Documentation on Bottlerocket

Concepts

Mon, 01 Jan 0001 00:00:00 +0000

You can update Bottlerocket in a couple of ways:

node replacement where new instances with a new version of the OS replace nodes with older versions of the OS,
in-place updates where the node downloads and reboots into a new version of the OS while maintaining the same instance/machine.

There is no single preferred nor advised method to update a node; both methods have pros and cons depending on your situation.

Concepts

Mon, 01 Jan 0001 00:00:00 +0000

You can update Bottlerocket in a couple of ways:

node replacement where new instances with a new version of the OS replace nodes with older versions of the OS,
in-place updates where the node downloads and reboots into a new version of the OS while maintaining the same instance/machine.

There is no single preferred nor advised method to update a node; both methods have pros and cons depending on your situation. You can trigger an in-place update manually with the API or you can use the Bottlerocket ECS Updater. The ECS Updater is a service that checks for (and applies) Bottlerocket updates when your nodes are ready.

Prerequisite: cert-manager

Mon, 01 Jan 0001 00:00:00 +0000

Brupop uses cert-manager to manage self-signed certificates. You can install it with kubectl or helm.

Note

This guide uses the most recent release of cert-manager, 1.14.1, but there is no particular hard dependency on this version.

Installing `cert-manager` using `kubectl`

Use kubectl to install cert-manager:

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.1/cert-manager.yaml

Installing `cert-manager` using `helm`

First, add the cert-manager helm chart:

helm repo add jetstack https://charts.jetstack.io

Then update your local chart:

helm repo update

Finally, install cert-manager including its CRDs:

Install Brupop

Mon, 01 Jan 0001 00:00:00 +0000

Installing Brupop creates the custom resource definitions (CRDs), roles, and deployments and uses the latest operator image from Amazon ECR Public.

You can install Brupop either with helm or a pre-baked manifest.

Install with `helm`

First, using helm add the bottlerocket-operator-chart

helm repo add brupop https://bottlerocket-os.github.io/bottlerocket-update-operator

Then update your local chart:

helm repo update

Create a namespace for the operator:

kubectl create namespace brupop-bottlerocket-aws

Next, install the Brupop custom resource definition:

helm install brupop-crd brupop/bottlerocket-shadow

Finally, install the operator itself:

Operate & Observe

Mon, 01 Jan 0001 00:00:00 +0000

After installation on your cluster Brupop runs in the background and generally requires no intervention. Your nodes will check for updates and apply them according to your configuration and the Bottlerocket update waves.

However, you can observe the status of the updates by adhoc query or setup on-going monitoring.

Adhoc Query

If you want to see the update status of your nodes, use kubectl to get the custom resource brs :

kubectl get brs --namespace brupop-bottlerocket-aws

kubectl returns the state, current version, target state, and target version. For example:

Setup

Mon, 01 Jan 0001 00:00:00 +0000

This guide assumes you have AWS CLI v2 installed on a Unix-like system and that you’re authenticated into an account with the requisite permissions.

Note

Environment variable names in this guide do not have specific meaning; you can replace them with your own or directly interpolate your values as needed.

Define your environment

First, define your region in an environment variable. Customize the value of this variable for whatever region in which your particular Amazon ECS cluster resides.

Operate & Observe

Mon, 01 Jan 0001 00:00:00 +0000

By default, the ECS Updater runs every 12 hours (using the default template, schedule defined at at .Resources.BottlerocketUpdaterSchedule.Properties.ScheduleExpression). Each time it runs, the ECS Updater creates a new log stream in Amazon CloudWatch Logs in the log group you specified when deploying. You can view the logs in the CloudWatch Logs Console, with your own tools, or in the console.

ECS Updater logs in the console

First, you’ll need to retrieve the log stream; likely you’re interested in the most recent update check. Using the environment variables established in the Setup documentation, run the following command to get the most recent stream and store it in an environment variable:

Configure Brupop

Mon, 01 Jan 0001 00:00:00 +0000

When you install Brupop, the operator comes pre-configured with reasonable defaults. Labeling your nodes is the only required configuration step.

Aside from labeling nodes, you configure Brupop with helm or with a manifest. Helm reduces the configuration burden for Brupop substantially with few down sides, so this documentation focuses on configuration with helm. If you choose to not use helm, refer to the pre-baked manifest for an example .

Required Configuration

Label nodes

Warning

You can fully install Brupop but if you do not apply the proper node labels the operator will not update your nodes.

Troubleshoot

Mon, 01 Jan 0001 00:00:00 +0000

Debugging information

Brupop’s components emit useful logs for debugging and troubleshooting.

API Server deployment logs

Searching through the API Server’s deployment logs for a particular Node ID will yield the mutations to the node. Assuming the default namespace you can retrieve these by running:

kubectl logs deployment/brupop-apiserver --namespace brupop-bottlerocket-aws

Agent logs

Logs from the agent show the specific update actions taken on a particular node.

First, find the node in the list of the Brupop agent pods (assuming the default namespace):

Troubleshoot

Mon, 01 Jan 0001 00:00:00 +0000

Troubleshooting’s first step is evaluating the log messages emitted by ECS Updater. See Operate & Observe for details on how logging works with ECS Updater and what common messages mean.

Common Issues

Bottlerocket instances start with an old version of Bottlerocket

After using ECS Updater for a while you may notice that any brand new nodes added to the cluster start with an older version of Bottlerocket then ECS Updater flags them for an update on next invocation. The ECS updater can only update existing nodes and it doesn’t manage the node creation process. If you’re using an auto-scaling group, update your AMI ID in the the launch configuration or template.

Uninstall

Mon, 01 Jan 0001 00:00:00 +0000

To uninstall ECS Updater, delete the AWS CloudFormation stack that you previously deployed. Assuming you have the environment variables set from the previous install guide, run the following:

aws cloudformation delete-stack \
 --stack-name ${ECS_UPDATER_STACK} \
 --region ${AWS_REGION}

With no errors, this will give no return status.

To confirm the removal of ECS Updater, describe the stack:

aws cloudformation delete-stack --stack-name ${ECS_UPDATER_STACK}

If deleted, the CLI returns An error occurred (ValidationError) when calling the DescribeStacks operation Stack with id <...> does not exist , otherwise it will show the stack, indicating a still active ECS Updater.

1.13.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
libsemanage	3.5
libmnl	1.0.5
aws-iam-authenticator	0.6.2
docker-cli	20.10.21
chrony	4.3
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
docker-init	19.03.15
libiw	29	wireless-tools-29-makefile.patch
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
grep	3.8
login	0.0.1
libnftnl	1.2.4
policycoreutils	3.5
libz	1.2.13
strace	5.19
libpcre	10.42
kmod-5.10-nvidia	1.0.0
libselinux	3.5
procps	3.3.17
open-vm-tools	12.1.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
libnfnetlink	1.0.2
libnetfilter_cthelper	1.0.1
ethtool	6.2
libxcrypt	4.4.33
iproute	5.19.0	0001-skip-libelf-check.patch
libaudit	3.1
libelf	0.188
kmod	30
findutils	4.9.0
libseccomp	2.5.4
cni	1.1.2
e2fsprogs	1.47.0
kubernetes-1.24	1.24.10
selinux-policy	0
containerd	1.6.19
filesystem	1
kubernetes-1.22	1.22.17
oci-add-hooks	1.0.0
os	0
liblzma	5.4.1
libgcc	0
libstd-rust	0
aws-signing-helper	1.0.4
cni-plugins	1.2.0
makedumpfile	1.7.2	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libnetfilter_queue	1.0.5
systemd	250.11	9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch
libnvidia-container	1.12.0	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
ecr-credential-provider	1.25.3
libnetfilter_conntrack	1.0.9
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
kubernetes-1.23	1.23.16
microcode	0
libdbus	1.15.4
libexpat	2.5.0
libnl	3.7.0
log4j2-hotpatch	1.3.0
libsepol	3.5
libglib	2.75.3
ca-certificates	2023.01.10
release	0
kubernetes-1.26	1.26.1
libtirpc	1.3.3
host-ctr	0
libnetfilter_cttimeout	1.0.1
kmod-5.15-nvidia	1.0.0
libcap	2.67	9001-dont-test-during-install.patch
coreutils	9.1	1001-gnulib-simple-backup-fix.patch
libattr	2.5.1
docker-engine	20.10.21
ecs-agent	1.68.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 1001-bottlerocket-default-filesystem-locations.patch
tcpdump	4.99.3
libzstd	1.5.4
kernel-5.10	5.10.165	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch
runc	1.1.4
libffi	3.4.4
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
binutils	2.38
util-linux	2.38.1
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
docker-proxy	20.10.18
libacl	2.3.1
readline	8.2	readline-8.2-shlib.patch
ecs-gpu-init	0
wicked	0.6.68	1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch
kernel-5.15	5.15.90	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
kexec-tools	2.0.26
hotdog	1.0.6
nvidia-container-toolkit	1.12.0
iputils	20221126
nvidia-k8s-device-plugin	0.13.0
kubernetes-1.25	1.25.6
libpcap	1.10.1

1.13.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
libsemanage	3.5
libmnl	1.0.5
aws-iam-authenticator	0.6.2
docker-cli	20.10.21
chrony	4.3
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
docker-init	19.03.15
libiw	29	wireless-tools-29-makefile.patch
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
grep	3.8
login	0.0.1
libnftnl	1.2.4
policycoreutils	3.5
libz	1.2.13
strace	5.19
libpcre	10.42
kmod-5.10-nvidia	1.0.0
libselinux	3.5
procps	3.3.17
open-vm-tools	12.1.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
libnfnetlink	1.0.2
libnetfilter_cthelper	1.0.1
ethtool	6.2
libxcrypt	4.4.33
iproute	5.19.0	0001-skip-libelf-check.patch
libaudit	3.1
libelf	0.188
kmod	30
findutils	4.9.0
libseccomp	2.5.4
cni	1.1.2
e2fsprogs	1.47.0
kubernetes-1.24	1.24.10
selinux-policy	0
containerd	1.6.19
filesystem	1
kubernetes-1.22	1.22.17
oci-add-hooks	1.0.0
os	0
liblzma	5.4.1
libgcc	0
libstd-rust	0
aws-signing-helper	1.0.4
cni-plugins	1.2.0
makedumpfile	1.7.2	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libnetfilter_queue	1.0.5
systemd	250.11	9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch
libnvidia-container	1.12.0	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
ecr-credential-provider	1.25.3
libnetfilter_conntrack	1.0.9
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
kubernetes-1.23	1.23.16
microcode	0
libdbus	1.15.4
libexpat	2.5.0
libnl	3.7.0
log4j2-hotpatch	1.3.0
keyutils	1.6.1
libsepol	3.5
libglib	2.75.3
ca-certificates	2023.01.10
release	0
kubernetes-1.26	1.26.1
libtirpc	1.3.3
host-ctr	0
libnetfilter_cttimeout	1.0.1
kmod-5.15-nvidia	1.0.0
libcap	2.67	9001-dont-test-during-install.patch
coreutils	9.1	1001-gnulib-simple-backup-fix.patch
libattr	2.5.1
docker-engine	20.10.21
ecs-agent	1.68.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 1001-bottlerocket-default-filesystem-locations.patch
tcpdump	4.99.3
libzstd	1.5.4
kernel-5.10	5.10.165	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch
runc	1.1.4
libffi	3.4.4
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
binutils	2.38
util-linux	2.38.1
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
docker-proxy	20.10.18
libacl	2.3.1
readline	8.2	readline-8.2-shlib.patch
ecs-gpu-init	0
wicked	0.6.68	1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch
kernel-5.15	5.15.90	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
kexec-tools	2.0.26
hotdog	1.0.6
nvidia-container-toolkit	1.12.0
iputils	20221126
nvidia-k8s-device-plugin	0.13.0
kubernetes-1.25	1.25.6
libpcap	1.10.1

