# Amazon Linux 2 version 2.0.20250721.2 release notes
<a name="relnotes-20250721"></a>

These are the release notes for Amazon Linux 2 version 2.0.20250721.2.

**Contents**
+ [

## Release Summary
](#release-summary-20250721)
+ [

## Important Advisory Notice
](#important-advisory-notice-20250721)
  + [

### AL2 Core
](#al2-core-advisories-20250721)
  + [

### AL2 Extras ECS
](#al2-extras-ecs-advisories-20250721)
  + [

### AL2 Extras GIMP
](#al2-extras-gimp-advisories-20250721)
  + [

### AL2 Extras Kernel-5.10
](#al2-extras-kernel-5-10-advisories-20250721)
  + [

### AL2 Extras Kernel-5.15
](#al2-extras-kernel-5-15-advisories-20250721)
  + [

### AL2 Extras Livepatch
](#al2-extras-livepatch-advisories-20250721)
  + [

### AL2 Extras Mate-desktop1.x
](#al2-extras-mate-desktop1-x-advisories-20250721)
+ [

## Repository Updates
](#repository-updates-20250721)
  + [

### Core Updated Packages
](#amis-2.0.20250721.Core-Updated-Packages)
  + [

### [AL2 Extras] Docker Updated Packages
](#amis-2.0.20250721.AL2-Extras-Docker-Updated-Packages)
  + [

### [AL2 Extras] Kernel-5.10 Updated Packages
](#amis-2.0.20250721.AL2-Extras-Kernel-5-10-Updated-Packages)
  + [

### [AL2 Extras] Kernel-5.15 Updated Packages
](#amis-2.0.20250721.AL2-Extras-Kernel-5-15-Updated-Packages)
  + [

### [AL2 Extras] Livepatch New Packages
](#amis-2.0.20250721.AL2-Extras-Livepatch-New-Packages)
  + [

### [AL2 Extras] Mate-desktop1.x Updated Packages
](#amis-2.0.20250721.AL2-Extras-Mate-desktop1-x-Updated-Packages)
+ [

## Image Updates
](#ami-updates-20250721)
  + [

### Default Kernel-5.10 AMI
](#amis-2.0.20250721.Default-Kernel-5-10-AMI)

## Release Summary
<a name="release-summary-20250721"></a>

This release of Amazon Linux 2 includes the latest security updates. 

**Security updates**
+ For information on the CVEs addressed in the previous release, see the [ Amazon Linux Security Center](https://alas.aws.amazon.com/alas2.html).
+ For visibility into the status of CVEs that haven't been addressed yet, see the [ Amazon Linux Security Center](https://explore.alas.aws.amazon.com/).

## Important Advisory Notice
<a name="important-advisory-notice-20250721"></a>

The security advisories associated with the packages in this release are missing from the repository metadata and ALAS website. As a result, systems relying on repository metadata to track or apply security updates (ie: "dnf/yum update --security") will not be aware of the new updates available in this release. Systems leveraging the latest AMIs will have the latest updates.

We understand the importance of security visibility and compliance, and we are actively working to resolve this issue. A follow-up release that includes the repository metadata will be published during the week of July 28, 2025.

The full list of CVEs that are fixed with this release include:

