Amazon Linux 2.0.20211005.0 release notes - Amazon Linux 2
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Linux 2.0.20211005.0 release notes

Amazon Linux 2 was updated.

Major updates

Amazon Linux 2 includes the following update.

  • None

Package updates

Amazon Linux 2 includes the following packages.

Packages

amazon-linux-extras-2.0.1-1.amzn2.noarch

amazon-linux-extras-yum-plugin-2.0.1-1.amzn2.noarch

dmidecode-3.2-5.amzn2.1.aarch64

dmidecode-3.2-5.amzn2.1.x86_64

glib2-2.56.1-9.amzn2.0.2.aarch64

glib2-2.56.1-9.amzn2.0.2.x86_64

glibc-2.26-55.amzn2.aarch64

glibc-2.26-55.amzn2.x86_64

glibc-all-langpacks-2.26-55.amzn2.aarch64

glibc-all-langpacks-2.26-55.amzn2.x86_64

glibc-common-2.26-55.amzn2.aarch64

glibc-common-2.26-55.amzn2.x86_64

glibc-devel-2.26-55.amzn2.x86_64

glibc-headers-2.26-55.amzn2.x86_64

glibc-langpack-en-2.26-55.amzn2.aarch64

glibc-langpack-en-2.26-55.amzn2.x86_64

glibc-locale-source-2.26-55.amzn2.aarch64

glibc-locale-source-2.26-55.amzn2.x86_64

glibc-minimal-langpack-2.26-55.amzn2.aarch64

glibc-minimal-langpack-2.26-55.amzn2.x86_64

grubby-8.28-23.amzn2.0.3.aarch64

grubby-8.28-23.amzn2.0.3.x86_64

kernel-4.14.248-189.473.amzn2.aarch64

kernel-4.14.248-189.473.amzn2.x86_64

kernel-devel-4.14.248-189.473.amzn2.x86_64

kernel-headers-4.14.248-189.473.amzn2.x86_64

kernel-tools-4.14.248-189.473.amzn2.aarch64

kernel-tools-4.14.248-189.473.amzn2.x86_64

libcrypt-2.26-55.amzn2.aarch64

libcrypt-2.26-55.amzn2.x86_64

libsss_idmap-1.16.5-10.amzn2.10.aarch64

libsss_idmap-1.16.5-10.amzn2.10.x86_64

libsss_nss_idmap-1.16.5-10.amzn2.10.aarch64

Kernel updates

Rebase kernel to upstream stable 4.14.252.

CVEs fixed:

  • CVE-2020-16119 [dccp: don't duplicate ccid when cloning dccp sock]

  • CVE-2021-40490 [ext4: fix race writing to an inline_data file while its xattrs are changing]

  • CVE-2021-42252 [soc: aspeed: lpc-ctrl: Fix boundary check for mmap]

Other Fixes:

  • mm/kmemleak.c: Makes cond_resched() rate-limiting more efficient

  • mm/page_alloc: Speeds up the iteration of max_order

  • tcp: seq_file: Avoids skipping sk during tcp_seek_last_pos

  • KVM: x86: Updates vCPU's hv_clock before back to guest when tsc_offset is adjusted

  • cifs: Fixes wrong release in sess_alloc_buffer() failed path

  • rcu: Fixes missed wakeup of exp_wq waiters