1.13.2

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
libsemanage	3.5
libmnl	1.0.5
aws-iam-authenticator	0.6.8
docker-cli	20.10.21
chrony	4.3
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
docker-init	19.03.15
libiw	29	wireless-tools-29-makefile.patch
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
grep	3.8
login	0.0.1
libnftnl	1.2.4
policycoreutils	3.5
libz	1.2.13
strace	5.19
libpcre	10.42
kmod-5.10-nvidia	1.0.0
libselinux	3.5
procps	3.3.17
open-vm-tools	12.1.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
libnfnetlink	1.0.2
libnetfilter_cthelper	1.0.1
ethtool	6.2
libxcrypt	4.4.33
iproute	5.19.0	0001-skip-libelf-check.patch
libaudit	3.1
libelf	0.188
kmod	30
findutils	4.9.0
libseccomp	2.5.4
cni	1.1.2
e2fsprogs	1.47.0
kubernetes-1.24	1.24.10
selinux-policy	0
containerd	1.6.19
filesystem	1
kubernetes-1.22	1.22.17
oci-add-hooks	1.0.0
os	0
liblzma	5.4.1
libgcc	0
libstd-rust	0
aws-signing-helper	1.0.4
cni-plugins	1.2.0
makedumpfile	1.7.2	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libnetfilter_queue	1.0.5
systemd	250.11	9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch
libnvidia-container	1.12.0	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
ecr-credential-provider	1.25.3
libnetfilter_conntrack	1.0.9
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
kubernetes-1.23	1.23.16
microcode	0
libdbus	1.15.4
libexpat	2.5.0
libnl	3.7.0
log4j2-hotpatch	1.3.0
keyutils	1.6.1
libsepol	3.5
libglib	2.75.3
ca-certificates	2023.01.10
release	0
kubernetes-1.26	1.26.2
libtirpc	1.3.3
host-ctr	0
libnetfilter_cttimeout	1.0.1
kmod-5.15-nvidia	1.0.0
libcap	2.67	9001-dont-test-during-install.patch
coreutils	9.1	1001-gnulib-simple-backup-fix.patch
libattr	2.5.1
docker-engine	20.10.21
ecs-agent	1.68.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 1001-bottlerocket-default-filesystem-locations.patch
tcpdump	4.99.3
libzstd	1.5.4
kernel-5.10	5.10.165	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch
runc	1.1.5
libffi	3.4.4
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
binutils	2.38
util-linux	2.38.1
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
docker-proxy	20.10.18
libacl	2.3.1
readline	8.2	readline-8.2-shlib.patch
ecs-gpu-init	0
wicked	0.6.68	1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch
kernel-5.15	5.15.90	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
kexec-tools	2.0.26
hotdog	1.0.6
nvidia-container-toolkit	1.12.0
iputils	20221126
nvidia-k8s-device-plugin	0.13.0
kubernetes-1.25	1.25.6
libpcap	1.10.1

1.13.3

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
libsemanage	3.5
libmnl	1.0.5
aws-iam-authenticator	0.6.8
docker-cli	20.10.21
chrony	4.3
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
docker-init	19.03.15
libiw	29	wireless-tools-29-makefile.patch
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
grep	3.8
login	0.0.1
libnftnl	1.2.4
policycoreutils	3.5
libz	1.2.13
strace	5.19
libpcre	10.42
kmod-5.10-nvidia	1.0.0
libselinux	3.5
procps	3.3.17
open-vm-tools	12.1.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
libnfnetlink	1.0.2
libnetfilter_cthelper	1.0.1
ethtool	6.2
libxcrypt	4.4.33
iproute	5.19.0	0001-skip-libelf-check.patch
libaudit	3.1
libelf	0.188
kmod	30
findutils	4.9.0
libseccomp	2.5.4
cni	1.1.2
e2fsprogs	1.47.0
kubernetes-1.24	1.24.10
selinux-policy	0
containerd	1.6.19
filesystem	1
kubernetes-1.22	1.22.17
oci-add-hooks	1.0.0
os	0
liblzma	5.4.1
libgcc	0
libstd-rust	0
aws-signing-helper	1.0.4
cni-plugins	1.2.0
makedumpfile	1.7.2	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libnetfilter_queue	1.0.5
systemd	250.11	0001-errno-util-add-ERRNO_IS_DEVICE_ABSENT-macro.patch 0002-udev-drop-unnecessary-clone-of-received-sd-device-ob.patch 0003-udev-introduce-device_broadcast-helper-function.patch 0004-udev-assume-there-is-no-blocker-when-failed-to-check.patch 0005-udev-store-action-in-struct-Event.patch 0006-udev-requeue-event-when-the-corresponding-block-devi.patch 0007-udev-only-ignore-ENOENT-or-friends-which-suggest-the.patch 0008-udev-split-worker_lock_block_device-into-two.patch 0009-udev-assume-block-device-is-not-locked-when-a-new-ev.patch 0010-udev-fix-inversed-inequality-for-timeout-of-retrying.patch 0011-udev-certainly-restart-event-for-previously-locked-d.patch 0012-udev-try-to-reload-selinux-label-database-less-frequ.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
libnvidia-container	1.12.0	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
ecr-credential-provider	1.25.3
libnetfilter_conntrack	1.0.9
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
kubernetes-1.23	1.23.16
microcode	0
libdbus	1.15.4
libexpat	2.5.0
libnl	3.7.0
log4j2-hotpatch	1.3.0
keyutils	1.6.1
libsepol	3.5
libglib	2.75.3
ca-certificates	2023.01.10
release	0
kubernetes-1.26	1.26.2
libtirpc	1.3.3
host-ctr	0
libnetfilter_cttimeout	1.0.1
kmod-5.15-nvidia	1.0.0
libcap	2.67	9001-dont-test-during-install.patch
coreutils	9.1	1001-gnulib-simple-backup-fix.patch
libattr	2.5.1
docker-engine	20.10.21
ecs-agent	1.68.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 1001-bottlerocket-default-filesystem-locations.patch
tcpdump	4.99.3
libzstd	1.5.4
kernel-5.10	5.10.173	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-bpf-Adjust-insufficient-default-bpf_jit_limit.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch
runc	1.1.5
libffi	3.4.4
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
binutils	2.38
util-linux	2.38.1
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
docker-proxy	20.10.18
libacl	2.3.1
readline	8.2	readline-8.2-shlib.patch
ecs-gpu-init	0
wicked	0.6.68	1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch
kernel-5.15	5.15.102	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-bpf-Adjust-insufficient-default-bpf_jit_limit.patch
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
kexec-tools	2.0.26
hotdog	1.0.6
nvidia-container-toolkit	1.12.0
iputils	20221126
nvidia-k8s-device-plugin	0.13.0
kubernetes-1.25	1.25.6
libpcap	1.10.1

1.14.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
libnetfilter_conntrack	1.0.9
policycoreutils	3.5
coreutils	9.3
libnl	3.7.0
liblzma	5.4.2
docker-init	19.03.15
log4j2-hotpatch	1.3.0
kernel-5.10	5.10.178	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch
pigz	2.7
kubernetes-1.27	1.27.1
docker-proxy	20.10.18
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
kubernetes-1.26	1.26.2
libgcc	0
libpcre	10.42
iproute	6.2.0	0001-skip-libelf-check.patch
cni-plugins	1.2.0
libmnl	1.0.5
systemd	250.11	0001-errno-util-add-ERRNO_IS_DEVICE_ABSENT-macro.patch 0002-udev-drop-unnecessary-clone-of-received-sd-device-ob.patch 0003-udev-introduce-device_broadcast-helper-function.patch 0004-udev-assume-there-is-no-blocker-when-failed-to-check.patch 0005-udev-store-action-in-struct-Event.patch 0006-udev-requeue-event-when-the-corresponding-block-devi.patch 0007-udev-only-ignore-ENOENT-or-friends-which-suggest-the.patch 0008-udev-split-worker_lock_block_device-into-two.patch 0009-udev-assume-block-device-is-not-locked-when-a-new-ev.patch 0010-udev-fix-inversed-inequality-for-timeout-of-retrying.patch 0011-udev-certainly-restart-event-for-previously-locked-d.patch 0012-udev-try-to-reload-selinux-label-database-less-frequ.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
amazon-ssm-agent	3.2.815.0
readline	8.2	readline-8.2-shlib.patch
containerd	1.6.20
libzstd	1.5.5
libexpat	2.5.0
libiw	29	wireless-tools-29-makefile.patch
libattr	2.5.1
selinux-policy	0
libnftnl	1.2.5
binutils	2.38
libnetfilter_cthelper	1.0.1
util-linux	2.38.1
release	0
filesystem	1
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
runc	1.1.5
libnfnetlink	1.0.2
open-vm-tools	12.2.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
iputils	20221126
grep	3.9
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
kernel-5.15	5.15.108	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch
libz	1.2.13
hotdog	1.0.6
procps	3.3.17
nvidia-k8s-device-plugin	0.14.0
libdbus	1.15.4
kmod	30
cni	1.1.2
ca-certificates	2023.01.10
libelf	0.189
nvidia-container-toolkit	1.13.1
keyutils	1.6.1
kubernetes-1.24	1.24.12
libglib	2.76.0
kubernetes-1.23	1.23.17
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
microcode	0
chrony	4.3
ecs-agent	1.70.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 0006-execcmd-change-execcmd-directories-for-Bottlerocket.patch 1001-bottlerocket-default-filesystem-locations.patch
libselinux	3.5
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
aws-iam-authenticator	0.6.8
libacl	2.3.1
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
libsepol	3.5
docker-engine	20.10.21
strace	6.2
kubernetes-1.22	1.22.17
ecr-credential-provider-1.27	1.27.1
kubernetes-1.25	1.25.8
libaudit	3.1
os	0
e2fsprogs	1.47.0
oci-add-hooks	1.0.0
libnetfilter_cttimeout	1.0.1
ethtool	6.2
libstd-rust	0
libxcrypt	4.4.33
docker-cli	20.10.21
libnvidia-container	1.13.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libsemanage	3.5
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
wicked	0.6.68	1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libtirpc	1.3.3
libcap	2.68	9001-dont-test-during-install.patch
aws-signing-helper	1.0.4
tcpdump	4.99.4
host-ctr	0
findutils	4.9.0
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
ecr-credential-provider	1.25.3
login	0.0.1
libseccomp	2.5.4
ecs-gpu-init	0
kexec-tools	2.0.26
libffi	3.4.4
libnetfilter_queue	1.0.5
libpcap	1.10.1

1.14.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
libnetfilter_conntrack	1.0.9
policycoreutils	3.5
coreutils	9.3
libnl	3.7.0
liblzma	5.4.2
docker-init	19.03.15
log4j2-hotpatch	1.3.0
kernel-5.10	5.10.178	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-netfilter-nf_tables-deactivate-anonymous-set-from-pr.patch
pigz	2.7
kubernetes-1.27	1.27.1
docker-proxy	20.10.18
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
kubernetes-1.26	1.26.4
libgcc	0
libpcre	10.42
iproute	6.2.0	0001-skip-libelf-check.patch
cni-plugins	1.2.0
libmnl	1.0.5
systemd	250.11	0001-errno-util-add-ERRNO_IS_DEVICE_ABSENT-macro.patch 0002-udev-drop-unnecessary-clone-of-received-sd-device-ob.patch 0003-udev-introduce-device_broadcast-helper-function.patch 0004-udev-assume-there-is-no-blocker-when-failed-to-check.patch 0005-udev-store-action-in-struct-Event.patch 0006-udev-requeue-event-when-the-corresponding-block-devi.patch 0007-udev-only-ignore-ENOENT-or-friends-which-suggest-the.patch 0008-udev-split-worker_lock_block_device-into-two.patch 0009-udev-assume-block-device-is-not-locked-when-a-new-ev.patch 0010-udev-fix-inversed-inequality-for-timeout-of-retrying.patch 0011-udev-certainly-restart-event-for-previously-locked-d.patch 0012-udev-try-to-reload-selinux-label-database-less-frequ.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
amazon-ssm-agent	3.2.815.0
readline	8.2	readline-8.2-shlib.patch
containerd	1.6.20
libzstd	1.5.5
libexpat	2.5.0
libiw	29	wireless-tools-29-makefile.patch
libattr	2.5.1
selinux-policy	0
libnftnl	1.2.5
binutils	2.38
libnetfilter_cthelper	1.0.1
util-linux	2.38.1
release	0
filesystem	1
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
runc	1.1.5
libnfnetlink	1.0.2
open-vm-tools	12.2.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
iputils	20221126
grep	3.9
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
kernel-5.15	5.15.108	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 5001-netfilter-nf_tables-deactivate-anonymous-set-from-pr.patch
libz	1.2.13
hotdog	1.0.6
procps	3.3.17
nvidia-k8s-device-plugin	0.14.0
libdbus	1.15.4
kmod	30
cni	1.1.2
ca-certificates	2023.01.10
libelf	0.189
nvidia-container-toolkit	1.13.1
keyutils	1.6.1
kubernetes-1.24	1.24.13
libglib	2.76.0
kubernetes-1.23	1.23.17
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
microcode	0
chrony	4.3
ecs-agent	1.70.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 0006-execcmd-change-execcmd-directories-for-Bottlerocket.patch 1001-bottlerocket-default-filesystem-locations.patch
libselinux	3.5
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
aws-iam-authenticator	0.6.8
libacl	2.3.1
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
libsepol	3.5
docker-engine	20.10.21
strace	6.2
kubernetes-1.22	1.22.17
ecr-credential-provider-1.27	1.27.1
kubernetes-1.25	1.25.9
libaudit	3.1
os	0
e2fsprogs	1.47.0
oci-add-hooks	1.0.0
libnetfilter_cttimeout	1.0.1
ethtool	6.2
libstd-rust	0
libxcrypt	4.4.33
docker-cli	20.10.21
libnvidia-container	1.13.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libsemanage	3.5
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
wicked	0.6.68	1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libtirpc	1.3.3
libcap	2.68	9001-dont-test-during-install.patch
aws-signing-helper	1.0.4
tcpdump	4.99.4
host-ctr	0
findutils	4.9.0
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
ecr-credential-provider	1.25.3
login	0.0.1
libseccomp	2.5.4
ecs-gpu-init	0
kexec-tools	2.0.26
libffi	3.4.4
libnetfilter_queue	1.0.5
libpcap	1.10.1

