本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 亚马逊 Linux 2023 版本 2023.8.20250721 发行说明
<a name="relnotes-2023.8.20250721"></a>

这些是亚马逊 Linux 2023 (AL2023) 版本 2023.8.20250721 的发行说明。

**Contents**
+ [版本摘要](#release-summary-2023.8.20250721)
+ [重要通告通知](#important-advisory-notice-2023.8.20250721)
  + [AL2023 核心](#al2023-core-advisories-2023.8.20250721)
  + [AL2023 内核直播补丁](#al2023-kernel-livepatch-advisories-2023.8.20250721)
+ [存储库更新](#repository-updates-2023.8.20250721)
  + [Core 新程序包](#amis-2023.8.20250721.Core-New-Packages)
  + [Core 更新程序包](#amis-2023.8.20250721.Core-Updated-Packages)
  + [内核实时补丁新程序包](#amis-2023.8.20250721.Kernel-livepatch-New-Packages)
  + [内核实时补丁更新程序包](#amis-2023.8.20250721.Kernel-livepatch-Updated-Packages)
+ [映像更新](#ami-updates-2023.8.20250721)
  + [默认内核 6.1 AMI](#amis-2023.8.20250721.Default-Kernel-6-1-AMI)
  + [最小内核 6.1 AMI](#amis-2023.8.20250721.Minimal-Kernel-6-1-AMI)
  + [默认内核 6.12 AMI](#amis-2023.8.20250721.Default-Kernel-6-12-AMI)
  + [最小内核 6.12 AMI](#amis-2023.8.20250721.Minimal-Kernel-6-12-AMI)
  + [默认容器](#amis-2023.8.20250721.Default-Container)
  + [最小容器](#amis-2023.8.20250721.Minimal-Container)
+ [联系我们](#amis-2023.8.20250721.contact-us)

## 版本摘要
<a name="release-summary-2023.8.20250721"></a>

此版本是对第八季度版本的更新 AL2023。 AL2023是下一代亚马逊 Linux。它具有五年的支持，并将诸如确定性更新和对Graviton处理器的更好优化等功能引入了Amazon Linux。 AL2023 已为生产工作负载做好了准备，您可以立即开始从以前的 Amazon Linux 版本进行迁移。

**显著更新**
+  **kernel6.12 程序包重命名：**`kernel6.12` 子程序包已被重命名，并且 6.1 `kernel` 和 `kernel6.12` 的 RPM epoch 已增加到 1。这对 6.12 内核用户的更新过程产生了影响。内核子程序包需要显式切换到其相应的 6.12 程序包，这些程序包现在带有包含主版本 `6.12` 的不同名称。请参阅 [kernel6.12 的更新文档](https://docs.aws.amazon.com/linux/al2023/ug/kernel-update.html)。
**注意**  
 从现在起，需要 `kernel6.12` 内核开发程序包的用户需要安装 `kernel6.12-devel`。
+  AL2023 使用 CONFIG\$1LRU\$1GEN 功能启用了 kernel-6.1 和 kernel-6.12 

**安全更新**
+ 有关先前版本中已 CVEs 解决问题的信息，请参阅 [Amazon Linux 安全中心](https://alas.aws.amazon.com/alas2023.html)。
+ 要了解尚未解决的状态 CVEs ，请访问 [Amazon Linux 安全中心](https://explore.alas.aws.amazon.com/)。

## 重要通告通知
<a name="important-advisory-notice-2023.8.20250721"></a>

与此发布版本中程序包相关的安全通告在存储库元数据和 ALAS 网站中缺失。因此，依赖存储库元数据来跟踪或应用安全更新的系统（例如：使用 dnf/yum update --security）将无法感知此发布版本中可用的新更新。利用最新版本的系统 AMIs 将有最新的更新。