### AL2 Core
<a name="al2-core-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| git-2.47.3-1.amzn2.0.1 | git-2.47.1-1.amzn2.0.3 | CVE-2025-27613, CVE-2025-27614, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385 | 
| golang-1.23.11-1.amzn2.0.1 | golang-1.23.10-1.amzn2.0.2 | CVE-2025-4674 | 
| jackson-1.9.4-7.amzn2.0.1 | jackson-1.9.4-7.amzn2 | CVE-2025-52999 | 
| java-11-amazon-corretto-11.0.28\$16-1.amzn2 | java-11-amazon-corretto-11.0.27\$16-1.amzn2 | CVE-2025-30749, CVE-2025-30754, CVE-2025-30761, CVE-2025-50059, CVE-2025-50106 | 
| java-17-amazon-corretto-17.0.16\$18-1.amzn2.1 | java-17-amazon-corretto-17.0.15\$16-1.amzn2.1 | CVE-2025-30749, CVE-2025-30754, CVE-2025-50059, CVE-2025-50106 | 
| jq-1.5-1.amzn2.0.3 | jq-1.5-1.amzn2 | CVE-2024-23337 | 
| kernel-4.14.355-280.652.amzn2 | kernel-4.14.355-280.651.amzn2 | CVE-2022-50092, CVE-2025-23150, CVE-2025-38051 | 
| libarchive-3.1.2-14.amzn2.0.5 | libarchive-3.1.2-14.amzn2.0.4 | CVE-2025-5917 | 
| libxml2-2.9.1-6.amzn2.5.19 | libxml2-2.9.1-6.amzn2.5.18 | CVE-2025-49794, CVE-2025-49796 | 
| mtr-0.92-2.amzn2.0.2 | mtr-0.92-2.amzn2.0.1 | CVE-2025-49809 | 
| perl-Crypt-OpenSSL-RSA-0.28-7.amzn2.0.3 | perl-Crypt-OpenSSL-RSA-0.28-7.amzn2 | CVE-2024-2467 | 
| pixman-0.34.0-1.amzn2.0.3 | pixman-0.34.0-1.amzn2 | CVE-2022-44638 | 
| python-pip-20.2.2-1.amzn2.0.12 | python-pip-20.2.2-1.amzn2.0.11 | CVE-2025-50181 | 
| ruby-2.0.0.648-36.amzn2.0.15 | ruby-2.0.0.648-36.amzn2.0.14 | CVE-2025-6442 | 
| rust-1.86.0-1.amzn2.0.2 | rust-1.86.0-1.amzn2.0.1 | CVE-2025-53605 | 

### AL2 Extras ECS
<a name="al2-extras-ecs-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| containerd-2.0.5-1.amzn2.0.2 | containerd-1.7.27-1.amzn2.0.3 | CVE-2025-4673 | 
| docker-25.0.8-1.amzn2.0.5 | docker-25.0.8-1.amzn2.0.4 | CVE-2025-4673 | 
| ecs-init-1.96.0-1.amzn2 | ecs-init-1.95.0-1.amzn2 | CVE-2025-22874, CVE-2025-4673 | 
| runc-1.2.6-1.amzn2 | runc-1.2.4-3.amzn2 | CVE-2025-4673 | 

### AL2 Extras GIMP
<a name="al2-extras-gimp-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| gimp-2.8.22-1.amzn2.0.7 | gimp-2.8.22-1.amzn2.0.6 | CVE-2025-6035 | 

### AL2 Extras Kernel-5.10
<a name="al2-extras-kernel-5-10-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| kernel-5.10.239-236.958.amzn2 | kernel-5.10.238-234.956.amzn2 | CVE-2022-50000, CVE-2024-46855, CVE-2024-57883, CVE-2024-57996, CVE-2025-37958, CVE-2025-37963, CVE-2025-38084, CVE-2025-38161 | 

### AL2 Extras Kernel-5.15
<a name="al2-extras-kernel-5-15-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| kernel-5.15.187-130.192.amzn2 | kernel-5.15.186-128.192.amzn2 | CVE-2025-37938, CVE-2025-37945, CVE-2025-38062, CVE-2025-38064 | 

### AL2 Extras Livepatch
<a name="al2-extras-livepatch-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| kernel-livepatch-5.10.236-227.928-1.0-2.amzn2 | This is a new addition | CVE-2025-38037 | 
| kernel-livepatch-5.10.236-228.935-1.0-2.amzn2 | This is a new addition | CVE-2025-38037 | 
| kernel-livepatch-5.10.237-230.948-1.0-1.amzn2 | This is a new addition | CVE-2025-38037 | 
| kernel-livepatch-5.10.237-230.949-1.0-1.amzn2 | This is a new addition | CVE-2025-38037 | 

### AL2 Extras Mate-desktop1.x
<a name="al2-extras-mate-desktop1-x-advisories-20250721"></a>


| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| djvulibre-3.5.27-30.amzn2.0.4 | djvulibre-3.5.27-30.amzn2.0.3 | CVE-2025-53367 | 