1.14.2

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
readline	8.2	readline-8.2-shlib.patch
aws-signing-helper	1.0.4
libsepol	3.5
kubernetes-1.26	1.26.6
tcpdump	4.99.4
containerd	1.6.20
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
kernel-5.15	5.15.117	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
libpcap	1.10.1
libnftnl	1.2.5
libffi	3.4.4
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
nvidia-container-toolkit	1.13.1
libsemanage	3.5
libexpat	2.5.0
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
cni	1.1.2
docker-cli	20.10.21
runc	1.1.6
ecr-credential-provider-1.27	1.27.1
liblzma	5.4.2
docker-proxy	20.10.18
chrony	4.3
filesystem	1
libnetfilter_cttimeout	1.0.1
policycoreutils	3.5
libcap	2.68	9001-dont-test-during-install.patch
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
aws-iam-authenticator	0.6.8
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
log4j2-hotpatch	1.3.0
findutils	4.9.0
libdbus	1.15.4
oci-add-hooks	1.0.0
libgcc	0
os	0
kubernetes-1.22	1.22.17
libnetfilter_cthelper	1.0.1
kmod	30
kubernetes-1.23	1.23.17
keyutils	1.6.1
ca-certificates	2023.01.10
selinux-policy	0
binutils	2.38
nvidia-k8s-device-plugin	0.14.0
libnetfilter_queue	1.0.5
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
libiw	29	wireless-tools-29-makefile.patch
libselinux	3.5
ethtool	6.2
util-linux	2.38.1
libnvidia-container	1.13.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libglib	2.76.0
docker-engine	20.10.21
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
ecs-gpu-init	0
microcode	0
ecs-agent	1.70.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 0006-execcmd-change-execcmd-directories-for-Bottlerocket.patch 1001-bottlerocket-default-filesystem-locations.patch
libtirpc	1.3.3
iproute	6.2.0	0001-skip-libelf-check.patch
kubernetes-1.25	1.25.11
libnl	3.7.0
kernel-5.10	5.10.184	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch
hotdog	1.0.6
libxcrypt	4.4.33
libzstd	1.5.5
docker-init	19.03.15
host-ctr	0
grep	3.9
procps	3.3.17
libmnl	1.0.5
kubernetes-1.27	1.27.3
libnetfilter_conntrack	1.0.9
strace	6.2
libaudit	3.1
iputils	20221126
libelf	0.189
libattr	2.5.1
systemd	250.11	0001-errno-util-add-ERRNO_IS_DEVICE_ABSENT-macro.patch 0002-udev-drop-unnecessary-clone-of-received-sd-device-ob.patch 0003-udev-introduce-device_broadcast-helper-function.patch 0004-udev-assume-there-is-no-blocker-when-failed-to-check.patch 0005-udev-store-action-in-struct-Event.patch 0006-udev-requeue-event-when-the-corresponding-block-devi.patch 0007-udev-only-ignore-ENOENT-or-friends-which-suggest-the.patch 0008-udev-split-worker_lock_block_device-into-two.patch 0009-udev-assume-block-device-is-not-locked-when-a-new-ev.patch 0010-udev-fix-inversed-inequality-for-timeout-of-retrying.patch 0011-udev-certainly-restart-event-for-previously-locked-d.patch 0012-udev-try-to-reload-selinux-label-database-less-frequ.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
login	0.0.1
kubernetes-1.24	1.24.15
pigz	2.7
amazon-ssm-agent	3.2.815.0
libz	1.2.13
e2fsprogs	1.47.0
libseccomp	2.5.4
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
libpcre	10.42
libstd-rust	0
cni-plugins	1.2.0
coreutils	9.3
libacl	2.3.1
open-vm-tools	12.2.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
libnfnetlink	1.0.2
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
ecr-credential-provider	1.25.3
release	0
kexec-tools	2.0.26

1.14.3

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.815.0
aws-iam-authenticator	0.6.8
aws-signing-helper	1.0.4
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.01.10
chrony	4.3
cni	1.1.2
cni-plugins	1.2.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.20
coreutils	9.3
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21
docker-engine	20.10.21
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecs-agent	1.70.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-remove-unsupported-CNI-plugins.patch 0005-bottlerocket-fix-procfs-path-on-host.patch 0006-execcmd-change-execcmd-directories-for-Bottlerocket.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.2
filesystem	1
findutils	4.9.0
glibc	2.37	0001-cdefs-Limit-definition-of-fortification-macros.patch 0002-LoongArch-Add-new-relocation-types.patch 0003-Use-64-bit-time_t-interfaces-in-strftime-and-strptim.patch 0004-Account-for-grouping-in-printf-width-bug-30068.patch 0005-NEWS-Document-CVE-2023-25139.patch 0006-elf-Smoke-test-ldconfig-p-against-system-etc-ld.so.c.patch 0007-stdlib-Undo-post-review-change-to-16adc58e73f3-BZ-27.patch 0008-elf-Restore-ldconfig-libc6-implicit-soname-logic-BZ-.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch
host-ctr	0
hotdog	1.0.6
iproute	6.2.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20221126
kernel-5.10	5.10.184	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-x86-cpu-amd-Move-the-errata-checking-functionality-u.patch 5002-x86-cpu-amd-Add-a-Zenbleed-fix.patch
kernel-5.15	5.15.117	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 5001-x86-cpu-amd-Move-the-errata-checking-functionality-u.patch 5002-x86-cpu-amd-Add-a-Zenbleed-fix.patch
kexec-tools	2.0.26
keyutils	1.6.1
kmod	30
kubernetes-1.22	1.22.17
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.15
kubernetes-1.25	1.25.11
kubernetes-1.26	1.26.6
kubernetes-1.27	1.27.3
libacl	2.3.1
libattr	2.5.1
libaudit	3.1
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.68	9001-dont-test-during-install.patch
libdbus	1.15.4
libelf	0.189
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.76.0
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.2
libmnl	1.0.5
libncurses	6.2	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.5
libnl	3.7.0
libnvidia-container	1.13.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcap	1.10.1
libpcre	10.42
libseccomp	2.5.4
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.3
libxcrypt	4.4.33
libz	1.2.13
libzstd	1.5.5
log4j2-hotpatch	1.3.0
login	0.0.1
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.1
nvidia-k8s-device-plugin	0.14.0
oci-add-hooks	1.0.0
open-vm-tools	12.2.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch
os	0
pigz	2.7
policycoreutils	3.5
procps	3.3.17
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.6
selinux-policy	0
strace	6.2
systemd	250.11	0001-errno-util-add-ERRNO_IS_DEVICE_ABSENT-macro.patch 0002-udev-drop-unnecessary-clone-of-received-sd-device-ob.patch 0003-udev-introduce-device_broadcast-helper-function.patch 0004-udev-assume-there-is-no-blocker-when-failed-to-check.patch 0005-udev-store-action-in-struct-Event.patch 0006-udev-requeue-event-when-the-corresponding-block-devi.patch 0007-udev-only-ignore-ENOENT-or-friends-which-suggest-the.patch 0008-udev-split-worker_lock_block_device-into-two.patch 0009-udev-assume-block-device-is-not-locked-when-a-new-ev.patch 0010-udev-fix-inversed-inequality-for-timeout-of-retrying.patch 0011-udev-certainly-restart-event-for-previously-locked-d.patch 0012-udev-try-to-reload-selinux-label-database-less-frequ.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-journal-disable-keyed-hashes-for-compatibility.patch 9008-pkg-config-stop-hardcoding-prefix-to-usr.patch 9009-sysctl-do-not-set-rp_filter-via-wildcard.patch 9010-sysusers-set-root-shell-to-sbin-nologin.patch 9011-units-keep-modprobe-service-units-running.patch 9012-tmpfiles-Split-networkd-entries-into-a-separate-file.patch
tcpdump	4.99.4
util-linux	2.38.1
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch

1.15.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.1478.0
aws-iam-authenticator	0.6.11
aws-signing-helper	1.0.4
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.08.22
chrony	4.4
cni	1.1.2
cni-plugins	1.3.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.23
coreutils	9.3
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecs-agent	1.75.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.4
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20221126
kernel-5.10	5.10.192	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.128	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.49	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.26
keyutils	1.6.1
kmod	30
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.16
kubernetes-1.25	1.25.12
kubernetes-1.26	1.26.7
kubernetes-1.27	1.27.4
kubernetes-1.28	1.28.1
libacl	2.3.1
libattr	2.5.1
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.189
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.77.2
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.4
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.7.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.4
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.3
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0	0001-linux-firmware-Update-AMD-cpu-microcode.patch
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.1
oci-add-hooks	1.0.0
open-vm-tools	12.2.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	3.3.17
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.9
selinux-policy	0
shim	15.7
strace	6.4
systemd	252.13	9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.15.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.161.03
`aws-ecs-2-nvidia`	6.1	535.54.03
`aws-k8s-1.23-nvidia`	5.10	470.161.03
`aws-k8s-1.24-nvidia`	5.15	515.86.01
`aws-k8s-1.25-nvidia`	5.15	515.86.01
`aws-k8s-1.26-nvidia`	5.15	515.86.01
`aws-k8s-1.27-nvidia`	5.15	515.86.01
`aws-k8s-1.28-nvidia`	6.1	535.54.03

1.15.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.1478.0
aws-iam-authenticator	0.6.11
aws-signing-helper	1.0.4
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.08.22
chrony	4.4
cni	1.1.2
cni-plugins	1.3.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.23
coreutils	9.3
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecs-agent	1.75.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.4
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20221126
kernel-5.10	5.10.192	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.128	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.49	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.26
keyutils	1.6.1
kmod	30
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.16
kubernetes-1.25	1.25.12
kubernetes-1.26	1.26.7
kubernetes-1.27	1.27.4
kubernetes-1.28	1.28.1
libacl	2.3.1
libattr	2.5.1
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.189
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.77.2
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.4
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.7.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.4
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.3
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0	0001-linux-firmware-Update-AMD-cpu-microcode.patch
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.1
oci-add-hooks	1.0.0
open-vm-tools	12.3.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	3.3.17
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.9
selinux-policy	0
shim	15.7
strace	6.4
systemd	252.13	9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.16.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.161.03
`aws-ecs-2-nvidia`	6.1	535.54.03
`aws-k8s-1.23-nvidia`	5.10	470.161.03
`aws-k8s-1.24-nvidia`	5.15	515.86.01
`aws-k8s-1.25-nvidia`	5.15	515.86.01
`aws-k8s-1.26-nvidia`	5.15	515.86.01
`aws-k8s-1.27-nvidia`	5.15	515.86.01
`aws-k8s-1.28-nvidia`	6.1	535.54.03