我们理解安全可见性和合规性的重要性，并正在积极解决此问题。包含存储库元数据的后续发布版本将于 2025 年 7 月 28 日当周发布。

此版本中 CVEs 已修复的完整列表包括：

### AL2023 核心
<a name="al2023-core-advisories-2023.8.20250721"></a>


| 新程序包 NVR | 旧程序包 NVR | CVE | 
| --- | --- | --- | 
| bind-9.18.33-1.amzn2023.0.3 | bind-9.18.33-1.amzn2023.0.2 | CVE-2025-40777 | 
| ecs-init-1.96.0-1.amzn2023 | ecs-init-1.95.0-1.amzn2023 | CVE-2025-22874、CVE-2025-4673 | 
| git-2.50.1-1.amzn2023.0.1 | git-2.47.1-1.amzn2023.0.3 | CVE-2025-27613、CVE-2025-27614、CVE-2025-46835、CVE-2025-48384、CVE-2025-48385、CVE-2025-48385 | 
| gnupg2-2.3.7-1.amzn2023.0.5 | gnupg2-2.3.7-1.amzn2023.0.4 | CVE-2025-30258 | 
| golang-1.24.5-1.amzn2023.0.1 | golang-1.24.4-1.amzn2023.0.1 | CVE-2025-4674 | 
| java-1.8.0-amazon-corretto-1.8.0\$1462.b08-1.amzn2023 | java-1.8.0-amazon-corretto-1.8.0\$1452.b09-2.amzn2023 | CVE-2025-30749、CVE-2025-30754、CVE-2025-30761、CVE-2025-50106 | 
| java-11-amazon-corretto-11.0.28\$16-1.amzn2023 | java-11-amazon-corretto-11.0.27\$16-1.amzn2023 | CVE-2025-30749、CVE-2025-30754、CVE-2025-30761、CVE-2025-50059、CVE-2025-50106 | 
| java-17-amazon-corretto-17.0.16\$18-1.amzn2023.1 | java-17-amazon-corretto-17.0.15\$16-1.amzn2023.1 | CVE-2025-30749、CVE-2025-30754、CVE-2025-50059、CVE-2025-50106 | 
| java-21-amazon-corretto-21.0.8\$19-1.amzn2023.1 | java-21-amazon-corretto-21.0.7\$16-1.amzn2023.1 | CVE-2025-30749、CVE-2025-30754、CVE-2025-50059、CVE-2025-50106 | 
| java-24-amazon-corretto-24.0.2\$112-1.amzn2023.1 | java-24-amazon-corretto-24.0.1\$19-1.amzn2023.1 | CVE-2025-30749、CVE-2025-30754、CVE-2025-50059、CVE-2025-50106 | 
| jq-1.7.1-50.amzn2023 | jq-1.7.1-49.amzn2023.0.2 | CVE-2024-23337 | 
| kernel-6.1.144-170.251.amzn2023 | kernel-6.1.141-165.249.amzn2023 | CVE-2024-36913、CVE-2024-41013、CVE-2024-57883、CVE-2025-37807、CVE-2025-37958 | 
| libarchive-3.7.4-2.amzn2023.0.4 | libarchive-3.7.4-2.amzn2023.0.3 | CVE-2025-5915、CVE-2025-5917 | 
| libxml2-2.10.4-1.amzn2023.0.12 | libxml2-2.10.4-1.amzn2023.0.11 | CVE-2025-49794、CVE-2025-49795、CVE-2025-49796 | 
| mtr-0.95-3.amzn2023.0.2 | mtr-0.95-3.amzn2023.0.1 | CVE-2025-49809 | 
| php8.1-8.1.33-1.amzn2023.0.1 | php8.1-8.1.32-1.amzn2023.0.1 | CVE-2025-1220、CVE-2025-1735、CVE-2025-6491 | 
| php8.2-8.2.29-1.amzn2023.0.1 | php8.2-8.2.28-1.amzn2023.0.1 | CVE-2025-1220、CVE-2025-1735、CVE-2025-6491 | 
| php8.3-8.3.23-1.amzn2023.0.1 | php8.3-8.3.22-1.amzn2023.0.1 | CVE-2025-1220、CVE-2025-1735、CVE-2025-6491 | 
| php8.4-8.4.10-1.amzn2023.0.1 | php8.4-8.4.8-1.amzn2023.0.1 | CVE-2025-1220、CVE-2025-1735、CVE-2025-6491 | 
| python-pip-21.3.1-2.amzn2023.0.13 | python-pip-21.3.1-2.amzn2023.0.12 | CVE-2025-50181 | 
| python-requests-2.25.1-1.amzn2023.0.6 | python-requests-2.25.1-1.amzn2023.0.5 | CVE-2024-47081 | 
| python3.11-3.11.13-1.amzn2023.0.2 | python3.11-3.11.12-2.amzn2023.0.2 | CVE-2025-6069 | 
| python3.11-pip-22.3.1-2.amzn2023.0.7 | python3.11-pip-22.3.1-2.amzn2023.0.6 | CVE-2024-47081、CVE-2025-50181 | 
| python3.12-pip-23.2.1-4.amzn2023.0.5 | python3.12-pip-23.2.1-4.amzn2023.0.3 | CVE-2025-50181 | 
| python3.9-3.9.23-1.amzn2023.0.2 | python3.9-3.9.22-1.amzn2023.0.2 | CVE-2025-6069 | 
| ruby3.2-3.2.8-184.amzn2023.0.2 | ruby3.2-3.2.8-184.amzn2023.0.1 | CVE-2025-6442 | 
| rust-1.88.0-1.amzn2023.0.2 | rust-1.87.0-1.amzn2023.0.1 | CVE-2025-53605 | 
| tomcat10-10.1.43-1.amzn2023.0.1 | tomcat10-10.1.42-1.amzn2023.0.1 | CVE-2025-53506 | 
| tomcat9-9.0.107-1.amzn2023.0.1 | tomcat9-9.0.106-1.amzn2023.0.1 | CVE-2025-52434、CVE-2025-53506 | 

