# Amazon Linux 2 version 2.0.20210525.0 release notes
May 25, 2021

These are the release notes for Amazon Linux 2 version 2.0.20210525.0.

## Major updates

+ Updated chrony to 4.0 from 3.5.1

## Package updates


Amazon Linux 2 includes the following packages.


| Packages | 
| --- | 
|  bind-export-libs-9.11.4-26.P2.amzn2.5.aarch64  | 
|  bind-export-libs-9.11.4-26.P2.amzn2.5.x86\$164  | 
|  bind-libs-9.11.4-26.P2.amzn2.5.aarch64  | 
|  bind-libs-9.11.4-26.P2.amzn2.5.x86\$164  | 
|  bind-libs-lite-9.11.4-26.P2.amzn2.5.aarch64  | 
|  bind-libs-lite-9.11.4-26.P2.amzn2.5.x86\$164  | 
|  bind-license-9.11.4-26.P2.amzn2.5.noarch  | 
|  bind-utils-9.11.4-26.P2.amzn2.5.aarch64  | 
|  bind-utils-9.11.4-26.P2.amzn2.5.x86\$164  | 
|  chrony-4.0-3.amzn2.0.1.aarch64  | 
|  chrony-4.0-3.amzn2.0.1.x86\$164  | 
|  ec2-utils-1.2-44.amzn2.noarch  | 
|  glibc-2.26-45.amzn2.aarch64  | 
|  glibc-2.26-45.amzn2.x86\$164  | 
|  glibc-all-langpacks-2.26-45.amzn2.aarch64  | 
|  glibc-all-langpacks-2.26-45.amzn2.x86\$164  | 
|  glibc-common-2.26-45.amzn2.aarch64  | 
|  glibc-common-2.26-45.amzn2.x86\$164  | 
|  glibc-devel-2.26-45.amzn2.x86\$164  | 
|  glibc-headers-2.26-45.amzn2.x86\$164  | 
|  glibc-langpack-en-2.26-45.amzn2.aarch64  | 
|  glibc-langpack-en-2.26-45.amzn2.x86\$164  | 
|  glibc-locale-source-2.26-45.amzn2.aarch64  | 
|  glibc-locale-source-2.26-45.amzn2.x86\$164  | 
|  glibc-minimal-langpack-2.26-45.amzn2.aarch64  | 
|  glibc-minimal-langpack-2.26-45.amzn2.x86\$164  | 
|  kernel-4.14.232-176.381.amzn2.aarch64  | 
|  kernel-4.14.232-176.381.amzn2.x86\$164  | 
|  kernel-devel-4.14.232-176.381.amzn2.x86\$164  | 
|  kernel-headers-4.14.232-176.381.amzn2.x86\$164  | 
|  kernel-tools-4.14.232-176.381.amzn2.aarch64  | 
|  kernel-tools-4.14.232-176.381.amzn2.x86\$164  | 
|  libcrypt-2.26-45.amzn2.aarch64  | 
|  libcrypt-2.26-45.amzn2.x86\$164  | 
|  libjpeg-turbo-2.0.90-2.amzn2.0.1.aarch64  | 
|  libjpeg-turbo-2.0.90-2.amzn2.0.1.x86\$164  | 
|  openldap-2.4.44-23.amzn2.aarch64  | 
|  openldap-2.4.44-23.amzn2.x86\$164  | 
|  python2-setuptools-41.2.0-4.amzn2.0.2.noarch  | 
|  python3-3.7.9-1.amzn2.0.3.aarch64  | 
|  python3-3.7.9-1.amzn2.0.3.x86\$164  | 
|  python3-libs-3.7.9-1.amzn2.0.3.aarch64  | 
|  python3-libs-3.7.9-1.amzn2.0.3.x86\$164  | 
|  python3-pip-20.2.2-1.amzn2.0.2.noarch  | 
|  python3-setuptools-49.1.3-1.amzn2.0.2.noarch  | 

## Kernel updates


Rebase kernel to upstream stable 4.14.232.

Lustre: Update to Client v2.10.8-7

CVEs fixed:
+ CVE-2020-29374 [gup: document and work around "COW can break either way" issue]
+ CVE-2021-23133 [net/sctp: fix race condition in sctp\$1destroy\$1sock]

Amazon Features and Backports:
+ bpf: Fixes up selftests after backports were fixed 
+ bpf, selftests: Fixes up some test\$1verifier cases for unprivileged 
+ bpf: Moves off\$1reg into sanitize\$1ptr\$1alu 
+ bpf: Ensures off\$1reg has no mixed signed bounds for all types 
+ bpf: Reworkes ptr\$1limit into alu\$1limit and add common error path 
+ bpf: Improves verifier error messages for users 
+ bpf: Refactors and streamlines bounds check into helper 
+ bpf: Moves sanitize\$1val\$1alu out of op switch 
+ bpf: Tightens speculative pointer arithmetic mask 
+ bpf: Updates selftests to reflect new error states 
+ bpf: Doesn't allow root to mangle valid pointers 
+ bpf/verifier: Doesn't allow pointer subtraction 
+ selftests/bpf: Fixes test\$1align 
+ selftests/bpf: Makes 'dubious pointer arithmetic' test useful 
+ bpf: Fixes masking negation logic upon negative dst register 
+ bpf: Fixes leakage of uninitialized bpf stack under speculation 
+ Reverts "net/sctp: fix race condition in sctp\$1destroy\$1sock" 
+ sctp: Delays auto\$1asconf init until binding the first addr 
+ cifs: Fixes panic in smb2\$1reconnect

Other Fixes:
+ arm64: Fixes inline asm in load\$1unaligned\$1zeropad() 
+ ext4: Corrects the error label in ext4\$1rename() 
+ x86/crash: Fixes crash\$1setup\$1memmap\$1entries() out-of-bounds access