1.16.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.1630.0
aws-iam-authenticator	0.6.11
aws-signing-helper	1.1.1
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.08.22
chrony	4.4
cni	1.1.2
cni-plugins	1.3.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.24
coreutils	9.4
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecs-agent	1.77.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.5
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20221126
kernel-5.10	5.10.197	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.134	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.55	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.16
kubernetes-1.25	1.25.12
kubernetes-1.26	1.26.7
kubernetes-1.27	1.27.4
kubernetes-1.28	1.28.1
libacl	2.3.1
libattr	2.5.1
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.189
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.78.0
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.4
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.8.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.4
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0	0001-linux-firmware-Update-AMD-cpu-microcode.patch
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.1
oci-add-hooks	1.0.0
open-vm-tools	12.3.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	3.3.17
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.9
selinux-policy	0
shim	15.7
strace	6.5
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.16.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.223.02
`aws-ecs-2-nvidia`	6.1	535.129.03
`aws-k8s-1.23-nvidia`	5.10	470.223.02
`aws-k8s-1.24-nvidia`	5.15
`aws-k8s-1.25-nvidia`	5.15
`aws-k8s-1.26-nvidia`	5.15
`aws-k8s-1.27-nvidia`	5.15
`aws-k8s-1.28-nvidia`	6.1	535.129.03

1.16.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.1630.0
aws-iam-authenticator	0.6.11
aws-signing-helper	1.1.1
bash	5.1.16	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.08.22
chrony	4.4
cni	1.1.2
cni-plugins	1.3.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.24
coreutils	9.4
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecs-agent	1.77.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.5
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20221126
kernel-5.10	5.10.198	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.136	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.59	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.15
kubernetes-1.26	1.26.10
kubernetes-1.27	1.27.7
kubernetes-1.28	1.28.3
libacl	2.3.1
libattr	2.5.1
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.189
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.78.0
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.4
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.8.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.4
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.3	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0	0001-linux-firmware-Update-AMD-cpu-microcode.patch
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.1
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	3.3.17
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.9
selinux-policy	0
shim	15.7
strace	6.5
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.17.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.223.02
`aws-ecs-2-nvidia`	6.1	535.129.03
`aws-k8s-1.23-nvidia`	5.10	470.223.02
`aws-k8s-1.24-nvidia`	5.15	535.129.03
`aws-k8s-1.25-nvidia`	5.15	535.129.03
`aws-k8s-1.26-nvidia`	5.15	535.129.03
`aws-k8s-1.27-nvidia`	5.15	535.129.03
`aws-k8s-1.28-nvidia`	6.1	535.129.03

1.17.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.1798.0
aws-iam-authenticator	0.6.13
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.08.22
chrony	4.4
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.25
coreutils	9.4
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecs-agent	1.79.1	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.6
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20221126
kernel-5.10	5.10.201	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.139	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.61	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.11
kubernetes-1.27	1.27.8
kubernetes-1.28	1.28.4
libacl	2.3.1
libattr	2.5.1
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.78.2
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.5
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.3
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	3.3.17
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.10
selinux-policy	0
settings-motd	0
settings-ntp	0
shim	15.7
strace	6.6
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.18.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.223.02
`aws-ecs-2-nvidia`	6.1	535.129.03
`aws-k8s-1.23-nvidia`	5.10	470.223.02
`aws-k8s-1.24-nvidia`	5.15	535.129.03
`aws-k8s-1.25-nvidia`	5.15	535.129.03
`aws-k8s-1.26-nvidia`	5.15	535.129.03
`aws-k8s-1.27-nvidia`	5.15	535.129.03
`aws-k8s-1.28-nvidia`	6.1	535.129.03
`aws-k8s-1.29-nvidia`	6.1	535.129.03

1.18.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.2086.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.12.12
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.26
coreutils	9.4
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.79.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.6
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20231222
kernel-5.10	5.10.205	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.145	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 5001-kallsyms-Make-module_kallsyms_on_each_symbol-general.patch 5002-tracing-kprobes-Fix-symbol-counting-logic-by-looking.patch
kernel-6.1	6.1.66	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch 5001-kallsyms-Make-module_kallsyms_on_each_symbol-general.patch 5002-tracing-kprobes-Fix-symbol-counting-logic-by-looking.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.11
kubernetes-1.27	1.27.8
kubernetes-1.28	1.28.4
kubernetes-1.29	1.29.0
libacl	2.3.1
libattr	2.5.1
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.78.2
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.5
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.3
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.10
selinux-policy	0
settings-container-registry	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.7
strace	6.6
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.19.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.223.02
`aws-ecs-2-nvidia`	6.1	535.129.03
`aws-k8s-1.23-nvidia`	5.10	470.223.02
`aws-k8s-1.24-nvidia`	5.15	535.129.03
`aws-k8s-1.25-nvidia`	5.15	535.129.03
`aws-k8s-1.26-nvidia`	5.15	535.129.03
`aws-k8s-1.27-nvidia`	5.15	535.129.03
`aws-k8s-1.28-nvidia`	6.1	535.129.03
`aws-k8s-1.29-nvidia`	6.1	535.129.03

1.19.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.2143.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.12.12
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.28
coreutils	9.4
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	20.10.21	0001-non-tcp-host-header.patch
docker-engine	20.10.21	0001-non-tcp-host-header.patch 0002-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
docker-proxy	20.10.18
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.79.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.6
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20231222
kernel-5.10	5.10.205	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.145	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.72	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.11
kubernetes-1.27	1.27.8
kubernetes-1.28	1.28.4
kubernetes-1.29	1.29.0
libacl	2.3.1
libattr	2.5.2
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.78.2
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.5
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.3
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.7
strace	6.6
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.19.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.223.02
`aws-ecs-2-nvidia`	6.1	535.129.03
`aws-k8s-1.23-nvidia`	5.10	470.223.02
`aws-k8s-1.24-nvidia`	5.15	535.129.03
`aws-k8s-1.25-nvidia`	5.15	535.129.03
`aws-k8s-1.26-nvidia`	5.15	535.129.03
`aws-k8s-1.27-nvidia`	5.15	535.129.03
`aws-k8s-1.28-nvidia`	6.1	535.129.03
`aws-k8s-1.29-nvidia`	6.1	535.129.03

1.19.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.2.2222.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.12.12
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.28
coreutils	9.4
dbus-broker	33	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.81.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.6
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20231222
kernel-5.10	5.10.209	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.148	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.72	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.11
kubernetes-1.27	1.27.8
kubernetes-1.28	1.28.4
kubernetes-1.29	1.29.0
libacl	2.3.1
libattr	2.5.2
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.5.0
libffi	3.4.4
libgcc	0
libglib	2.78.2
libinih	57
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.42
libseccomp	2.5.5
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.3
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.7
strace	6.6
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.19.2

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.239.06
`aws-ecs-2-nvidia`	6.1	535.161.07
`aws-k8s-1.23-nvidia`	5.10	470.239.06
`aws-k8s-1.24-nvidia`	5.15	535.161.07
`aws-k8s-1.25-nvidia`	5.15	535.161.07
`aws-k8s-1.26-nvidia`	5.15	535.161.07
`aws-k8s-1.27-nvidia`	5.15	535.161.07
`aws-k8s-1.28-nvidia`	6.1	535.161.07
`aws-k8s-1.29-nvidia`	6.1	535.161.07

1.19.2

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.40.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2023.12.12
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.7	0001-disable-RPC-helper.patch
containerd	1.6.28
coreutils	9.4
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.81.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.209	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.148	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.77	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.27
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.11
kubernetes-1.27	1.27.8
kubernetes-1.28	1.28.4
kubernetes-1.29	1.29.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.2
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.6.0
libffi	3.4.6
libgcc	0
libglib	2.78.2
libinih	58
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.5
libsemanage	3.5
libsepol	3.5
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.5
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
strace	6.7
systemd	252.18	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.4.0	0001-libxfs-do-not-try-to-run-the-crc32selftest.patch

1.19.3

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.239.06
`aws-ecs-2-nvidia`	6.1	535.161.07
`aws-k8s-1.23-nvidia`	5.10	470.239.06
`aws-k8s-1.24-nvidia`	5.15	535.161.07
`aws-k8s-1.25-nvidia`	5.15	535.161.07
`aws-k8s-1.26-nvidia`	5.15	535.161.07
`aws-k8s-1.27-nvidia`	5.15	535.161.07
`aws-k8s-1.28-nvidia`	6.1	535.161.07
`aws-k8s-1.29-nvidia`	6.1	535.161.07

1.19.3

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.131.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.30
coreutils	9.4
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.81.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.210	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.149	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.79	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.3
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6
libsepol	3.6
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
strace	6.7
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.6.0

1.19.4

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.239.06
`aws-ecs-2-nvidia`	6.1	535.161.07
`aws-k8s-1.23-nvidia`	5.10	470.239.06
`aws-k8s-1.24-nvidia`	5.15	535.161.07
`aws-k8s-1.25-nvidia`	5.15	535.161.07
`aws-k8s-1.26-nvidia`	5.15	535.161.07
`aws-k8s-1.27-nvidia`	5.15	535.161.07
`aws-k8s-1.28-nvidia`	6.1	535.161.07
`aws-k8s-1.29-nvidia`	6.1	535.161.07

1.19.4

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.131.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.4
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.81.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.213	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.152	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.82	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.3
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6
libsepol	3.6
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
strace	6.7
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.6.0

1.19.5

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.239.06
`aws-ecs-2-nvidia`	6.1	535.161.07
`aws-k8s-1.23-nvidia`	5.10	470.239.06
`aws-k8s-1.24-nvidia`	5.15	535.161.07
`aws-k8s-1.25-nvidia`	5.15	535.161.07
`aws-k8s-1.26-nvidia`	5.15	535.161.07
`aws-k8s-1.27-nvidia`	5.15	535.161.07
`aws-k8s-1.28-nvidia`	6.1	535.161.07
`aws-k8s-1.29-nvidia`	6.1	535.161.07

1.19.5

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.131.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecs-agent	1.81.0	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.214	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.153	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.84	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.3
libbzip2	1.0.8	0001-simplify-shared-object-build.patch
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.19
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
liblzma	5.4.5
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6
libsepol	3.6
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.5
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.4	0000-fix-strip-invocation-for-TARGET-env-variable.patch
microcode	0
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
strace	6.7
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.6.0

1.20.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.239.06
`aws-ecs-2-nvidia`	6.1	535.161.07
`aws-k8s-1.23-nvidia`	5.10	470.239.06
`aws-k8s-1.24-nvidia`	5.15	535.161.07
`aws-k8s-1.25-nvidia`	5.15	535.161.07
`aws-k8s-1.26-nvidia`	5.15	535.161.07
`aws-k8s-1.27-nvidia`	5.15	535.161.07
`aws-k8s-1.28-nvidia`	6.1	535.161.07
`aws-k8s-1.29-nvidia`	6.1	535.161.07
`aws-k8s-1.30-nvidia`	6.1	535.161.07

1.20.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.215	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.156	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.87	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
kubernetes-1.30	1.30.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
static-pods	0.1
strace	6.8
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.7.0

1.20.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.20.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch
docker-init	19.03.15
e2fsprogs	1.47.0
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.216	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.158	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.90	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
kubernetes-1.30	1.30.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
static-pods	0.1
strace	6.8
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.7.0

1.20.2

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.20.2

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.0
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.217	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.158	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.90	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
kubernetes-1.30	1.30.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
static-pods	0.1
strace	6.8
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.7.0

1.20.3

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.20.3

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.2	0001-non-tcp-host-header.patch
docker-engine	25.0.2	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.0
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.218	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.160	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.92	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.14
kubernetes-1.27	1.27.11
kubernetes-1.28	1.28.7
kubernetes-1.29	1.29.1
kubernetes-1.30	1.30.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
static-pods	0.1
strace	6.8
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.7.0