### AL2023 内核直播补丁
<a name="al2023-kernel-livepatch-advisories-2023.8.20250721"></a>


| 新程序包 NVR | 旧程序包 NVR | CVE | 
| --- | --- | --- | 
| kernel-livepatch-6.1.140-154.222-1.0-1.amzn2023 | 此为新增内容 | CVE-2025-38000、CVE-2025-38003 | 
| kernel-livepatch-6.12.25-32.101-1.0-1.amzn2023 | 此为新增内容 | CVE-2025-38037 | 
| kernel-livepatch-6.12.29-33.102-1.0-1.amzn2023 | 此为新增内容 | CVE-2025-38037 | 
| kernel-livepatch-6.12.30-34.92-1.0-1.amzn2023 | 此为新增内容 | CVE-2025-38037 | 
| kernel-livepatch-6.1.134-150.224-1.0-3.amzn2023 | kernel-livepatch-6.1.134-150.224-1.0-2.amzn2023 | CVE-2025-38000、CVE-2025-38003 | 
| kernel-livepatch-6.1.134-152.225-1.0-3.amzn2023 | kernel-livepatch-6.1.134-152.225-1.0-2.amzn2023 | CVE-2025-38000、CVE-2025-38003 | 

## 存储库更新
<a name="repository-updates-2023.8.20250721"></a>

### Core 新程序包
<a name="amis-2023.8.20250721.Core-New-Packages"></a>

这部分提供关于 Core 新程序包的详细信息。


|  | 
| --- |
|  python3.13-3.13.3-3.amzn2023.0.4  | 
|  python3.13-flit-core-3.9.0-9.amzn2023.0.3  | 
|  python3.13-packaging-24.2-92.amzn2023  | 
|  python3.13-pip-24.2-259.amzn2023.0.1  | 
|  python3.13-setuptools-69.2.0-382.amzn2023  | 
|  python3.13-wheel-0.43.0-103.amzn2023  | 

