AWS linux high security documentation change
Summary
Updated AL2023 version reference, increased RPM counts, and upgraded versions of multiple packages including amazon-cloudwatch-agent, kernel, firefox, libpq, and security-relevant components like credentials-fetcher and nginx-mod-headers-more.
Security assessment
The update includes kernel version bumps (6.12.88 and 6.18.30) which typically include security patches. Specific security-sensitive packages like credentials-fetcher (used for credential management), nginx security modules, and cryptography libraries (perl-Crypt*) were updated. While no explicit CVE is mentioned, kernel updates and security-component patches strongly imply security vulnerability mitigations.
Diff
diff --git a/linux/al2023/release-notes/new-AL1-AL2023.11.md b/linux/al2023/release-notes/new-AL1-AL2023.11.md index cd1353ed9..0508c5eb8 100644 --- a//linux/al2023/release-notes/new-AL1-AL2023.11.md +++ b//linux/al2023/release-notes/new-AL1-AL2023.11.md @@ -7 +7 @@ -Comparing AL1 version 2018.03 to AL2023.11 version [2023.11.20260514](./relnotes-2023.11.20260514.html). +Comparing AL1 version 2018.03 to AL2023.11 version [2023.11.20260526](./relnotes-2023.11.20260526.html). @@ -12 +12 @@ Source RPMs | 1625 -Total Binary RPMs | 7223 +Total Binary RPMs | 7227 @@ -14,2 +14,2 @@ Total Binary RPMs | 7223 -`x86_64` binary RPMs | 2391 -`aarch64` binary RPMs | 2346 +`x86_64` binary RPMs | 2393 +`aarch64` binary RPMs | 2348 @@ -51 +51 @@ Source RPM | RPM | Architectures | Version -`amazon-cloudwatch-agent` | `amazon-cloudwatch-agent` | aarch64, x86_64 | 1.300064.2-1.amzn2023 +`amazon-cloudwatch-agent` | `amazon-cloudwatch-agent` | aarch64, x86_64 | 1.300066.2-2.amzn2023 @@ -53 +53 @@ Source RPM | RPM | Architectures | Version -`amazon-ecr-credential-helper` | `amazon-ecr-credential-helper` | aarch64, x86_64 | 0.12.0-2.amzn2023 +`amazon-ecr-credential-helper` | `amazon-ecr-credential-helper` | aarch64, x86_64 | 0.12.0-3.amzn2023 @@ -280 +280 @@ Source RPM | RPM | Architectures | Version -`cni-plugins` | `cni-plugins` | aarch64, x86_64 | 1.7.1-1.amzn2023.0.5 +`cni-plugins` | `cni-plugins` | aarch64, x86_64 | 1.7.1-1.amzn2023.0.6 @@ -306 +306 @@ Source RPM | RPM | Architectures | Version -`credentials-fetcher` | `credentials-fetcher` | aarch64, x86_64 | 2.0.1-1.amzn2023.0.3 +`credentials-fetcher` | `credentials-fetcher` | aarch64, x86_64 | 2.0.1-1.amzn2023.0.5 @@ -355 +355 @@ Source RPM | RPM | Architectures | Version -`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.12-1.amzn2023 +`dnf-plugin-support-info` | `dnf-plugin-support-info` | noarch | 1.13-1.amzn2023 @@ -483 +483 @@ Source RPM | RPM | Architectures | Version -`firefox` | `firefox` | aarch64, x86_64 | 140.10.1-1.amzn2023.0.2 +`firefox` | `firefox` | aarch64, x86_64 | 140.10.2-1.amzn2023.0.3 @@ -645 +645 @@ Source RPM | RPM | Architectures | Version -`git-lfs` | `git-lfs` | aarch64, x86_64 | 3.7.1-79.amzn2023 +`git-lfs` | `git-lfs` | aarch64, x86_64 | 3.7.1-80.amzn2023 @@ -663 +663 @@ Source RPM | RPM | Architectures | Version -`glycin` | `glycin-loaders` | aarch64, x86_64 | 1.1.2-10.amzn2023 +`glycin` | `glycin-loaders` | aarch64, x86_64 | 1.1.2-11.amzn2023 @@ -722 +722 @@ Source RPM | RPM | Architectures | Version -`golang-github-burntsushi-toml` | `golang-github-burntsushi-toml` | aarch64, x86_64 | 0.3.1-9.amzn2023.0.2 +`golang-github-burntsushi-toml` | `golang-github-burntsushi-toml` | aarch64, x86_64 | 1.5.0-1.amzn2023.0.1 @@ -724 +724 @@ Source RPM | RPM | Architectures | Version -`golang-github-burntsushi-toml-test` | `golang-github-burntsushi-toml-test` | aarch64, x86_64 | 0.2.0-8.amzn2023.0.2 +`golang-github-burntsushi-toml-test` | `golang-github-burntsushi-toml-test` | aarch64, x86_64 | 0.2.0-8.amzn2023.0.3 @@ -726 +726 @@ Source RPM | RPM | Architectures | Version -`golang-github-cpuguy83-md2man` | `compat-golang-github-cpuguy83-md2man-2-devel` | noarch | 2.0.2-23.amzn2023.0.3 +`golang-github-cpuguy83-md2man` | `compat-golang-github-cpuguy83-md2man-2-devel` | noarch | 2.0.2-24.amzn2023.0.7 @@ -1479 +1479 @@ Source RPM | RPM | Architectures | Version -`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.83-115.161.amzn2023 +`kernel6.12` | `bpftool6.12` | aarch64, x86_64 | 6.12.88-119.157.amzn2023 @@ -1519,0 +1520 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.12.88-119.157` | aarch64, x86_64 @@ -1522 +1523 @@ Source RPM | RPM | Architectures | Version -`kernel6.18` | `bpftool6.18` | aarch64, x86_64 | 6.18.25-57.109.amzn2023 +`kernel6.18` | `bpftool6.18` | aarch64, x86_64 | 6.18.30-61.116.amzn2023 @@ -1539,0 +1541 @@ Source RPM | RPM | Architectures | Version +`kernel-livepatch-6.18.30-61.116` | aarch64, x86_64 @@ -2153 +2155 @@ Source RPM | RPM | Architectures | Version -`libpq` | `libpq` | aarch64, x86_64 | 17.8-1.amzn2023.0.1 +`libpq` | `libpq` | aarch64, x86_64 | 18.4-1.amzn2023.0.1 @@ -2194 +2196 @@ Source RPM | RPM | Architectures | Version -`librsvg2` | `librsvg2` | aarch64, x86_64 | 2.59.2-318.amzn2023 +`librsvg2` | `librsvg2` | aarch64, x86_64 | 2.59.2-319.amzn2023 @@ -2218 +2220 @@ Source RPM | RPM | Architectures | Version -`libsolv` | `libsolv` | aarch64, x86_64 | 0.7.22-1.amzn2023.0.2 +`libsolv` | `libsolv` | aarch64, x86_64 | 0.7.22-1.amzn2023.0.3 @@ -2658 +2660 @@ Source RPM | RPM | Architectures | Version -`mod_http2` | `mod_http2` | aarch64, x86_64 | 2.0.27-1.amzn2023.0.3 +`mod_http2` | `mod_http2` | aarch64, x86_64 | 2.0.39-1.amzn2023.0.1 @@ -2708 +2710 @@ Source RPM | RPM | Architectures | Version -`nerdctl` | `nerdctl` | aarch64, x86_64 | 2.2.2-1.amzn2023.0.1 +`nerdctl` | `nerdctl` | aarch64, x86_64 | 2.2.2-1.amzn2023.0.2 @@ -2723 +2725 @@ Source RPM | RPM | Architectures | Version -`nginx-mod-headers-more` | `nginx-mod-headers-more` | aarch64, x86_64 | 0.39-1.amzn2023.0.5 +`nginx-mod-headers-more` | `nginx-mod-headers-more` | aarch64, x86_64 | 0.39-1.amzn2023.0.6 @@ -2732 +2734 @@ Source RPM | RPM | Architectures | Version -`nkf` | `nkf` | aarch64, x86_64 | 2.1.4-19.amzn2023.0.3 +`nkf` | `nkf` | aarch64, x86_64 | 2.1.4-19.amzn2023.0.4 @@ -2835 +2837 @@ Source RPM | RPM | Architectures | Version -`oci-add-hooks` | `oci-add-hooks` | aarch64, x86_64 | 0-0.1.20200504git268e3bb.amzn2023.0.10 +`oci-add-hooks` | `oci-add-hooks` | aarch64, x86_64 | 0-0.1.20200504git268e3bb.amzn2023.0.11 @@ -2854 +2856 @@ Source RPM | RPM | Architectures | Version -`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.9 +`openexr` | `openexr` | aarch64, x86_64 | 3.1.5-1.amzn2023.0.11 @@ -2974,3 +2976,3 @@ Source RPM | RPM | Architectures | Version -`perl-autobox` | `perl-autobox` | aarch64, x86_64 | 3.0.1-12.amzn2023.0.2 -`perl-autovivification` | `perl-autovivification` | aarch64, x86_64 | 0.18-12.amzn2023.0.2 -`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.007-12.amzn2023.0.1 +`perl-autobox` | `perl-autobox` | aarch64, x86_64 | 3.0.1-12.amzn2023.0.3 +`perl-autovivification` | `perl-autovivification` | aarch64, x86_64 | 0.18-12.amzn2023.0.3 +`perl-B-COW` | `perl-B-COW` | aarch64, x86_64 | 0.007-12.amzn2023.0.2 @@ -2983 +2985 @@ Source RPM | RPM | Architectures | Version -`perl-B-Utils` | `perl-B-Utils` | aarch64, x86_64 | 0.27-19.amzn2023.0.2 +`perl-B-Utils` | `perl-B-Utils` | aarch64, x86_64 | 0.27-19.amzn2023.0.3 @@ -2988 +2990 @@ Source RPM | RPM | Architectures | Version -`perl-Compress-Bzip2` | `perl-Compress-Bzip2` | aarch64, x86_64 | 2.28-3.amzn2023.0.2 +`perl-Compress-Bzip2` | `perl-Compress-Bzip2` | aarch64, x86_64 | 2.28-3.amzn2023.0.3 @@ -2998 +3000 @@ Source RPM | RPM | Architectures | Version -`perl-Cpanel-JSON-XS` | `perl-Cpanel-JSON-XS` | aarch64, x86_64 | 4.25-2.amzn2023.0.7 +`perl-Cpanel-JSON-XS` | `perl-Cpanel-JSON-XS` | aarch64, x86_64 | 4.25-2.amzn2023.0.8 @@ -3000 +3002 @@ Source RPM | RPM | Architectures | Version -`perl-Crypt-Blowfish` | `perl-Crypt-Blowfish` | aarch64, x86_64 | 2.14-33.amzn2023.0.2 +`perl-Crypt-Blowfish` | `perl-Crypt-Blowfish` | aarch64, x86_64 | 2.14-33.amzn2023.0.3 @@ -3002 +3004 @@ Source RPM | RPM | Architectures | Version -`perl-Crypt-IDEA` | `perl-Crypt-IDEA` | aarch64, x86_64 | 1.10-26.amzn2023.0.1 +`perl-Crypt-IDEA` | `perl-Crypt-IDEA` | aarch64, x86_64 | 1.10-26.amzn2023.0.2 @@ -3006,2 +3008,2 @@ Source RPM | RPM | Architectures | Version -`perl-Crypt-Rijndael` | `perl-Crypt-Rijndael` | aarch64, x86_64 | 1.16-7.amzn2023.0.1 -`perl-CryptX` | `perl-CryptX` | aarch64, x86_64 | 0.088-2.amzn2023.0.1 +`perl-Crypt-Rijndael` | `perl-Crypt-Rijndael` | aarch64, x86_64 | 1.16-7.amzn2023.0.2 +`perl-CryptX` | `perl-CryptX` | aarch64, x86_64 | 0.088-2.amzn2023.0.2 @@ -3009 +3011 @@ Source RPM | RPM | Architectures | Version -`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.45-2.amzn2023.0.1 +`perl-Curses` | `perl-Curses` | aarch64, x86_64 | 1.45-2.amzn2023.0.2 @@ -3012 +3014 @@ Source RPM | RPM | Architectures | Version -`perl-Data-Dump-Streamer` | `perl-Data-Dump-Streamer` | aarch64, x86_64 | 2.40-17.amzn2023.0.2 +`perl-Data-Dump-Streamer` | `perl-Data-Dump-Streamer` | aarch64, x86_64 | 2.40-17.amzn2023.0.3 @@ -3019 +3021 @@ Source RPM | RPM | Architectures | Version -`perl-DBD-MariaDB` | `perl-DBD-MariaDB` | aarch64, x86_64 | 1.22-1.amzn2023.0.4 +`perl-DBD-MariaDB` | `perl-DBD-MariaDB` | aarch64, x86_64 | 1.22-1.amzn2023.0.5 @@ -3021 +3023 @@ Source RPM | RPM | Architectures | Version -`perl-Devel-Caller` | `perl-Devel-Caller` | aarch64, x86_64 | 2.07-11.amzn2023.0.1 +`perl-Devel-Caller` | `perl-Devel-Caller` | aarch64, x86_64 | 2.07-11.amzn2023.0.2 @@ -3026 +3028 @@ Source RPM | RPM | Architectures | Version -`perl-Devel-LexAlias` | `perl-Devel-LexAlias` | aarch64, x86_64 | 0.05-25.amzn2023.0.2 +`perl-Devel-LexAlias` | `perl-Devel-LexAlias` | aarch64, x86_64 | 0.05-25.amzn2023.0.3 @@ -3028 +3030 @@ Source RPM | RPM | Architectures | Version -`perl-Devel-PPPort` | `perl-Devel-PPPort` | aarch64, x86_64 | 3.73-522.amzn2023.0.1 +`perl-Devel-PPPort` | `perl-Devel-PPPort` | aarch64, x86_64 | 3.73-522.amzn2023.0.2 @@ -3030,2 +3032,2 @@ Source RPM | RPM | Architectures | Version -`perl-Devel-Refcount` | `perl-Devel-Refcount` | aarch64, x86_64 | 0.10-24.amzn2023.0.2 -`perl-Devel-Size` | `perl-Devel-Size` | aarch64, x86_64 | 0.86-1.amzn2023.0.1 +`perl-Devel-Refcount` | `perl-Devel-Refcount` | aarch64, x86_64 | 0.10-24.amzn2023.0.3 +`perl-Devel-Size` | `perl-Devel-Size` | aarch64, x86_64 | 0.86-1.amzn2023.0.2 @@ -3033,2 +3035,2 @@ Source RPM | RPM | Architectures | Version -`perl-Digest-CRC` | `perl-Digest-CRC` | aarch64, x86_64 | 0.24-13.amzn2023.0.1 -`perl-Digest-SHA3` | `perl-Digest-SHA3` | aarch64, x86_64 | 1.05-12.amzn2023.0.1 +`perl-Digest-CRC` | `perl-Digest-CRC` | aarch64, x86_64 | 0.24-13.amzn2023.0.2 +`perl-Digest-SHA3` | `perl-Digest-SHA3` | aarch64, x86_64 | 1.05-12.amzn2023.0.2 @@ -3038,3 +3040,3 @@ Source RPM | RPM | Architectures | Version -`perl-Encode-EUCJPASCII` | `perl-Encode-EUCJPASCII` | aarch64, x86_64 | 0.03-32.amzn2023.0.2 -`perl-Encode-HanExtra` | `perl-Encode-HanExtra` | aarch64, x86_64 | 0.23-32.amzn2023.0.2 -`perl-Encode-JIS2K` | `perl-Encode-JIS2K` | aarch64, x86_64 | 0.05-9.amzn2023.0.1 +`perl-Encode-EUCJPASCII` | `perl-Encode-EUCJPASCII` | aarch64, x86_64 | 0.03-32.amzn2023.0.3 +`perl-Encode-HanExtra` | `perl-Encode-HanExtra` | aarch64, x86_64 | 0.23-32.amzn2023.0.3 +`perl-Encode-JIS2K` | `perl-Encode-JIS2K` | aarch64, x86_64 | 0.05-9.amzn2023.0.2 @@ -3072 +3074 @@ Source RPM | RPM | Architectures | Version -`perl-Function-Parameters` | `perl-Function-Parameters` | aarch64, x86_64 | 2.1.3-11.amzn2023.0.2 +`perl-Function-Parameters` | `perl-Function-Parameters` | aarch64, x86_64 | 2.1.3-11.amzn2023.0.3 @@ -3075 +3077 @@ Source RPM | RPM | Architectures | Version -`perl-Graphics-TIFF` | `perl-Graphics-TIFF` | aarch64, x86_64 | 18-4.amzn2023 +`perl-Graphics-TIFF` | `perl-Graphics-TIFF` | aarch64, x86_64 | 18-4.amzn2023.0.1 @@ -3077 +3079 @@ Source RPM | RPM | Architectures | Version -`perl-Hash-FieldHash` | `perl-Hash-FieldHash` | aarch64, x86_64 | 0.15-16.amzn2023.0.2 +`perl-Hash-FieldHash` | `perl-Hash-FieldHash` | aarch64, x86_64 | 0.15-16.amzn2023.0.3 @@ -3088 +3090 @@ Source RPM | RPM | Architectures | Version -`perl-IPC-SysV` | `perl-IPC-SysV` | aarch64, x86_64 | 2.09-2.amzn2023.0.2 +`perl-IPC-SysV` | `perl-IPC-SysV` | aarch64, x86_64 | 2.09-2.amzn2023.0.3 @@ -3092 +3094 @@ Source RPM | RPM | Architectures | Version -`perl-libintl-perl` | `perl-libintl-perl` | aarch64, x86_64 | 1.32-2.amzn2023.0.2 +`perl-libintl-perl` | `perl-libintl-perl` | aarch64, x86_64 | 1.32-2.amzn2023.0.3 @@ -3096 +3098 @@ Source RPM | RPM | Architectures | Version -`perl-List-MoreUtils-XS` | `perl-List-MoreUtils-XS` | aarch64, x86_64 | 0.430-2.amzn2023.0.3 +`perl-List-MoreUtils-XS` | `perl-List-MoreUtils-XS` | aarch64, x86_64 | 0.430-2.amzn2023.0.4 @@ -3104 +3106 @@ Source RPM | RPM | Architectures | Version -`perl-Math-BigInt-FastCalc` | `perl-Math-BigInt-FastCalc` | aarch64, x86_64 | 0.501.400-3.amzn2023.0.1 +`perl-Math-BigInt-FastCalc` | `perl-Math-BigInt-FastCalc` | aarch64, x86_64 | 0.501.400-3.amzn2023.0.2 @@ -3111 +3113 @@ Source RPM | RPM | Architectures | Version -`perl-MIME-Base64` | `perl-MIME-Base64` | aarch64, x86_64 | 3.16-2.amzn2023.0.2 +`perl-MIME-Base64` | `perl-MIME-Base64` | aarch64, x86_64 | 3.16-2.amzn2023.0.3 @@ -3145 +3147 @@ Source RPM | RPM | Architectures | Version -`perl-MooseX-Role-WithOverloading` | `perl-MooseX-Role-WithOverloading` | aarch64, x86_64 | 0.17-19.amzn2023.0.2 +`perl-MooseX-Role-WithOverloading` | `perl-MooseX-Role-WithOverloading` | aarch64, x86_64 | 0.17-19.amzn2023.0.3 @@ -3151 +3153 @@ Source RPM | RPM | Architectures | Version -`perl-Mouse` | `perl-Mouse` | aarch64, x86_64 | 2.5.10-5.amzn2023.0.2 +`perl-Mouse` | `perl-Mouse` | aarch64, x86_64 | 2.5.10-5.amzn2023.0.3 @@ -3157,2 +3159,2 @@ Source RPM | RPM | Architectures | Version -`perl-Net-IDN-Encode` | `perl-Net-IDN-Encode` | aarch64, x86_64 | 2.500-9.amzn2023.0.2 -`perl-Net-LibIDN2` | `perl-Net-LibIDN2` | aarch64, x86_64 | 1.02-4.amzn2023 +`perl-Net-IDN-Encode` | `perl-Net-IDN-Encode` | aarch64, x86_64 | 2.500-9.amzn2023.0.3 +`perl-Net-LibIDN2` | `perl-Net-LibIDN2` | aarch64, x86_64 | 1.02-4.amzn2023.0.1 @@ -3167 +3169 @@ Source RPM | RPM | Architectures | Version -`perl-Package-Anon` | `perl-Package-Anon` | aarch64, x86_64 | 0.05-28.amzn2023.0.2 +`perl-Package-Anon` | `perl-Package-Anon` | aarch64, x86_64 | 0.05-28.amzn2023.0.3 @@ -3170 +3172 @@ Source RPM | RPM | Architectures | Version -`perl-Params-Classify` | `perl-Params-Classify` | aarch64, x86_64 | 0.015-12.amzn2023.0.2 +`perl-Params-Classify` | `perl-Params-Classify` | aarch64, x86_64 | 0.015-12.amzn2023.0.3 @@ -3192 +3194 @@ Source RPM | RPM | Architectures | Version -`perl-PerlIO-utf8_strict` | `perl-PerlIO-utf8_strict` | aarch64, x86_64 | 0.008-2.amzn2023.0.2 +`perl-PerlIO-utf8_strict` | `perl-PerlIO-utf8_strict` | aarch64, x86_64 | 0.008-2.amzn2023.0.3 @@ -3213 +3215 @@ Source RPM | RPM | Architectures | Version -`perl-Ref-Util-XS` | `perl-Ref-Util-XS` | aarch64, x86_64 | 0.117-11.amzn2023.0.2 +`perl-Ref-Util-XS` | `perl-Ref-Util-XS` | aarch64, x86_64 | 0.117-11.amzn2023.0.3 @@ -3216 +3218 @@ Source RPM | RPM | Architectures | Version -`perl-Scope-Upper` | `perl-Scope-Upper` | aarch64, x86_64 | 0.32-6.amzn2023.0.2 +`perl-Scope-Upper` | `perl-Scope-Upper` | aarch64, x86_64 | 0.32-6.amzn2023.0.3 @@ -3218,3 +3220,3 @@ Source RPM | RPM | Architectures | Version -`perl-Sereal-Decoder` | `perl-Sereal-Decoder` | aarch64, x86_64 | 4.018-2.amzn2023.0.2 -`perl-Sereal-Encoder` | `perl-Sereal-Encoder` | aarch64, x86_64 | 4.018-2.amzn2023.0.2