1.20.4

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.20.4

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.31
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.5	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.0
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.219	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.160	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.94	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
static-pods	0.1
strace	6.8
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.7.0

1.20.5

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.20.5

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0
aws-iam-authenticator	0.6.14
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
ca-certificates	2024.03.11
chrony	4.5
cni	1.1.2
cni-plugins	1.4.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.6.34
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.0
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.7
filesystem	1
findutils	4.9.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.220	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.162	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.97	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.4	ncurses-config.patch ncurses-kbs.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.12
selinux-policy	0
settings-aws	0
settings-container-registry	0
settings-kernel	0
settings-motd	0
settings-ntp	0
settings-updates	0
shim	15.8
static-pods	0.1
strace	6.8
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.39.3
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.7.0

1.21.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.21.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0	0001-agent-Add-config-to-make-shell-optional.patch
aws-iam-authenticator	0.6.21
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.1.2
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.20
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.3
ecr-credential-provider-1.27	1.27.1
ecr-credential-provider-1.29	1.29.0
ecr-credential-provider-1.30	1.30.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.9
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.220	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.162	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.97	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.16.7.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.3
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.13.5	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.9	0001-linux-Fix-uninitialized-variables.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.13.5
nvidia-k8s-device-plugin	0.14.4
nvme-cli	2.9.1
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.13
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.6.1
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.8.0

1.21.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01

1.21.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.418.0	0001-agent-Add-config-to-make-shell-optional.patch
aws-iam-authenticator	0.6.21
aws-signing-helper	1.1.1
bash	5.2.21	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.1.2
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.20
coreutils	9.5
dbus-broker	35	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.15
ecr-credential-provider-1.27	1.27.8
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.30.3
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.9
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.9
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.223	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.164	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.102	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.16.7.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
kubernetes-1.31	1.30.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.3
libcap	2.69	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.2
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.9.0
libnvidia-container	1.16.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.9	0001-linux-Fix-uninitialized-variables.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.1
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.9.1
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.13
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.8.0

1.22.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.01
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.01
`aws-k8s-1.25-nvidia`	5.15	535.183.01
`aws-k8s-1.26-nvidia`	5.15	535.183.01
`aws-k8s-1.27-nvidia`	5.15	535.183.01
`aws-k8s-1.28-nvidia`	6.1	535.183.01
`aws-k8s-1.29-nvidia`	6.1	535.183.01
`aws-k8s-1.30-nvidia`	6.1	535.183.01
`aws-k8s-1.31-nvidia`	6.1	535.183.01

1.22.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ssm-agent	3.3.808.0	0001-agent-Add-config-to-make-shell-optional.patch
aws-iam-authenticator	0.6.21
aws-signing-helper	1.1.1
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.20
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.15
ecr-credential-provider-1.27	1.27.8
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 1001-bottlerocket-default-filesystem-locations.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.9	1001-extensions-NAT-Fix-for-Werror-format-security.patch 1002-ip6tables-Fix-checking-existence-of-rule.patch
iputils	20240117
kernel-5.10	5.10.224	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.165	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.106	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.28
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.16.7.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.3
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.6
libnl	3.10.0
libnvidia-container	1.16.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.9	0001-linux-Fix-uninitialized-variables.patch
libpcre	10.43
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.4
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.1
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.9.1
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.8.0

1.23.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.06
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.06
`aws-k8s-1.25-nvidia`	5.15	535.183.06
`aws-k8s-1.26-nvidia`	5.15	535.183.06
`aws-k8s-1.27-nvidia`	5.15	535.183.06
`aws-k8s-1.28-nvidia`	6.1	535.183.06
`aws-k8s-1.29-nvidia`	6.1	535.183.06
`aws-k8s-1.30-nvidia`	6.1	535.183.06
`aws-k8s-1.31-nvidia`	6.1	535.183.06

1.23.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.808.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.225	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.166	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.109	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.17.17.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.1
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.24.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.06
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.06
`aws-k8s-1.25-nvidia`	5.15	535.183.06
`aws-k8s-1.26-nvidia`	5.15	535.183.06
`aws-k8s-1.27-nvidia`	5.15	535.183.06
`aws-k8s-1.28-nvidia`	6.1	535.183.06
`aws-k8s-1.29-nvidia`	6.1	535.183.06
`aws-k8s-1.30-nvidia`	6.1	535.183.06
`aws-k8s-1.31-nvidia`	6.1	535.183.06

1.24.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.808.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.82.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.225	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.166	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.109	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.17.17.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.2
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.24.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.06
`aws-k8s-1.23-nvidia`	5.10	470.256.02
`aws-k8s-1.24-nvidia`	5.15	535.183.06
`aws-k8s-1.25-nvidia`	5.15	535.183.06
`aws-k8s-1.26-nvidia`	5.15	535.183.06
`aws-k8s-1.27-nvidia`	5.15	535.183.06
`aws-k8s-1.28-nvidia`	6.1	535.183.06
`aws-k8s-1.29-nvidia`	6.1	535.183.06
`aws-k8s-1.30-nvidia`	6.1	535.183.06
`aws-k8s-1.31-nvidia`	6.1	535.183.06

1.24.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.808.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.226	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.167	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.109	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.18.12.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.2
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.25.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	470.256.02
`aws-ecs-2-nvidia`	6.1	535.183.06
`aws-k8s-1.24-nvidia`	5.15	535.183.06
`aws-k8s-1.25-nvidia`	5.15	535.183.06
`aws-k8s-1.26-nvidia`	5.15	535.183.06
`aws-k8s-1.27-nvidia`	5.15	535.183.06
`aws-k8s-1.28-nvidia`	6.1	535.183.06
`aws-k8s-1.29-nvidia`	6.1	535.183.06
`aws-k8s-1.30-nvidia`	6.1	535.183.06
`aws-k8s-1.31-nvidia`	6.1	535.183.06

1.25.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.226	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.167	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.109	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.18.12.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.14
kubernetes-1.28	1.28.10
kubernetes-1.29	1.29.5
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.2
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.26.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.26.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.226	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.167	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.112	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.18.12.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.13
kubernetes-1.29	1.29.8
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.2
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.26.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.26.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.226	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.167	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.112	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.18.12.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.13
kubernetes-1.29	1.29.8
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.2
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.26.2

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.26.2

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.40.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240117
kernel-5.10	5.10.227	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.168	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.112	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch 1100-blk-throttle-Fix-io-statistics-for-cgroup-v1.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-neuron	2.18.12.0	0001-kbuild-do-not-outline-atomics-for-arm64.patch
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.13
kubernetes-1.29	1.29.8
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.4
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.5.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.16.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.16.2
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.9
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.27.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.27.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.41.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240905
kernel-5.10	5.10.227	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.168	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch
kernel-6.1	6.1.112	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch 1100-blk-throttle-Fix-io-statistics-for-cgroup-v1.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.13
kubernetes-1.29	1.29.8
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.5
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.4.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.17.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.17.1
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
rdma-core	54
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.11
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.27.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.27.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
acpid	2.0.34	0001-Remove-shell-dependency-by-only-shutting-down.patch
amazon-ecs-cni-plugins	53a8481891251e66e35847554d52a13fc7c4fd03	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.41.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240905
kernel-5.10	5.10.228	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.168	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1100-netfilter-xtables-fix-typo-causing-some-targets-not-.patch
kernel-6.1	6.1.115	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.13
kubernetes-1.29	1.29.8
kubernetes-1.30	1.30.1
kubernetes-1.31	1.31.0
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.5
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.6
libelf	0.191
libexpat	2.6.3
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.4.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.17.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.17.1
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
rdma-core	54
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.11
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.28.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.28.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2020.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.987.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.26
aws-otel-collector	0.41.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.2.0
bash	5.2.32	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.38
chrony	4.5
cni	1.2.3
cni-plugins	1.5.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd	1.7.22
coreutils	9.5
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.5	0001-non-tcp-host-header.patch
docker-engine	25.0.6	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider	1.25.16
ecr-credential-provider-1.27	1.27.9
ecr-credential-provider-1.29	1.29.6
ecr-credential-provider-1.30	1.30.3
ecr-credential-provider-1.31	1.31.0
ecs-agent	1.86.3	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.1
filesystem	1
findutils	4.10.0
glibc	2.38	0001-stdlib-Improve-tst-realpath-compatibility-with-sourc.patch 0002-x86-Fix-for-cache-computation-on-AMD-legacy-cpus.patch 0003-nscd-Do-not-rebuild-getaddrinfo-bug-30709.patch 0004-x86-Fix-incorrect-scope-of-setting-shared_per_thread.patch 0005-x86_64-Fix-build-with-disable-multiarch-BZ-30721.patch 0006-i686-Fix-build-with-disable-multiarch.patch 0007-malloc-Enable-merging-of-remainders-in-memalign-bug-.patch 0008-malloc-Remove-bin-scanning-from-memalign-bug-30723.patch 0009-sysdeps-tst-bz21269-fix-test-parameter.patch 0010-sysdeps-tst-bz21269-handle-ENOSYS-skip-appropriately.patch 0011-sysdeps-tst-bz21269-fix-Wreturn-type.patch 0012-io-Fix-record-locking-contants-for-powerpc64-with-__.patch 0013-libio-Fix-oversized-__io_vtables.patch 0014-elf-Do-not-run-constructors-for-proxy-objects.patch 0015-elf-Always-call-destructors-in-reverse-constructor-o.patch 0016-elf-Remove-unused-l_text_end-field-from-struct-link_.patch 0017-elf-Move-l_init_called_next-to-old-place-of-l_text_e.patch 0018-NEWS-Add-the-2.38.1-bug-list.patch 0019-CVE-2023-4527-Stack-read-overflow-with-large-TCP-res.patch 0020-getaddrinfo-Fix-use-after-free-in-getcanonname-CVE-2.patch 0021-iconv-restore-verbosity-with-unrecognized-encoding-n.patch 0022-string-Fix-tester-build-with-fortify-enable-with-gcc.patch 0023-manual-jobs.texi-Add-missing-item-EPERM-for-getpgid.patch 0024-Fix-leak-in-getaddrinfo-introduced-by-the-fix-for-CV.patch 0025-Document-CVE-2023-4806-and-CVE-2023-5156-in-NEWS.patch 0026-Propagate-GLIBC_TUNABLES-in-setxid-binaries.patch 0027-tunables-Terminate-if-end-of-input-is-reached-CVE-20.patch 0028-Revert-elf-Remove-unused-l_text_end-field-from-struc.patch 0029-Revert-elf-Always-call-destructors-in-reverse-constr.patch 0030-Revert-elf-Move-l_init_called_next-to-old-place-of-l.patch 0031-sysdeps-sem_open-Clear-O_CREAT-when-semaphore-file-i.patch 0032-elf-Fix-wrong-break-removal-from-8ee878592c.patch 0033-LoongArch-Delete-excessively-allocated-memory.patch 0034-elf-Fix-TLS-modid-reuse-generation-assignment-BZ-290.patch 0035-elf-Add-TLS-modid-reuse-test-for-bug-29039.patch 0036-x86-64-Fix-the-dtv-field-load-for-x32-BZ-31184.patch 0037-x86-64-Fix-the-tcb-field-load-for-x32-BZ-31185.patch 0038-NEWS-Mention-bug-fixes-for-29039-30694-30709-30721.patch 0039-NEWS-Mention-bug-fixes-for-30745-30843.patch 0040-getaddrinfo-translate-ENOMEM-to-EAI_MEMORY-bug-31163.patch 0041-libio-Check-remaining-buffer-size-in-_IO_wdo_write-b.patch 0042-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0043-syslog-Fix-heap-buffer-overflow-in-__vsyslog_interna.patch 0044-syslog-Fix-integer-overflow-in-__vsyslog_internal-CV.patch 0045-x86_64-Optimize-ffsll-function-code-size.patch 0046-S390-Fix-building-with-disable-mutli-arch-BZ-31196.patch 0047-sparc-Fix-broken-memset-for-sparc32-BZ-31068.patch 0048-sparc64-Remove-unwind-information-from-signal-return.patch 0049-sparc-Fix-sparc64-memmove-length-comparison-BZ-31266.patch 0050-sparc-Remove-unwind-information-from-signal-return-s.patch 0051-arm-Remove-wrong-ldr-from-_dl_start_user-BZ-31339.patch 0052-malloc-Use-__get_nprocs-on-arena_get2-BZ-30945.patch 0053-S390-Do-not-clobber-r7-in-clone-BZ-31402.patch 0054-linux-Use-rseq-area-unconditionally-in-sched_getcpu-.patch 0055-LoongArch-Correct-__ieee754-_-_scalb-__ieee754-_-_sc.patch 0056-Add-HWCAP2_MOPS-from-Linux-6.5-to-AArch64-bits-hwcap.patch 0057-AArch64-Add-support-for-MOPS-memcpy-memmove-memset.patch 0058-AArch64-Cleanup-ifuncs.patch 0059-AArch64-Cleanup-emag-memset.patch 0060-AArch64-Add-memset_zva64.patch 0061-AArch64-Remove-Falkor-memcpy.patch 0062-aarch64-correct-CFI-in-rawmemchr-bug-31113.patch 0063-aarch64-fix-check-for-SVE-support-in-assembler.patch 0064-AArch64-Check-kernel-version-for-SVE-ifuncs.patch 0065-powerpc-Fix-ld.so-address-determination-for-PCREL-mo.patch 0066-iconv-ISO-2022-CN-EXT-fix-out-of-bound-writes-when-w.patch 0067-sparc-Remove-64-bit-check-on-sparc32-wordsize-BZ-275.patch 0068-login-Check-default-sizes-of-structs-utmp-utmpx-last.patch 0069-login-structs-utmp-utmpx-lastlog-_TIME_BITS-independ.patch 0070-nptl-Fix-tst-cancel30-on-kernels-without-ppoll_time6.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-add-flag-to-only-search-root-dev.patch
host-ctr	0
iproute	6.4.0	0001-skip-libelf-check.patch
iptables	1.8.10
iputils	20240905
kernel-5.10	5.10.228	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1003-af_unix-increase-default-max_dgram_qlen-to-512.patch 2000-kbuild-move-module-strip-compression-code-into-scrip.patch 2001-kbuild-add-support-for-zstd-compressed-modules.patch 5001-Revert-netfilter-nf_tables-drop-map-element-referenc.patch
kernel-5.15	5.15.168	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1100-netfilter-xtables-fix-typo-causing-some-targets-not-.patch
kernel-6.1	6.1.115	1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch 1100-io_uring-always-lock-__io_cqring_overflow_flush.patch
kexec-tools	2.0.29
keyutils	1.6.1
kmod	31
kmod-5.10-nvidia	1.0.0
kmod-5.15-nvidia	1.0.0
kmod-6.1-nvidia	1.0.0
kubernetes-1.23	1.23.17
kubernetes-1.24	1.24.17
kubernetes-1.25	1.25.16
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.14
kubernetes-1.29	1.29.9
kubernetes-1.30	1.30.5
kubernetes-1.31	1.31.1
libacl	2.3.2
libattr	2.5.2
libaudit	3.1.5
libbpf	1.4.5
libcap	2.7	9001-dont-test-during-install.patch
libdbus	1.15.12
libelf	0.191
libexpat	2.6.4
libffi	3.4.6
libgcc	0
libglib	2.78.4
libinih	58
libiw	29	wireless-tools-29-makefile.patch
libkcapi	1.4.0
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.0.9
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.7
libnl	3.10.0
libnvidia-container	1.17.3	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-Use-NVIDIA_PATH-to-look-up-binaries.patch 0005-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.1
libpcre	10.44
libseccomp	2.5.5
libselinux	3.6
libsemanage	3.6	0001-remove-bzip2-dependency.patch
libsepol	3.6	0001-libsepol-cil-Check-common-perms-when-verifiying-all.patch
libstd-rust	0
libtirpc	1.3.5
liburcu	0.14.0
libxcrypt	4.4.36
libz	1.3.1
libzstd	1.5.6
linux-firmware	20230625	0001-linux-firmware-snd-remove-firmware-for-snd-audio-dev.patch 0002-linux-firmware-video-Remove-firmware-for-video-broad.patch 0003-linux-firmware-bt-wifi-Remove-firmware-for-Bluetooth.patch 0004-linux-firmware-scsi-Remove-firmware-for-SCSI-devices.patch 0005-linux-firmware-usb-remove-firmware-for-USB-Serial-PC.patch 0006-linux-firmware-ethernet-Remove-firmware-for-ethernet.patch 0007-linux-firmware-Remove-firmware-for-Accelarator-devic.patch 0008-linux-firmware-gpu-Remove-firmware-for-GPU-devices.patch 0009-linux-firmware-various-Remove-firmware-for-various-d.patch 0010-linux-firmware-amd-ucode-Remove-amd-microcode.patch
login	0.0.1
makedumpfile	1.7.5	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
microcode	0
netdog	0.1.1
nvidia-container-toolkit	1.17.3
nvidia-k8s-device-plugin	0.16.2
nvme-cli	2.10.2
oci-add-hooks	1.0.0
open-vm-tools	12.3.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.6
procps	4.0.4
rdma-core	54
readline	8.2	readline-8.2-shlib.patch
release	0
runc	1.1.14
selinux-policy	0
shim	15.8
socat	1.8.0.0	0001-xioopts-conditionally-compile-applyopts_termios_valu.patch
soci-snapshotter	0.7.0
static-pods	0.1
strace	6.11
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch
util-linux	2.40.2
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0