### Core 更新程序包
<a name="amis-2023.8.20250721.Core-Updated-Packages"></a>

这部分提供有关核心更新程序包的详细信息。


|  | 
| --- |
|  amazon-ec2-net-utils-2.7.0-1.amzn2023.0.1  | 
|  aws-cfn-bootstrap-2.0-35.amzn2023  | 
|  bind-9.18.33-1.amzn2023.0.3  | 
|  ecs-init-1.96.0-1.amzn2023  | 
|  git-2.50.1-1.amzn2023.0.1  | 
|  gnome-control-center-47.3-196.amzn2023  | 
|  gnupg2-2.3.7-1.amzn2023.0.5  | 
|  golang-1.24.5-1.amzn2023.0.1  | 
|  java-1.8.0-amazon-corretto-1.8.0\$1462.b08-1.amzn2023  | 
|  java-11-amazon-corretto-11.0.28\$16-1.amzn2023  | 
|  java-17-amazon-corretto-17.0.16\$18-1.amzn2023.1  | 
|  java-21-amazon-corretto-21.0.8\$19-1.amzn2023.1  | 
|  java-24-amazon-corretto-24.0.2\$112-1.amzn2023.1  | 
|  jq-1.7.1-50.amzn2023  | 
|  kernel-6.1.144-170.251.amzn2023  | 
|  kernel6.12-6.12.37-61.105.amzn2023  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libsigc\$1\$130-3.6.0-3.amzn2023.0.1  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  mtr-0.95-3.amzn2023.0.2  | 
|  nerdctl-2.1.3-1.amzn2023.0.1  | 
|  php8.1-8.1.33-1.amzn2023.0.1  | 
|  php8.2-8.2.29-1.amzn2023.0.1  | 
|  php8.3-8.3.23-1.amzn2023.0.1  | 
|  php8.4-8.4.10-1.amzn2023.0.1  | 
|  python-pip-21.3.1-2.amzn2023.0.13  | 
|  python-requests-2.25.1-1.amzn2023.0.6  | 
|  python3.11-3.11.13-1.amzn2023.0.2  | 
|  python3.11-pip-22.3.1-2.amzn2023.0.7  | 
|  python3.12-pip-23.2.1-4.amzn2023.0.5  | 
|  python3.9-3.9.23-1.amzn2023.0.2  | 
|  ruby3.2-3.2.8-184.amzn2023.0.2  | 
|  runfinch-finch-1.10.0-1.amzn2023.0.1  | 
|  rust-1.88.0-1.amzn2023.0.2  | 
|  showtime-48.1-10.amzn2023  | 
|  soci-snapshotter-0.11.1-1.amzn2023.0.1  | 
|  system-release-2023.8.20250721-0.amzn2023  | 
|  systemtap-5.2-1.amzn2023.0.5  | 
|  tomcat10-10.1.43-1.amzn2023.0.1  | 
|  tomcat9-9.0.107-1.amzn2023.0.1  | 

### 内核实时补丁新程序包
<a name="amis-2023.8.20250721.Kernel-livepatch-New-Packages"></a>

这部分提供关于内核实时补丁新程序包的详细信息。


|  | 
| --- |
|  kernel-livepatch-6.1.140-154.222-1.0-1.amzn2023  | 
|  kernel-livepatch-6.12.25-32.101-1.0-1.amzn2023  | 
|  kernel-livepatch-6.12.29-33.102-1.0-1.amzn2023  | 
|  kernel-livepatch-6.12.30-34.92-1.0-1.amzn2023  | 

### 内核实时补丁更新程序包
<a name="amis-2023.8.20250721.Kernel-livepatch-Updated-Packages"></a>

这部分提供关于内核实时补丁更新程序包的详细信息。


|  | 
| --- |
|  kernel-livepatch-6.1.134-150.224-1.0-3.amzn2023  | 
|  kernel-livepatch-6.1.134-152.225-1.0-3.amzn2023  | 

