AWS linux: AL2023 release notes: FreeRDP CLI disabled, virtualization stack
Summary
Adds a Special Announcements section (curated QEMU/libvirt virtualization stack, FreeRDP 3.6.3 to 3.31.0 upgrade plan) and Notable updates (btrfs-progs promotion, FreeRDP embedded CLI and .rdp option parsing disabled).
Security assessment
The FreeRDP change disables embedded CLI and .rdp option parsing, a hardening measure that reduces attack surface, and the notes state security patches are provided for included components; however no specific CVE or vulnerability is named, so this is security-adjacent guidance rather than a fixed-vulnerability disclosure.
Evidence
+ * In FreeRDP, the embedded CLI and parsing of CLI options in `.rdp` files have been disabled. Update existing `.rdp` files to not use "/" options. For more information, see the official advisory.
Diff
diff --git a/linux/al2023/release-notes/relnotes-2023.12.20260831.md b/linux/al2023/release-notes/relnotes-2023.12.20260831.md index 20d7f0964..a5506a83d 100644 --- a//linux/al2023/release-notes/relnotes-2023.12.20260831.md +++ b//linux/al2023/release-notes/relnotes-2023.12.20260831.md @@ -5 +5 @@ -Release SummaryRepository UpdatesImage UpdatesContact us +Special AnnouncementsRelease SummaryRepository UpdatesImage UpdatesContact us @@ -12,0 +13,2 @@ These are the release notes for Amazon Linux 2023 (AL2023) version 2023.12.20260 + * [Special Announcements](./relnotes-2023.12.20260831.html#announcements-2023.12.20260831) + @@ -43,0 +46,15 @@ These are the release notes for Amazon Linux 2023 (AL2023) version 2023.12.20260 +## Special Announcements + +###### Note + + * Amazon Linux now includes a curated virtualization stack for development, testing, and CI use cases. This stack includes QEMU (system and userspace emulation for x86_64 and aarch64), libvirt for VM lifecycle management, and boot firmware (SeaBIOS, EDK2 UEFI). It ships with modern virtio devices for storage and networking, with passt for unprivileged user-mode networking. + + * This is not a production hypervisor. Features such as live migration, suspend/resume across QEMU versions, and legacy device emulation are not supported. We recommend Amazon EC2 for production virtualization workloads. + + * Security patches are provided for all included components. + + * The Amazon Linux team plans to update FreeRDP from version 3.6.3 to 3.31.0 in the next release. Plan to upgrade to FreeRDP 3.31 and recompile software that is bound to the old ABI. For a full list of changes, see the [FreeRDP releases page](https://github.com/FreeRDP/FreeRDP/releases) on the GitHub website. + + + + @@ -47,0 +65,9 @@ This release represents an update to the 12th quarterly release of AL2023. AL202 +###### Notable updates + + * `btrfs-progs` has been promoted from SPAL to the core repository and updated to version 7.1. This release is experimental. Before running production workloads, thoroughly test `btrfs-progs` and the btrfs filesystem in a non-production environment to confirm it meets your requirements. For usage and configuration, see the [official btrfs documentation](https://btrfs.readthedocs.io). + + * In FreeRDP, the embedded CLI and parsing of CLI options in `.rdp` files have been disabled. Update existing `.rdp` files to not use "/" options. For more information, see the official advisory. + + + + @@ -359 +385 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -2023.12 release notes +AL2023 version 2023.12.20260909