1.29.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01

1.30.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.216.01
`aws-ecs-2-nvidia`	6.1	535.216.01
`aws-k8s-1.24-nvidia`	5.15	535.216.01
`aws-k8s-1.25-nvidia`	5.15	535.216.01
`aws-k8s-1.26-nvidia`	5.15	535.216.01
`aws-k8s-1.27-nvidia`	5.15	535.216.01
`aws-k8s-1.28-nvidia`	6.1	535.216.01
`aws-k8s-1.29-nvidia`	6.1	535.216.01
`aws-k8s-1.30-nvidia`	6.1	535.216.01
`aws-k8s-1.31-nvidia`	6.1	535.216.01
`aws-k8s-1.32-nvidia`	6.1	535.216.01

1.31.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.230.02
`aws-ecs-2-nvidia`	6.1	535.230.02
`aws-k8s-1.24-nvidia`	5.15	535.230.02
`aws-k8s-1.25-nvidia`	5.15	535.230.02
`aws-k8s-1.26-nvidia`	5.15	535.230.02
`aws-k8s-1.27-nvidia`	5.15	535.230.02
`aws-k8s-1.28-nvidia`	6.1	535.230.02
`aws-k8s-1.29-nvidia`	6.1	535.230.02
`aws-k8s-1.30-nvidia`	6.1	535.230.02
`aws-k8s-1.31-nvidia`	6.1	535.230.02
`aws-k8s-1.32-nvidia`	6.1	535.230.02

1.32.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.230.02
`aws-ecs-2-nvidia`	6.1	535.230.02
`aws-k8s-1.24-nvidia`	5.15	535.230.02
`aws-k8s-1.25-nvidia`	5.15	535.230.02
`aws-k8s-1.26-nvidia`	5.15	535.230.02
`aws-k8s-1.27-nvidia`	5.15	535.230.02
`aws-k8s-1.28-nvidia`	6.1	535.230.02
`aws-k8s-1.29-nvidia`	6.1	535.230.02
`aws-k8s-1.30-nvidia`	6.1	535.230.02
`aws-k8s-1.31-nvidia`	6.1	535.230.02
`aws-k8s-1.32-nvidia`	6.1	535.230.02

1.33.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.230.02
`aws-ecs-2-nvidia`	6.1	535.230.02
`aws-k8s-1.25-nvidia`	5.15	535.230.02
`aws-k8s-1.26-nvidia`	5.15	535.230.02
`aws-k8s-1.27-nvidia`	5.15	535.230.02
`aws-k8s-1.28-nvidia`	6.1	535.230.02
`aws-k8s-1.29-nvidia`	6.1	535.230.02
`aws-k8s-1.30-nvidia`	6.1	535.230.02
`aws-k8s-1.31-nvidia`	6.1	535.230.02
`aws-k8s-1.32-nvidia`	6.1	535.230.02

1.34.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.10	535.230.02
`aws-ecs-2-nvidia`	6.1	535.230.02
`aws-k8s-1.25-nvidia`	5.15	535.230.02
`aws-k8s-1.26-nvidia`	5.15	535.230.02
`aws-k8s-1.27-nvidia`	5.15	535.230.02
`aws-k8s-1.28-nvidia`	6.1	535.230.02
`aws-k8s-1.29-nvidia`	6.1	535.230.02
`aws-k8s-1.30-nvidia`	6.1	535.230.02
`aws-k8s-1.31-nvidia`	6.1	535.230.02
`aws-k8s-1.32-nvidia`	6.1	535.230.02

1.35.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.230.02
`aws-ecs-2-nvidia`	6.1	535.230.02
`aws-k8s-1.25-nvidia`	5.15	535.230.02
`aws-k8s-1.26-nvidia`	5.15	535.230.02
`aws-k8s-1.27-nvidia`	5.15	535.230.02
`aws-k8s-1.28-nvidia`	6.1	535.230.02
`aws-k8s-1.29-nvidia`	6.1	535.230.02
`aws-k8s-1.30-nvidia`	6.1	535.230.02
`aws-k8s-1.31-nvidia`	6.1	535.230.02
`aws-k8s-1.32-nvidia`	6.1	535.230.02

1.36.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.230.02
`aws-ecs-2-nvidia`	6.1	535.230.02
`aws-k8s-1.25-nvidia`	5.15	535.230.02
`aws-k8s-1.26-nvidia`	5.15	535.230.02
`aws-k8s-1.27-nvidia`	5.15	535.230.02
`aws-k8s-1.28-nvidia`	6.1	535.230.02
`aws-k8s-1.29-nvidia`	6.1	535.230.02
`aws-k8s-1.30-nvidia`	6.1	535.230.02
`aws-k8s-1.31-nvidia`	6.1	535.230.02
`aws-k8s-1.32-nvidia`	6.1	535.230.02

1.37.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	535.247.01
`aws-k8s-1.25-nvidia`	5.15	535.247.01
`aws-k8s-1.26-nvidia`	5.15	535.247.01
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	535.247.01
`aws-k8s-1.29-nvidia`	6.1	535.247.01
`aws-k8s-1.30-nvidia`	6.1	535.247.01
`aws-k8s-1.31-nvidia`	6.1	535.247.01
`aws-k8s-1.32-nvidia`	6.1	535.247.01

1.38.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	570.133.20
`aws-k8s-1.26-nvidia`	5.15	535.247.01
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	570.133.20
`aws-k8s-1.29-nvidia`	6.1	570.133.20
`aws-k8s-1.30-nvidia`	6.1	570.133.20
`aws-k8s-1.31-nvidia`	6.1	570.133.20
`aws-k8s-1.32-nvidia`	6.1	570.133.20

1.39.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	570.133.20
`aws-k8s-1.26-nvidia`	5.15	535.247.01
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	570.133.20
`aws-k8s-1.29-nvidia`	6.1	570.133.20
`aws-k8s-1.30-nvidia`	6.1	570.133.20
`aws-k8s-1.31-nvidia`	6.1	570.133.20
`aws-k8s-1.32-nvidia`	6.1	570.133.20
`aws-k8s-1.33-nvidia`	6.12	570.133.20

1.39.1

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	570.133.20
`aws-k8s-1.26-nvidia`	5.15	535.247.01
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	570.133.20
`aws-k8s-1.29-nvidia`	6.1	570.133.20
`aws-k8s-1.30-nvidia`	6.1	570.133.20
`aws-k8s-1.31-nvidia`	6.1	570.133.20
`aws-k8s-1.32-nvidia`	6.1	570.133.20
`aws-k8s-1.33-nvidia`	6.12	570.133.20

