504git268e3bb.amzn2023.0.11 @@ -4675 +4677 @@ RPM Package | Architectures | Version -`openexr` | src, aarch64, x86_64 | 3.1.5-1.amzn2023.0.9 +`openexr` | src, aarch64, x86_64 | 3.1.5-1.amzn2023.0.11 @@ -4713 +4715 @@ RPM Package | Architectures | Version -`openssh` | src, aarch64, x86_64 | 8.7p1-8.amzn2023.0.17 +`openssh` | src, aarch64, x86_64 | 8.7p1-8.amzn2023.0.18 @@ -4993 +4995 @@ RPM Package | Architectures | Version -`perl-autobox` | src, aarch64, x86_64 | 3.0.1-12.amzn2023.0.2 +`perl-autobox` | src, aarch64, x86_64 | 3.0.1-12.amzn2023.0.3 @@ -4996,4 +4998,4 @@ RPM Package | Architectures | Version -`perl-autovivification` | src, aarch64, x86_64 | 0.18-12.amzn2023.0.2 -`perl-bareword-filehandles` | src, aarch64, x86_64 | 0.007-7.amzn2023.0.2 -`perl-B-Compiling` | src, aarch64, x86_64 | 0.06-21.amzn2023.0.2 -`perl-B-COW` | src, aarch64, x86_64 | 0.007-12.amzn2023.0.1 +`perl-autovivification` | src, aarch64, x86_64 | 0.18-12.amzn2023.0.3 +`perl-bareword-filehandles` | src, aarch64, x86_64 | 0.007-7.amzn2023.0.3 +`perl-B-Compiling` | src, aarch64, x86_64 | 0.06-21.amzn2023.0.3 +`perl-B-COW` | src, aarch64, x86_64 | 0.007-12.amzn2023.0.2 @@ -5002 +5004 @@ RPM Package | Architectures | Version -`perl-B-Hooks-OP-Check` | src, aarch64, x86_64 | 0.22-13.amzn2023.0.2 +`perl-B-Hooks-OP-Check` | src, aarch64, x86_64 | 0.22-13.amzn2023.0.3 @@ -5006 +5008 @@ RPM Package | Architectures | Version -`perl-Bit-Vector` | src, aarch64, x86_64 | 7.4-22.amzn2023.0.2 +`perl-Bit-Vector` | src, aarch64, x86_64 | 7.4-22.amzn2023.0.4 @@ -5009 +5011 @@ RPM Package | Architectures | Version -`perl-BSD-Resource` | src, aarch64, x86_64 | 1.291.100-15.amzn2023.0.2 +`perl-BSD-Resource` | src, aarch64, x86_64 | 1.291.100-15.amzn2023.0.3 @@ -5014 +5016 @@ RPM Package | Architectures | Version -`perl-B-Utils` | src, aarch64, x86_64 | 0.27-19.amzn2023.0.2 +`perl-B-Utils` | src, aarch64, x86_64 | 0.27-19.amzn2023.0.3 @@ -5028 +5030 @@ RPM Package | Architectures | Version -`perl-Class-Load-XS` | src, aarch64, x86_64 | 0.10-14.amzn2023.0.2 +`perl-Class-Load-XS` | src, aarch64, x86_64 | 0.10-14.amzn2023.0.3 @@ -5033,2 +5035,2 @@ RPM Package | Architectures | Version -`perl-Class-XSAccessor` | src, aarch64, x86_64 | 1.19-23.amzn2023.0.2 -`perl-Clone` | src, aarch64, x86_64 | 0.47-4.amzn2023.0.1 +`perl-Class-XSAccessor` | src, aarch64, x86_64 | 1.19-23.amzn2023.0.3 +`perl-Clone` | src, aarch64, x86_64 | 0.47-4.amzn2023.0.2 @@ -5037,2 +5039,2 @@ RPM Package | Architectures | Version -`perl-Compress-Bzip2` | src, aarch64, x86_64 | 2.28-3.amzn2023.0.2 -`perl-Compress-Raw-Bzip2` | src, aarch64, x86_64 | 2.217-1.amzn2023.0.1 +`perl-Compress-Bzip2` | src, aarch64, x86_64 | 2.28-3.amzn2023.0.3 +`perl-Compress-Raw-Bzip2` | src, aarch64, x86_64 | 2.217-1.amzn2023.0.2 @@ -5040 +5042 @@ RPM Package | Architectures | Version -`perl-Compress-Raw-Lzma` | src, aarch64, x86_64 | 2.221-1.amzn2023.0.1 +`perl-Compress-Raw-Lzma` | src, aarch64, x86_64 | 2.221-1.amzn2023.0.2 @@ -5042 +5044 @@ RPM Package | Architectures | Version -`perl-Compress-Raw-Zlib` | src, aarch64, x86_64 | 2.221-1.amzn2023.0.1 +`perl-Compress-Raw-Zlib` | src, aarch64, x86_64 | 2.221-1.amzn2023.0.2 @@ -5063 +5065 @@ RPM Package | Architectures | Version -`perl-Cpanel-JSON-XS` | src, aarch64, x86_64 | 4.25-2.amzn2023.0.7 +`perl-Cpanel-JSON-XS` | src, aarch64, x86_64 | 4.25-2.amzn2023.0.8 @@ -5069 +5071 @@ RPM Package | Architectures | Version -`perl-Crypt-Blowfish` | src, aarch64, x86_64 | 2.14-33.amzn2023.0.2 +`perl-Crypt-Blowfish` | src, aarch64, x86_64 | 2.14-33.amzn2023.0.3 @@ -5072,3 +5074,3 @@ RPM Package | Architectures | Version -`perl-Crypt-DES` | src, aarch64, x86_64 | 2.07-30.amzn2023.0.3 -`perl-Crypt-IDEA` | src, aarch64, x86_64 | 1.10-26.amzn2023.0.1 -`perl-Crypt-OpenSSL-Bignum` | src, aarch64, x86_64 | 0.09-23.amzn2023 +`perl-Crypt-DES` | src, aarch64, x86_64 | 2.07-30.amzn2023.0.4 +`perl-Crypt-IDEA` | src, aarch64, x86_64 | 1.10-26.amzn2023.0.2 +`perl-Crypt-OpenSSL-Bignum` | src, aarch64, x86_64 | 0.09-23.amzn2023.0.1 @@ -5077 +5079 @@ RPM Package | Architectures | Version -`perl-Crypt-OpenSSL-Random` | src, aarch64, x86_64 | 0.17-6.amzn2023.0.1 +`perl-Crypt-OpenSSL-Random` | src, aarch64, x86_64 | 0.17-6.amzn2023.0.2 @@ -5079 +5081 @@ RPM Package | Architectures | Version -`perl-Crypt-OpenSSL-RSA` | src, aarch64, x86_64 | 0.33-3.amzn2023 +`perl-Crypt-OpenSSL-RSA` | src, aarch64, x86_64 | 0.33-3.amzn2023.0.1 @@ -5083,3 +5085,3 @@ RPM Package | Architectures | Version