## Repository Updates
<a name="repository-updates-20250721"></a>

### Core Updated Packages
<a name="amis-2.0.20250721.Core-Updated-Packages"></a>

This section provides details about core updated packages.


|  | 
| --- |
|  aws-cfn-bootstrap-2.0-35.amzn2  | 
|  git-2.47.3-1.amzn2.0.1  | 
|  golang-1.23.11-1.amzn2.0.1  | 
|  jackson-1.9.4-7.amzn2.0.1  | 
|  java-11-amazon-corretto-11.0.28\$16-1.amzn2  | 
|  java-17-amazon-corretto-17.0.16\$18-1.amzn2.1  | 
|  jq-1.5-1.amzn2.0.3  | 
|  kernel-4.14.355-280.652.amzn2  | 
|  libarchive-3.1.2-14.amzn2.0.5  | 
|  libxml2-2.9.1-6.amzn2.5.19  | 
|  mtr-0.92-2.amzn2.0.2  | 
|  nerdctl-2.1.3-1.amzn2.0.1  | 
|  perl-Crypt-OpenSSL-RSA-0.28-7.amzn2.0.3  | 
|  pixman-0.34.0-1.amzn2.0.3  | 
|  python-pip-20.2.2-1.amzn2.0.12  | 
|  ruby-2.0.0.648-36.amzn2.0.15  | 
|  rust-1.86.0-1.amzn2.0.2  | 

### [AL2 Extras] Docker Updated Packages
<a name="amis-2.0.20250721.AL2-Extras-Docker-Updated-Packages"></a>

This section provides details about [al2 extras] docker updated packages.


|  | 
| --- |
|  runfinch-finch-1.10.0-1.amzn2.0.1  | 
|  soci-snapshotter-0.11.1-1.amzn2.0.1  | 

### [AL2 Extras] Kernel-5.10 Updated Packages
<a name="amis-2.0.20250721.AL2-Extras-Kernel-5-10-Updated-Packages"></a>

This section provides details about [al2 extras] kernel-5.10 updated packages.


|  | 
| --- |
|  kernel-5.10.239-236.958.amzn2  | 

### [AL2 Extras] Kernel-5.15 Updated Packages
<a name="amis-2.0.20250721.AL2-Extras-Kernel-5-15-Updated-Packages"></a>

This section provides details about [al2 extras] kernel-5.15 updated packages.


|  | 
| --- |
|  kernel-5.15.187-130.192.amzn2  | 

### [AL2 Extras] Livepatch New Packages
<a name="amis-2.0.20250721.AL2-Extras-Livepatch-New-Packages"></a>

This section provides details about [al2 extras] livepatch new packages.


|  | 
| --- |
|  kernel-livepatch-5.10.236-227.928-1.0-2.amzn2  | 
|  kernel-livepatch-5.10.236-228.935-1.0-2.amzn2  | 
|  kernel-livepatch-5.10.237-230.948-1.0-1.amzn2  | 
|  kernel-livepatch-5.10.237-230.949-1.0-1.amzn2  | 

### [AL2 Extras] Mate-desktop1.x Updated Packages
<a name="amis-2.0.20250721.AL2-Extras-Mate-desktop1-x-Updated-Packages"></a>

This section provides details about [al2 extras] mate-desktop1.x updated packages.


|  | 
| --- |
|  djvulibre-3.5.27-30.amzn2.0.4  | 

## Image Updates
<a name="ami-updates-20250721"></a>

### Default Kernel-5.10 AMI
<a name="amis-2.0.20250721.Default-Kernel-5-10-AMI"></a>

This section provides details about default kernel-5.10 ami.


|  | 
| --- |
|  aws-cfn-bootstrap-2.0-35.amzn2  | 
|  kernel-tools-5.10.239-236.958.amzn2  | 
|  kernel-5.10.239-236.958.amzn2  | 
|  libxml2-python-2.9.1-6.amzn2.5.19  | 
|  libxml2-2.9.1-6.amzn2.5.19  | 
|  mtr-2:0.92-2.amzn2.0.2  | 
|  python3-pip-20.2.2-1.amzn2.0.12  |