1.40.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	570.133.20
`aws-k8s-1.26-nvidia`	5.15	535.247.01
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	570.133.20
`aws-k8s-1.29-nvidia`	6.1	570.133.20
`aws-k8s-1.30-nvidia`	6.1	570.133.20
`aws-k8s-1.31-nvidia`	6.1	570.133.20
`aws-k8s-1.32-nvidia`	6.1	570.133.20
`aws-k8s-1.33-nvidia`	6.12	570.133.20

1.41.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	570.148.08
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	570.148.08
`aws-k8s-1.29-nvidia`	6.1	570.148.08
`aws-k8s-1.30-nvidia`	6.1	570.148.08
`aws-k8s-1.31-nvidia`	6.1	570.148.08
`aws-k8s-1.32-nvidia`	6.1	570.148.08
`aws-k8s-1.33-nvidia`	6.12	570.148.08

1.42.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.247.01
`aws-ecs-2-nvidia`	6.1	570.148.08
`aws-k8s-1.27-nvidia`	5.15	535.247.01
`aws-k8s-1.28-nvidia`	6.1	570.148.08
`aws-k8s-1.29-nvidia`	6.1	570.148.08
`aws-k8s-1.30-nvidia`	6.1	570.148.08
`aws-k8s-1.31-nvidia`	6.1	570.148.08
`aws-k8s-1.32-nvidia`	6.1	570.148.08
`aws-k8s-1.33-nvidia`	6.12	570.148.08

1.43.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-1-nvidia`	5.15	535.261.03
`aws-ecs-2-nvidia`	6.1	570.172.08
`aws-k8s-1.27-nvidia`	5.15	535.261.03
`aws-k8s-1.28-nvidia`	6.1	570.172.08
`aws-k8s-1.29-nvidia`	6.1	570.172.08
`aws-k8s-1.30-nvidia`	6.1	570.172.08
`aws-k8s-1.31-nvidia`	6.1	570.172.08
`aws-k8s-1.32-nvidia`	6.1	570.172.08
`aws-k8s-1.33-nvidia`	6.12	570.172.08

1.44.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.172.08
`aws-k8s-1.28-nvidia`	6.1	570.172.08
`aws-k8s-1.29-nvidia`	6.1	570.172.08
`aws-k8s-1.30-nvidia`	6.1	570.172.08
`aws-k8s-1.31-nvidia`	6.1	570.172.08
`aws-k8s-1.32-nvidia`	6.1	570.172.08
`aws-k8s-1.33-nvidia`	6.12	570.172.08

1.45.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.172.08
`aws-k8s-1.28-nvidia`	6.1	570.172.08
`aws-k8s-1.29-nvidia`	6.1	570.172.08
`aws-k8s-1.30-nvidia`	6.1	570.172.08
`aws-k8s-1.31-nvidia`	6.1	570.172.08
`aws-k8s-1.32-nvidia`	6.1	570.172.08
`aws-k8s-1.33-nvidia`	6.12	570.172.08

1.46.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.172.08
`aws-k8s-1.28-nvidia`	6.1	570.172.08
`aws-k8s-1.29-nvidia`	6.1	570.172.08
`aws-k8s-1.30-nvidia`	6.1	570.172.08
`aws-k8s-1.31-nvidia`	6.1	570.172.08
`aws-k8s-1.32-nvidia`	6.1	570.172.08
`aws-k8s-1.33-nvidia`	6.12	570.172.08

1.47.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.172.08
`aws-k8s-1.28-nvidia`	6.1	570.172.08
`aws-k8s-1.29-nvidia`	6.1	570.172.08
`aws-k8s-1.30-nvidia`	6.1	570.172.08
`aws-k8s-1.31-nvidia`	6.1	570.172.08
`aws-k8s-1.32-nvidia`	6.1	570.172.08
`aws-k8s-1.33-nvidia`	6.12	570.172.08
`aws-k8s-1.34-nvidia`	6.12	580.65.06

1.48.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.172.08
`aws-k8s-1.28-nvidia`	6.1	570.172.08
`aws-k8s-1.29-nvidia`	6.1	570.172.08
`aws-k8s-1.30-nvidia`	6.1	570.172.08
`aws-k8s-1.31-nvidia`	6.1	570.172.08
`aws-k8s-1.32-nvidia`	6.1	570.172.08
`aws-k8s-1.33-nvidia`	6.12	570.172.08
`aws-k8s-1.34-nvidia`	6.12	580.65.06

1.49.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.195.03
`aws-k8s-1.28-nvidia`	6.1	570.195.03
`aws-k8s-1.29-nvidia`	6.1	570.195.03
`aws-k8s-1.30-nvidia`	6.1	570.195.03
`aws-k8s-1.31-nvidia`	6.1	570.195.03
`aws-k8s-1.32-nvidia`	6.1	570.195.03
`aws-k8s-1.33-nvidia`	6.12	570.195.03
`aws-k8s-1.34-nvidia`	6.12	580.95.05

1.50.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.195.03
`aws-k8s-1.28-nvidia`	6.1	570.195.03
`aws-k8s-1.29-nvidia`	6.1	570.195.03
`aws-k8s-1.30-nvidia`	6.1	570.195.03
`aws-k8s-1.31-nvidia`	6.1	570.195.03
`aws-k8s-1.32-nvidia`	6.1	570.195.03
`aws-k8s-1.33-nvidia`	6.12	570.195.03
`aws-k8s-1.34-nvidia`	6.12	580.95.05

1.51.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.195.03
`aws-ecs-2-nvidia-fips`	6.1	570.195.03
`aws-ecs-3-nvidia`	6.12	580.95.05
`aws-ecs-3-nvidia-fips`	6.12	580.95.05
`aws-k8s-1.28-nvidia`	6.1	570.195.03
`aws-k8s-1.29-nvidia`	6.1	570.195.03
`aws-k8s-1.29-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.30-nvidia`	6.1	570.195.03
`aws-k8s-1.30-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.31-nvidia`	6.1	570.195.03
`aws-k8s-1.31-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.32-nvidia`	6.1	570.195.03
`aws-k8s-1.32-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.33-nvidia`	6.12	570.195.03
`aws-k8s-1.33-nvidia-fips`	6.12	570.195.03
`aws-k8s-1.34-nvidia`	6.12	580.95.05
`aws-k8s-1.34-nvidia-fips`	6.12	580.95.05

1.52.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	570.195.03
`aws-ecs-2-nvidia-fips`	6.1	570.195.03
`aws-ecs-3-nvidia`	6.12	580.95.05
`aws-ecs-3-nvidia-fips`	6.12	580.95.05
`aws-k8s-1.29-nvidia`	6.1	570.195.03
`aws-k8s-1.29-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.30-nvidia`	6.1	570.195.03
`aws-k8s-1.30-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.31-nvidia`	6.1	570.195.03
`aws-k8s-1.31-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.32-nvidia`	6.1	570.195.03
`aws-k8s-1.32-nvidia-fips`	6.1	570.195.03
`aws-k8s-1.33-nvidia`	6.12	570.195.03
`aws-k8s-1.33-nvidia-fips`	6.12	570.195.03
`aws-k8s-1.34-nvidia`	6.12	580.95.05
`aws-k8s-1.34-nvidia-fips`	6.12	580.95.05

1.53.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.95.05
`aws-ecs-2-nvidia-fips`	6.1	580.95.05
`aws-ecs-3-nvidia`	6.12	580.95.05
`aws-ecs-3-nvidia-fips`	6.12	580.95.05
`aws-k8s-1.29-nvidia`	6.1	580.95.05
`aws-k8s-1.29-nvidia-fips`	6.1	580.95.05
`aws-k8s-1.30-nvidia`	6.1	580.95.05
`aws-k8s-1.30-nvidia-fips`	6.1	580.95.05
`aws-k8s-1.31-nvidia`	6.1	580.95.05
`aws-k8s-1.31-nvidia-fips`	6.1	580.95.05
`aws-k8s-1.32-nvidia`	6.1	580.95.05
`aws-k8s-1.32-nvidia-fips`	6.1	580.95.05
`aws-k8s-1.33-nvidia`	6.12	580.95.05
`aws-k8s-1.33-nvidia-fips`	6.12	580.95.05
`aws-k8s-1.34-nvidia`	6.12	580.95.05
`aws-k8s-1.34-nvidia-fips`	6.12	580.95.05
`aws-k8s-1.35-nvidia`	6.12	580.95.05
`aws-k8s-1.35-nvidia-fips`	6.12	580.95.05

1.54.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.29-nvidia`	6.1	580.126.09
`aws-k8s-1.29-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

1.55.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.29-nvidia`	6.1	580.126.09
`aws-k8s-1.29-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

1.56.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.29-nvidia`	6.1	580.126.09
`aws-k8s-1.29-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

1.57.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.29-nvidia`	6.1	580.126.09
`aws-k8s-1.29-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

1.58.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

1.59.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

1.60.0

Mon, 01 Jan 0001 00:00:00 +0000

Variant	Kernel Version	NVIDIA Driver Version
`aws-ecs-2-nvidia`	6.1	580.126.09
`aws-ecs-2-nvidia-fips`	6.1	580.126.09
`aws-ecs-3-nvidia`	6.12	580.126.09
`aws-ecs-3-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.30-nvidia`	6.1	580.126.09
`aws-k8s-1.30-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.31-nvidia`	6.1	580.126.09
`aws-k8s-1.31-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.32-nvidia`	6.1	580.126.09
`aws-k8s-1.32-nvidia-fips`	6.1	580.126.09
`aws-k8s-1.33-nvidia`	6.12	580.126.09
`aws-k8s-1.33-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.34-nvidia`	6.12	580.126.09
`aws-k8s-1.34-nvidia-fips`	6.12	580.126.09
`aws-k8s-1.35-nvidia`	6.12	580.126.09
`aws-k8s-1.35-nvidia-fips`	6.12	580.126.09

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

In this quickstart, we use a number of techniques/tools like jq and environment variables to make the quickstart experience as simple and straightforward as possible. These tools are not absolutely necessary to use Bottlerocket on ECS.

Prerequisites

There are some preliminary tasks to complete in order to use ECS. You need to both set up your AWS account for use with ECS and have an IAM role for ECS configured:

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

There are some preliminary tasks to complete in order to use ECS. You need to both set up your AWS account for use with ECS and have an IAM role for ECS configured:

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

There are some preliminary tasks to complete in order to use ECS. You need to both set up your AWS account for use with ECS and have an IAM role for ECS configured:

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

When registering EC2 instances as capacity for an ECS cluster, you can use Bottlerocket as the operating system for these instances. If you want to understand the AWS console workflow, start with the video Amazon ECS: Using Bottlerocket. Otherwise, read the AWS CLI Quickstart or the pattern Amazon ECS cluster on Bottlerocket which outlines how to start Bottlerocket with SAM CLI.

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon ECS

Mon, 01 Jan 0001 00:00:00 +0000

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

eksctl: Used to create EKS clusters.
kubectl: Used to interact with resources within a Kubernetes cluster.
aws-cli: Used to interact with AWS services.
SSM Session Manager Plugin for AWS CLI: Used to enter SSM sessions on Bottlerocket nodes through the AWS CLI.

Cluster Setup

There are two main steps to setting up an EKS cluster: creating the configuration file and applying the configuration file using eksctl.

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

eksctl: Used to create EKS clusters.
kubectl: Used to interact with resources within a Kubernetes cluster.
aws-cli: Used to interact with AWS services.
SSM Session Manager Plugin for AWS CLI: Used to enter SSM sessions on Bottlerocket nodes through the AWS CLI.

Cluster Setup

There are two main steps to setting up an EKS cluster: creating the configuration file and applying the configuration file using eksctl.

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

eksctl: Used to create EKS clusters.
kubectl: Used to interact with resources within a Kubernetes cluster.
aws-cli: Used to interact with AWS services.
SSM Session Manager Plugin for AWS CLI: Used to enter SSM sessions on Bottlerocket nodes through the AWS CLI.

Cluster Setup

There are two main steps to setting up an EKS cluster: creating the configuration file and applying the configuration file using eksctl.

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

Amazon EKS

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

In order to set up a Bottlerocket cluster on EKS, you will need the latest versions of the following tools installed:

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

Bottlerocket is an API-driven operating system. This is a departure from general purpose Linux distributions where you install packages, configure services through individual configuration files, and use commands from the shell to perform administrative tasks.