## 映像更新
<a name="ami-updates-2023.8.20250721"></a>

### 默认内核 6.1 AMI
<a name="amis-2023.8.20250721.Default-Kernel-6-1-AMI"></a>

这部分提供有关默认内核 6.1 AMI 的详细信息。


|  | 
| --- |
|  amazon-ec2-net-utils-2.7.0-1.amzn2023.0.1  | 
|  amazon-linux-repo-s3-2023.8.20250721-0.amzn2023  | 
|  aws-cfn-bootstrap-2.0-35.amzn2023  | 
|  bind-libs-32:9.18.33-1.amzn2023.0.3  | 
|  bind-license-32:9.18.33-1.amzn2023.0.3  | 
|  bind-utils-32:9.18.33-1.amzn2023.0.3  | 
|  gnupg2-minimal-2.3.7-1.amzn2023.0.5  | 
|  jq-1.7.1-50.amzn2023  | 
|  kernel-libbpf-1:6.1.144-170.251.amzn2023  | 
|  kernel-livepatch-repo-s3-2023.8.20250721-0.amzn2023  | 
|  kernel-tools-1:6.1.144-170.251.amzn2023  | 
|  kernel-1:6.1.144-170.251.amzn2023  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  python3-libs-3.9.23-1.amzn2023.0.2  | 
|  python3-pip-wheel-21.3.1-2.amzn2023.0.13  | 
|  python3-requests-2.25.1-1.amzn2023.0.6  | 
|  python3-3.9.23-1.amzn2023.0.2  | 
|  rust-toolset-srpm-macros-1.88.0-1.amzn2023.0.2  | 
|  system-release-2023.8.20250721-0.amzn2023  | 
|  systemtap-runtime-5.2-1.amzn2023.0.5  | 

### 最小内核 6.1 AMI
<a name="amis-2023.8.20250721.Minimal-Kernel-6-1-AMI"></a>

这部分提供有关最小内核 6.1 AMI 的详细信息。


|  | 
| --- |
|  amazon-ec2-net-utils-2.7.0-1.amzn2023.0.1  | 
|  amazon-linux-repo-s3-2023.8.20250721-0.amzn2023  | 
|  gnupg2-minimal-2.3.7-1.amzn2023.0.5  | 
|  jq-1.7.1-50.amzn2023  | 
|  kernel-libbpf-1:6.1.144-170.251.amzn2023  | 
|  kernel-livepatch-repo-s3-2023.8.20250721-0.amzn2023  | 
|  kernel-1:6.1.144-170.251.amzn2023  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  python3-libs-3.9.23-1.amzn2023.0.2  | 
|  python3-pip-wheel-21.3.1-2.amzn2023.0.13  | 
|  python3-requests-2.25.1-1.amzn2023.0.6  | 
|  python3-3.9.23-1.amzn2023.0.2  | 
|  system-release-2023.8.20250721-0.amzn2023  | 

