# Amazon Linux 2 version 2.0.20250721.2 release notes
2.0.20250721

These are the release notes for Amazon Linux 2 version 2.0.20250721.2.

**Contents**
+ [

## Release Summary
](#release-summary-20250721)
+ [

## Important Advisory Notice
](#important-advisory-notice-20250721)
  + [

### AL2 Core
](#al2-core-advisories-20250721)
  + [

### AL2 Extras ECS
](#al2-extras-ecs-advisories-20250721)
  + [

### AL2 Extras GIMP
](#al2-extras-gimp-advisories-20250721)
  + [

### AL2 Extras Kernel-5.10
](#al2-extras-kernel-5-10-advisories-20250721)
  + [

### AL2 Extras Kernel-5.15
](#al2-extras-kernel-5-15-advisories-20250721)
  + [

### AL2 Extras Livepatch
](#al2-extras-livepatch-advisories-20250721)
  + [

### AL2 Extras Mate-desktop1.x
](#al2-extras-mate-desktop1-x-advisories-20250721)
+ [

## Repository Updates
](#repository-updates-20250721)
  + [

### Core Updated Packages
](#amis-2.0.20250721.Core-Updated-Packages)
  + [

### [AL2 Extras] Docker Updated Packages
](#amis-2.0.20250721.AL2-Extras-Docker-Updated-Packages)
  + [

### [AL2 Extras] Kernel-5.10 Updated Packages
](#amis-2.0.20250721.AL2-Extras-Kernel-5-10-Updated-Packages)
  + [

### [AL2 Extras] Kernel-5.15 Updated Packages
](#amis-2.0.20250721.AL2-Extras-Kernel-5-15-Updated-Packages)
  + [

### [AL2 Extras] Livepatch New Packages
](#amis-2.0.20250721.AL2-Extras-Livepatch-New-Packages)
  + [

### [AL2 Extras] Mate-desktop1.x Updated Packages
](#amis-2.0.20250721.AL2-Extras-Mate-desktop1-x-Updated-Packages)
+ [

## Image Updates
](#ami-updates-20250721)
  + [

### Default Kernel-5.10 AMI
](#amis-2.0.20250721.Default-Kernel-5-10-AMI)

## Release Summary
Updated packages[https://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-20250721.html](https://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-20250721.html)

 Amazon Linux 2 2.0.20250721.2 includes updated packages for this release.

This release of Amazon Linux 2 includes the latest security updates. 

**Security updates**
+ For information on the CVEs addressed in the previous release, see the [ Amazon Linux Security Center](https://alas.aws.amazon.com/alas2.html).
+ For visibility into the status of CVEs that haven't been addressed yet, see the [ Amazon Linux Security Center](https://explore.alas.aws.amazon.com/).

## Important Advisory Notice


The security advisories associated with the packages in this release are missing from the repository metadata and ALAS website. As a result, systems relying on repository metadata to track or apply security updates (ie: "dnf/yum update --security") will not be aware of the new updates available in this release. Systems leveraging the latest AMIs will have the latest updates.

We understand the importance of security visibility and compliance, and we are actively working to resolve this issue. A follow-up release that includes the repository metadata will be published during the week of July 28, 2025.

The full list of CVEs that are fixed with this release include:

### AL2 Core



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| git-2.47.3-1.amzn2.0.1 | git-2.47.1-1.amzn2.0.3 | CVE-2025-27613, CVE-2025-27614, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385 | 
| golang-1.23.11-1.amzn2.0.1 | golang-1.23.10-1.amzn2.0.2 | CVE-2025-4674 | 
| jackson-1.9.4-7.amzn2.0.1 | jackson-1.9.4-7.amzn2 | CVE-2025-52999 | 
| java-11-amazon-corretto-11.0.28\$16-1.amzn2 | java-11-amazon-corretto-11.0.27\$16-1.amzn2 | CVE-2025-30749, CVE-2025-30754, CVE-2025-30761, CVE-2025-50059, CVE-2025-50106 | 
| java-17-amazon-corretto-17.0.16\$18-1.amzn2.1 | java-17-amazon-corretto-17.0.15\$16-1.amzn2.1 | CVE-2025-30749, CVE-2025-30754, CVE-2025-50059, CVE-2025-50106 | 
| jq-1.5-1.amzn2.0.3 | jq-1.5-1.amzn2 | CVE-2024-23337 | 
| kernel-4.14.355-280.652.amzn2 | kernel-4.14.355-280.651.amzn2 | CVE-2022-50092, CVE-2025-23150, CVE-2025-38051 | 
| libarchive-3.1.2-14.amzn2.0.5 | libarchive-3.1.2-14.amzn2.0.4 | CVE-2025-5917 | 
| libxml2-2.9.1-6.amzn2.5.19 | libxml2-2.9.1-6.amzn2.5.18 | CVE-2025-49794, CVE-2025-49796 | 
| mtr-0.92-2.amzn2.0.2 | mtr-0.92-2.amzn2.0.1 | CVE-2025-49809 | 
| perl-Crypt-OpenSSL-RSA-0.28-7.amzn2.0.3 | perl-Crypt-OpenSSL-RSA-0.28-7.amzn2 | CVE-2024-2467 | 
| pixman-0.34.0-1.amzn2.0.3 | pixman-0.34.0-1.amzn2 | CVE-2022-44638 | 
| python-pip-20.2.2-1.amzn2.0.12 | python-pip-20.2.2-1.amzn2.0.11 | CVE-2025-50181 | 
| ruby-2.0.0.648-36.amzn2.0.15 | ruby-2.0.0.648-36.amzn2.0.14 | CVE-2025-6442 | 
| rust-1.86.0-1.amzn2.0.2 | rust-1.86.0-1.amzn2.0.1 | CVE-2025-53605 | 

