Amazon Linux 2.0.20210525.0 release notes

Amazon Linux 2 was updated.

Major updates

Amazon Linux 2 includes the following update.

• Updated chrony to 4.0 from 3.5.1

Package updates

Amazon Linux 2 includes the following packages.

Packages
bind-export-libs-9.11.4-26.P2.amzn2.5.aarch64
bind-export-libs-9.11.4-26.P2.amzn2.5.x86_64
bind-libs-9.11.4-26.P2.amzn2.5.aarch64
bind-libs-9.11.4-26.P2.amzn2.5.x86_64
bind-libs-lite-9.11.4-26.P2.amzn2.5.aarch64
bind-libs-lite-9.11.4-26.P2.amzn2.5.x86_64
bind-license-9.11.4-26.P2.amzn2.5.noarch
bind-utils-9.11.4-26.P2.amzn2.5.aarch64
bind-utils-9.11.4-26.P2.amzn2.5.x86_64
chrony-4.0-3.amzn2.0.1.aarch64
chrony-4.0-3.amzn2.0.1.x86_64
ec2-utils-1.2-44.amzn2.noarch
glibc-2.26-45.amzn2.aarch64
glibc-2.26-45.amzn2.x86_64
glibc-all-langpacks-2.26-45.amzn2.aarch64
glibc-all-langpacks-2.26-45.amzn2.x86_64
glibc-common-2.26-45.amzn2.aarch64
glibc-common-2.26-45.amzn2.x86_64
glibc-devel-2.26-45.amzn2.x86_64
glibc-headers-2.26-45.amzn2.x86_64
glibc-langpack-en-2.26-45.amzn2.aarch64
glibc-langpack-en-2.26-45.amzn2.x86_64
glibc-locale-source-2.26-45.amzn2.aarch64
glibc-locale-source-2.26-45.amzn2.x86_64
glibc-minimal-langpack-2.26-45.amzn2.aarch64
glibc-minimal-langpack-2.26-45.amzn2.x86_64
kernel-4.14.232-176.381.amzn2.aarch64
kernel-4.14.232-176.381.amzn2.x86_64
kernel-devel-4.14.232-176.381.amzn2.x86_64
kernel-headers-4.14.232-176.381.amzn2.x86_64
kernel-tools-4.14.232-176.381.amzn2.aarch64
kernel-tools-4.14.232-176.381.amzn2.x86_64
libcrypt-2.26-45.amzn2.aarch64
libcrypt-2.26-45.amzn2.x86_64
libjpeg-turbo-2.0.90-2.amzn2.0.1.aarch64
libjpeg-turbo-2.0.90-2.amzn2.0.1.x86_64
openldap-2.4.44-23.amzn2.aarch64
openldap-2.4.44-23.amzn2.x86_64
python2-setuptools-41.2.0-4.amzn2.0.2.noarch
python3-3.7.9-1.amzn2.0.3.aarch64
python3-3.7.9-1.amzn2.0.3.x86_64
python3-libs-3.7.9-1.amzn2.0.3.aarch64
python3-libs-3.7.9-1.amzn2.0.3.x86_64
python3-pip-20.2.2-1.amzn2.0.2.noarch
python3-setuptools-49.1.3-1.amzn2.0.2.noarch

Kernel updates

Rebase kernel to upstream stable 4.14.232.

Lustre: Update to Client v2.10.8-7

CVEs fixed:

• CVE-2020-29374 [gup: document and work around "COW can break either way" issue]

• CVE-2021-23133 [net/sctp: fix race condition in sctp_destroy_sock]

Amazon Features and Backports:

• bpf: Fixes up selftests after backports were fixed

• bpf, selftests: Fixes up some test_verifier cases for unprivileged

• bpf: Moves off_reg into sanitize_ptr_alu

• bpf: Ensures off_reg has no mixed signed bounds for all types

• bpf: Reworkes ptr_limit into alu_limit and add common error path

• bpf: Improves verifier error messages for users

• bpf: Refactors and streamlines bounds check into helper

• bpf: Moves sanitize_val_alu out of op switch

• bpf: Tightens speculative pointer arithmetic mask

• bpf: Updates selftests to reflect new error states

• bpf: Doesn't allow root to mangle valid pointers

• bpf/verifier: Doesn't allow pointer subtraction

• selftests/bpf: Fixes test_align

• selftests/bpf: Makes 'dubious pointer arithmetic' test useful

• bpf: Fixes masking negation logic upon negative dst register

• bpf: Fixes leakage of uninitialized bpf stack under speculation

• Reverts "net/sctp: fix race condition in sctp_destroy_sock"

• sctp: Delays auto_asconf init until binding the first addr

• cifs: Fixes panic in smb2_reconnect

Other Fixes:

• arm64: Fixes inline asm in load_unaligned_zeropad()

• ext4: Corrects the error label in ext4_rename()

• x86/crash: Fixes crash_setup_memmap_entries() out-of-bounds access