### 默认内核 6.12 AMI
<a name="amis-2023.8.20250721.Default-Kernel-6-12-AMI"></a>

这部分提供有关默认内核 6.12 AMI 的详细信息。


|  | 
| --- |
|  amazon-ec2-net-utils-2.7.0-1.amzn2023.0.1  | 
|  amazon-linux-repo-s3-2023.8.20250721-0.amzn2023  | 
|  aws-cfn-bootstrap-2.0-35.amzn2023  | 
|  bind-libs-32:9.18.33-1.amzn2023.0.3  | 
|  bind-license-32:9.18.33-1.amzn2023.0.3  | 
|  bind-utils-32:9.18.33-1.amzn2023.0.3  | 
|  gnupg2-minimal-2.3.7-1.amzn2023.0.5  | 
|  jq-1.7.1-50.amzn2023  | 
|  kernel-livepatch-repo-s3-2023.8.20250721-0.amzn2023  | 
|  kernel6.12-libbpf-1:6.12.37-61.105.amzn2023  | 
|  kernel6.12-tools-1:6.12.37-61.105.amzn2023  | 
|  kernel6.12-1:6.12.37-61.105.amzn2023  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  python3-libs-3.9.23-1.amzn2023.0.2  | 
|  python3-pip-wheel-21.3.1-2.amzn2023.0.13  | 
|  python3-requests-2.25.1-1.amzn2023.0.6  | 
|  python3-3.9.23-1.amzn2023.0.2  | 
|  rust-toolset-srpm-macros-1.88.0-1.amzn2023.0.2  | 
|  system-release-2023.8.20250721-0.amzn2023  | 
|  systemtap-runtime-5.2-1.amzn2023.0.5  | 

### 最小内核 6.12 AMI
<a name="amis-2023.8.20250721.Minimal-Kernel-6-12-AMI"></a>

这部分提供有关最小内核 6.12 AMI 的详细信息。


|  | 
| --- |
|  amazon-ec2-net-utils-2.7.0-1.amzn2023.0.1  | 
|  amazon-linux-repo-s3-2023.8.20250721-0.amzn2023  | 
|  gnupg2-minimal-2.3.7-1.amzn2023.0.5  | 
|  jq-1.7.1-50.amzn2023  | 
|  kernel-livepatch-repo-s3-2023.8.20250721-0.amzn2023  | 
|  kernel6.12-libbpf-1:6.12.37-61.105.amzn2023  | 
|  kernel6.12-1:6.12.37-61.105.amzn2023  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  python3-libs-3.9.23-1.amzn2023.0.2  | 
|  python3-pip-wheel-21.3.1-2.amzn2023.0.13  | 
|  python3-requests-2.25.1-1.amzn2023.0.6  | 
|  python3-3.9.23-1.amzn2023.0.2  | 
|  system-release-2023.8.20250721-0.amzn2023  | 

### 默认容器
<a name="amis-2023.8.20250721.Default-Container"></a>

这部分提供有关默认容器的详细信息。


|  | 
| --- |
|  amazon-linux-repo-cdn-2023.8.20250721-0.amzn2023  | 
|  gnupg2-minimal-2.3.7-1.amzn2023.0.5  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  python3-libs-3.9.23-1.amzn2023.0.2  | 
|  python3-pip-wheel-21.3.1-2.amzn2023.0.13  | 
|  python3-3.9.23-1.amzn2023.0.2  | 
|  system-release-2023.8.20250721-0.amzn2023  | 

### 最小容器
<a name="amis-2023.8.20250721.Minimal-Container"></a>

这部分提供有关最小容器的详细信息。


|  | 
| --- |
|  amazon-linux-repo-cdn-2023.8.20250721-0.amzn2023  | 
|  gnupg2-minimal-2.3.7-1.amzn2023.0.5  | 
|  libarchive-3.7.4-2.amzn2023.0.4  | 
|  libxml2-2.10.4-1.amzn2023.0.12  | 
|  system-release-2023.8.20250721-0.amzn2023  | 

## 联系我们
<a name="amis-2023.8.20250721.contact-us"></a>

如果您发现安全问题，请联系[我们的安全团队](https://github.com/amazonlinux/amazon-linux-2023/security/policy)，而不是提出 GitHub 问题。

我们使用 GitHub 问题来收集有关错误报告 AL2023 和功能请求的反馈并进行跟踪。您可以查看[现有问题](https://github.com/amazonlinux/amazon-linux-2023/issues)，看看您的问题是否已经解决。如果没有，请提出一个[新问题](https://github.com/amazonlinux/amazon-linux-2023/issues/new/choose)。

如果您只对以下内容有疑问 AL2023，请随时开始或加入[讨论](https://github.com/amazonlinux/amazon-linux-2023/discussions)。 AL2023 也可以通过您的指定 AWS 代表提供反馈。