### AL2 Extras ECS



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| containerd-2.0.5-1.amzn2.0.2 | containerd-1.7.27-1.amzn2.0.3 | CVE-2025-4673 | 
| docker-25.0.8-1.amzn2.0.5 | docker-25.0.8-1.amzn2.0.4 | CVE-2025-4673 | 
| ecs-init-1.96.0-1.amzn2 | ecs-init-1.95.0-1.amzn2 | CVE-2025-22874, CVE-2025-4673 | 
| runc-1.2.6-1.amzn2 | runc-1.2.4-3.amzn2 | CVE-2025-4673 | 

### AL2 Extras GIMP



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| gimp-2.8.22-1.amzn2.0.7 | gimp-2.8.22-1.amzn2.0.6 | CVE-2025-6035 | 

### AL2 Extras Kernel-5.10



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| kernel-5.10.239-236.958.amzn2 | kernel-5.10.238-234.956.amzn2 | CVE-2022-50000, CVE-2024-46855, CVE-2024-57883, CVE-2024-57996, CVE-2025-37958, CVE-2025-37963, CVE-2025-38084, CVE-2025-38161 | 

### AL2 Extras Kernel-5.15



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| kernel-5.15.187-130.192.amzn2 | kernel-5.15.186-128.192.amzn2 | CVE-2025-37938, CVE-2025-37945, CVE-2025-38062, CVE-2025-38064 | 

### AL2 Extras Livepatch



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| kernel-livepatch-5.10.236-227.928-1.0-2.amzn2 | This is a new addition | CVE-2025-38037 | 
| kernel-livepatch-5.10.236-228.935-1.0-2.amzn2 | This is a new addition | CVE-2025-38037 | 
| kernel-livepatch-5.10.237-230.948-1.0-1.amzn2 | This is a new addition | CVE-2025-38037 | 
| kernel-livepatch-5.10.237-230.949-1.0-1.amzn2 | This is a new addition | CVE-2025-38037 | 

### AL2 Extras Mate-desktop1.x



| New Package NVR | Old Package NVR | CVE(s) | 
| --- | --- | --- | 
| djvulibre-3.5.27-30.amzn2.0.4 | djvulibre-3.5.27-30.amzn2.0.3 | CVE-2025-53367 | 

## Repository Updates


### Core Updated Packages


This section provides details about core updated packages.


|  | 
| --- |
|  aws-cfn-bootstrap-2.0-35.amzn2  | 
|  git-2.47.3-1.amzn2.0.1  | 
|  golang-1.23.11-1.amzn2.0.1  | 
|  jackson-1.9.4-7.amzn2.0.1  | 
|  java-11-amazon-corretto-11.0.28\$16-1.amzn2  | 
|  java-17-amazon-corretto-17.0.16\$18-1.amzn2.1  | 
|  jq-1.5-1.amzn2.0.3  | 
|  kernel-4.14.355-280.652.amzn2  | 
|  libarchive-3.1.2-14.amzn2.0.5  | 
|  libxml2-2.9.1-6.amzn2.5.19  | 
|  mtr-0.92-2.amzn2.0.2  | 
|  nerdctl-2.1.3-1.amzn2.0.1  | 
|  perl-Crypt-OpenSSL-RSA-0.28-7.amzn2.0.3  | 
|  pixman-0.34.0-1.amzn2.0.3  | 
|  python-pip-20.2.2-1.amzn2.0.12  | 
|  ruby-2.0.0.648-36.amzn2.0.15  | 
|  rust-1.86.0-1.amzn2.0.2  | 

### [AL2 Extras] Docker Updated Packages


This section provides details about [al2 extras] docker updated packages.


|  | 
| --- |
|  runfinch-finch-1.10.0-1.amzn2.0.1  | 
|  soci-snapshotter-0.11.1-1.amzn2.0.1  | 

### [AL2 Extras] Kernel-5.10 Updated Packages


This section provides details about [al2 extras] kernel-5.10 updated packages.


|  | 
| --- |
|  kernel-5.10.239-236.958.amzn2  | 

### [AL2 Extras] Kernel-5.15 Updated Packages


This section provides details about [al2 extras] kernel-5.15 updated packages.


|  | 
| --- |
|  kernel-5.15.187-130.192.amzn2  | 

### [AL2 Extras] Livepatch New Packages


This section provides details about [al2 extras] livepatch new packages.


|  | 
| --- |
|  kernel-livepatch-5.10.236-227.928-1.0-2.amzn2  | 
|  kernel-livepatch-5.10.236-228.935-1.0-2.amzn2  | 
|  kernel-livepatch-5.10.237-230.948-1.0-1.amzn2  | 
|  kernel-livepatch-5.10.237-230.949-1.0-1.amzn2  | 

### [AL2 Extras] Mate-desktop1.x Updated Packages


This section provides details about [al2 extras] mate-desktop1.x updated packages.


|  | 
| --- |
|  djvulibre-3.5.27-30.amzn2.0.4  | 

## Image Updates


### Default Kernel-5.10 AMI


This section provides details about default kernel-5.10 ami.


|  | 
| --- |
|  aws-cfn-bootstrap-2.0-35.amzn2  | 
|  kernel-tools-5.10.239-236.958.amzn2  | 
|  kernel-5.10.239-236.958.amzn2  | 
|  libxml2-python-2.9.1-6.amzn2.5.19  | 
|  libxml2-2.9.1-6.amzn2.5.19  | 
|  mtr-2:0.92-2.amzn2.0.2  | 
|  python3-pip-20.2.2-1.amzn2.0.12  |