Amazon Linux 2.0.20211005.0 release notes

Amazon Linux 2 was updated.

Major updates

Amazon Linux 2 includes the following update.

• None

Package updates

Amazon Linux 2 includes the following packages.

Packages
amazon-linux-extras-2.0.1-1.amzn2.noarch
amazon-linux-extras-yum-plugin-2.0.1-1.amzn2.noarch
dmidecode-3.2-5.amzn2.1.aarch64
dmidecode-3.2-5.amzn2.1.x86_64
glib2-2.56.1-9.amzn2.0.2.aarch64
glib2-2.56.1-9.amzn2.0.2.x86_64
glibc-2.26-55.amzn2.aarch64
glibc-2.26-55.amzn2.x86_64
glibc-all-langpacks-2.26-55.amzn2.aarch64
glibc-all-langpacks-2.26-55.amzn2.x86_64
glibc-common-2.26-55.amzn2.aarch64
glibc-common-2.26-55.amzn2.x86_64
glibc-devel-2.26-55.amzn2.x86_64
glibc-headers-2.26-55.amzn2.x86_64
glibc-langpack-en-2.26-55.amzn2.aarch64
glibc-langpack-en-2.26-55.amzn2.x86_64
glibc-locale-source-2.26-55.amzn2.aarch64
glibc-locale-source-2.26-55.amzn2.x86_64
glibc-minimal-langpack-2.26-55.amzn2.aarch64
glibc-minimal-langpack-2.26-55.amzn2.x86_64
grubby-8.28-23.amzn2.0.3.aarch64
grubby-8.28-23.amzn2.0.3.x86_64
kernel-4.14.248-189.473.amzn2.aarch64
kernel-4.14.248-189.473.amzn2.x86_64
kernel-devel-4.14.248-189.473.amzn2.x86_64
kernel-headers-4.14.248-189.473.amzn2.x86_64
kernel-tools-4.14.248-189.473.amzn2.aarch64
kernel-tools-4.14.248-189.473.amzn2.x86_64
libcrypt-2.26-55.amzn2.aarch64
libcrypt-2.26-55.amzn2.x86_64
libsss_idmap-1.16.5-10.amzn2.10.aarch64
libsss_idmap-1.16.5-10.amzn2.10.x86_64
libsss_nss_idmap-1.16.5-10.amzn2.10.aarch64

Kernel updates

Rebase kernel to upstream stable 4.14.252.

CVEs fixed:

• CVE-2020-16119 [dccp: don't duplicate ccid when cloning dccp sock]

• CVE-2021-40490 [ext4: fix race writing to an inline_data file while its xattrs are changing]

• CVE-2021-42252 [soc: aspeed: lpc-ctrl: Fix boundary check for mmap]

Other Fixes:

• mm/kmemleak.c: Makes cond_resched() rate-limiting more efficient

• mm/page_alloc: Speeds up the iteration of max_order

• tcp: seq_file: Avoids skipping sk during tcp_seek_last_pos

• KVM: x86: Updates vCPU's hv_clock before back to guest when tsc_offset is adjusted

• cifs: Fixes wrong release in sess_alloc_buffer() failed path

• rcu: Fixes missed wakeup of exp_wq waiters