Amazon Linux 2023 version 2022.0.20220831 release notes

• There have been some changes to the build flags that will propagate throughout the packages over the next few months.

• Starting with AL2023 version 2022.0.20220728, SELinux was switched from an enforcing to a permissive mode by default. You can change SELinux settings to enforced mode via command line by running the setenforce command.

• The legacy pcre package is deprecated and will be removed in a future Amazon Linux release. The pcre2 package is the successor, and the few remaining packages in Amazon Linux 2022 that depend on the deprecated pcre library will be migrated to pcre2 in future updates.

• The kernel package will see changes to improve aspects of security and performance, and, while core functionality will be maintained, some unused or deprecated features may be removed in future Release Candidates.

Java Ecosystem

• The maven, xmvn, and javapackages-tools should function as expected, but the versions present in this release have not yet been rebuilt after a bootstrap phase. These packages will be re-built without the use of javapackages-bootstrap before General Availability.

Known Issues

• There is a known issue by which enabling FIPS mode with update-crypto-policies --set FIPS will result in a non functional system. This will be addressed in a future release.

Security Updates

• For information on the CVEs addressed in this release, refer to the Amazon Linux Security Center.

• Kernel updated from 5.10 to 5.15

• OpenSSL updated from 1.1 to 3.0

• Amazon CLI updated to Amazon CLI v2

• Amazon Tools found in AL2 have been added to the repositories like ecs-agent, aws-cfn-bootstrap, aws-kinesis-agent, ec2-instance-connect, and other tools.

• rsyslog is no longer installed by default, and thus the system-journald is the way syslog works, with journalctl as the client that can look at logs.

• The default curl is part of the curl-minimal package, which supports the most popular protocols. You can switch to the full-featured curl if needed by running dnf install --allowerasing curl-full libcurl-full

• The default gnupg is a minimal one, which is limited in functionality, but has the minimal code needed to GPG verify RPMs, and brings a minimal number of packages into AMIs and container images. If you need full gnupg functionality, you can get the full gnupg by running dnf install --allowerasing gnupg2-full

• Curation of packages - As part of the development cycle, we have curated the list of packages available in the repositories. This involved removing a number of packages that were no longer needed due to dependencies. Some package may be re-added to the repository as we work through customer requests.

• Language run-times were updated and some runtimes like Ruby were name-spaced allowing newer versions to be added in the future without removing the current ones from the repositories.

• bpftrace-0.15.0-1.amzn2022

• kernel-libbpf-5.15.57-30.131.amzn2022

• kernel-libbpf-devel-5.15.57-30.131.amzn2022

• kernel-libbpf-static-5.15.57-30.131.amzn2022

• libbpf-tools-0.24.0-2.amzn2022.0.1

• mpdecimal-2.5.1-3.amzn2022

• mpdecimal-devel-2.5.1-3.amzn2022

• mpdecimal-doc-2.5.1-3.amzn2022

• system-release-2022.0.20220831-0.amzn2022.noarch

• tzdata-2022c-1.amzn2022.0.1.noarch