With the concept of variants, all installed software for any given image is a known quantity and an included API enables you to configure everything from a single interface. Additionally, administrative tasks like checking for updates and rebooting as well as executing commands on the host are all accomplished with API calls.

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Driven

Mon, 01 Jan 0001 00:00:00 +0000

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

API Endpoint Reference

Mon, 01 Jan 0001 00:00:00 +0000

The following output is generated from Bottlerocket’s OpenAPI Spec.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket CIS Benchmark

Mon, 01 Jan 0001 00:00:00 +0000

The Bottlerocket CIS Benchmark contains a number of security best practices to harden Bottlerocket worker nodes. The benchmark contains two levels:

Level 1: basic guidelines with clear security benefits that do not inhibit the node. Bottlerocket’s default settings are compliant with level 1.
Level 2: detailed, specific guidance that provide more defence to the node. This level introduces some trade-offs between functionality and security.

The report API has built-in tests that allow you to evaluate the state of the node to both Level 1 and Level 2.

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Bottlerocket FIPS report

Mon, 01 Jan 0001 00:00:00 +0000

The FIPS report includes information about the state of the FIPS support in the host. The report API has built-in tests that allow you to evaluate the state of the node.

Examples

apiclient report fips

Benchmark name: FIPS Security Policy
Version: v1.0.0
Reference: https://csrc.nist.gov/
Benchmark level: 1
Start time: <>

[PASS] 1.0 FIPS mode is enabled. (Automatic)
[PASS] 1.1 FIPS module is Amazon Linux 2023 Kernel Cryptographic API. (Automatic)
[PASS] 1.2 FIPS self-tests passed. (Automatic)

Passed: 3
Failed: 0
Skipped: 0
Total checks: 3

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Container hosts are particularly sensitive, with nearly unfettered access to your workloads, secrets, storage, and network. Consequently, ensuring that only your desired code runs on the host is paramount. Bottlerocket’s chain of trust provides cryptographic verification of all parts of the boot sequence through to your containers starting. Effectively, this means that every step verifies the next step in the sequence and any verification failure will immediately prevent any further progress.

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Chain of Trust

Mon, 01 Jan 0001 00:00:00 +0000

Components

Mon, 01 Jan 0001 00:00:00 +0000

The components of Bottlerocket differ substantially from most Linux distributions. By providing ready-to-run images, some software typically considered as workloads of an operating system are integral to Bottlerocket.

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Components

Mon, 01 Jan 0001 00:00:00 +0000

This diagram represents the components of the aws-k8s-* variant. Subsequent sections will dissect and explain this variant.

Foundation

The Linux kernel provides the foundation of Bottlerocket. The kernel (major+minor) version may vary between variants, but does not change on update.

Core Kit packages 10.0.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.1957.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.2
aws-otel-collector	0.43.2	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.6.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.27	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.8	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.6
ecr-credential-provider-1.32	1.32.3
ecr-credential-provider-1.33	1.33.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.14
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.15.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.13
kubernetes-1.31	1.31.9
kubernetes-1.32	1.32.5
kubernetes-1.33	1.33.1
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.0
libbpf	1.6.1
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.33
libelf	0.193
libexpat	2.7.0
libffi	3.4.8
libgcc	0
libglib	2.84.3
libinih	60
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.9
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.14
libpcre	10.44
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.1	0001-fix-ldcache-parsing-for-aarch64.patch
nvme-cli	2.14
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.15
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
xfsprogs	6.15.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 10.1.2

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.2746.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.4
aws-otel-collector	0.43.3	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.7.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.27	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.12	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.7
ecr-credential-provider-1.32	1.32.4
ecr-credential-provider-1.33	1.33.1
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.14
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.15.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.13
kubernetes-1.31	1.31.9
kubernetes-1.32	1.32.5
kubernetes-1.33	1.33.1
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.0
libbpf	1.6.1
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.33
libelf	0.193
libexpat	2.7.0
libffi	3.4.8
libgcc	0
libglib	2.84.3
libinih	60
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.9
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.14
libpcre	10.44
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.14
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.15
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
xfsprogs	6.15.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 10.3.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.2746.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.4
aws-otel-collector	0.43.3	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.7.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.27	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.4	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.12	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.7
ecr-credential-provider-1.32	1.32.4
ecr-credential-provider-1.33	1.33.1
ecr-credential-provider-1.34	1.34.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.14
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.15.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.13
kubernetes-1.31	1.31.9
kubernetes-1.32	1.32.5
kubernetes-1.33	1.33.1
kubernetes-1.34	1.34.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.0
libbpf	1.6.1
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.33
libelf	0.193
libexpat	2.7.0
libffi	3.4.8
libgcc	0
libglib	2.84.3
libinih	60
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.9
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.14
libpcre	10.44
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.14
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.15
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
systemd-257	257.7	9001-core-add-separate-timeout-for-system-shutdown.patch 9002-machine-id-setup-generate-stable-ID-under-VM.patch 9003-mount-setup-apply-noexec-to-more-mounts.patch 9004-mount-setup-mount-etc-with-specific-label.patch 9005-sysctl-do-not-set-rp_filter-via-wildcard.patch 9006-sysusers-set-root-shell-to-sbin-nologin.patch 9007-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9008-core-mount-increase-mount-rate-limit-burst-to-25.patch 9009-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9010-allow-lookups-of-local-domains-using-unicast-DNS.patch 9011-dissect-image-disable-openssl-support.patch 9012-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
xfsprogs	6.15.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 10.4.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.2746.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.4
aws-otel-collector	0.43.3	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.7.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.27	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.4	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.12	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.7
ecr-credential-provider-1.32	1.32.4
ecr-credential-provider-1.33	1.33.1
ecr-credential-provider-1.34	1.34.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.14
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.15.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.13
kubernetes-1.31	1.31.9
kubernetes-1.32	1.32.5
kubernetes-1.33	1.33.1
kubernetes-1.34	1.34.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.0
libbpf	1.6.1
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.33
libelf	0.193
libexpat	2.7.0
libffi	3.4.8
libgcc	0
libglib	2.84.3
libinih	60
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.9
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.14
libpcre	10.44
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.14
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.15
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
systemd-257	257.7	9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
xfsprogs	6.15.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 10.6.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.2746.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.5
aws-otel-collector	0.43.3	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.7.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.28	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.4	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.12	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.7
ecr-credential-provider-1.32	1.32.4
ecr-credential-provider-1.33	1.33.1
ecr-credential-provider-1.34	1.34.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.14
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.15.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.12
kubernetes-1.32	1.32.8
kubernetes-1.33	1.33.4
kubernetes-1.34	1.34.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.0
libbpf	1.6.1
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.33
libelf	0.193
libexpat	2.7.2
libffi	3.4.8
libgcc	0
libglib	2.84.3
libinih	60
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.9
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.14
libpcre	10.44
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.14
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.15
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
systemd-257	257.7	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
xfsprogs	6.15.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 10.6.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.2746.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.5
aws-otel-collector	0.43.3	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.7.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.28	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.4	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.12	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.7
ecr-credential-provider-1.32	1.32.4
ecr-credential-provider-1.33	1.33.1
ecr-credential-provider-1.34	1.34.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.14
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.15.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.12
kubernetes-1.32	1.32.8
kubernetes-1.33	1.33.4
kubernetes-1.34	1.34.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.0
libbpf	1.6.1
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.33
libelf	0.193
libexpat	2.7.2
libffi	3.4.8
libgcc	0
libglib	2.84.3
libinih	60
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.9
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.14
libpcre	10.44
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.14
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.15
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
systemd-257	257.7	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
xfsprogs	6.15.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 10.9.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3185.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.8
aws-otel-collector	0.43.3	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.7.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.28	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.4	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-Ensure-errContentRangeIgnored-error-when-range-get-r.patch
coreutils	9.7
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.2
early-boot-config	0.1
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.7
ecr-credential-provider-1.32	1.32.4
ecr-credential-provider-1.33	1.33.1
ecr-credential-provider-1.34	1.34.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
iproute	6.16.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.31
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.12
kubernetes-1.32	1.32.8
kubernetes-1.33	1.33.4
kubernetes-1.34	1.34.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.8.1	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdevmapper	2.03.35
libelf	0.193
libexpat	2.7.2
libffi	3.5.2
libgcc	0
libglib	2.86.0
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.0
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch 0005-Add-clock_gettime-to-allowed-syscalls.patch
libnvme	1.15
libpcre	10.46
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.5
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.15	0001-plugins-amzn-Add-stats-support-for-EC2-local-storage.patch
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.3	readline-8.3-shlib.patch
release	0
runc	1.2.7	1002-openat2-increase-retry-count-to-128.patch
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.16
systemd-252	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-serialize-don-t-allocate-1M-on-the-stack-just-like-t.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.7	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.2
xfsprogs	6.16.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 11.0.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3185.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.8
aws-otel-collector	0.45.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.1
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.7
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.29	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.7	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.0	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.0	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.2
early-boot-config	0.1
ecr-credential-helper	0.10.1
ecr-credential-provider-1.28	1.28.11	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.9	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.16.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.28	1.28.15	1001-cmd-kubelet-fix-overriding-default-KubeletConfig-fie.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.13
kubernetes-1.32	1.32.9
kubernetes-1.33	1.33.5
kubernetes-1.34	1.34.1
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.8.1	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.35
libelf	0.193
libexpat	2.7.3
libffi	3.5.2
libgcc	0
libglib	2.86.0
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.0
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch 0005-Add-clock_gettime-to-allowed-syscalls.patch
libnvme	1.15
libpcre	10.46
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.5
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.3
notation	1.3.2
notation-image-verifier	0.1.0
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.15	0001-plugins-amzn-Add-stats-support-for-EC2-local-storage.patch
open-vm-tools	13.0.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	57
readline	8.3	readline-8.3-shlib.patch
release	0
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.11.1	1001-remove-image-if-rebase-or-initial-fetch-fails.patch 1002-move-some-parallelpull-integration-to-helper-funcs.patch 1003-hard-fail-on-config-parsing-errors.patch
static-pods	0.1
strace	6.16
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.2
xfsprogs	6.16.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 12.0.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3270.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.8
aws-otel-collector	0.45.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.1
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.7.1
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.29	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.7	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.9
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.0	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.0	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.2
early-boot-config	0.1
ecr-credential-helper	0.10.1
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.9
kubernetes-1.33	1.33.5
kubernetes-1.34	1.34.2
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.8.1	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.37
libdrm	2.4.129
libelf	0.194
libexpat	2.7.3
libffi	3.5.2
libgcc	0
libglib	2.86.2
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch 0005-Add-clock_gettime-to-allowed-syscalls.patch
libnvme	1.15
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.5
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
notation-image-verifier	0.1.0
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.15	0001-plugins-amzn-Add-stats-support-for-EC2-local-storage.patch
open-vm-tools	13.0.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-k8s-device-plugin	1.31.0.8
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.12.0
static-pods	0.1
strace	6.17
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.2
xfsprogs	6.16.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 12.2.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3270.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.10
aws-otel-collector	0.45.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.2
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.9.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.30	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.7	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.9
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.0	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.0	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.2
early-boot-config	0.1
ecr-credential-helper	0.10.1
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.1
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.11
kubernetes-1.33	1.33.7
kubernetes-1.34	1.34.3
kubernetes-1.35	1.35.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.76	9001-dont-test-during-install.patch
libcryptsetup	2.8.1	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.37
libdrm	2.4.129
libelf	0.194
libexpat	2.7.3
libffi	3.5.2
libgcc	0
libglib	2.86.2
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch 0005-Add-clock_gettime-to-allowed-syscalls.patch
libnvme	1.15
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.3	0001-build-do-not-build-examples.patch
libxcrypt	4.4.38
libz	2.2.5
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.7	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
notation-image-verifier	0.1.0
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3
nvme-cli	2.15	0001-plugins-amzn-Add-stats-support-for-EC2-local-storage.patch
open-vm-tools	13.0.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-container-toolkit	1.2.0
rocm-k8s-device-plugin	1.31.0.9
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.12.0
static-pods	0.1
strace	6.17
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.2
xfsprogs	6.16.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 12.3.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3270.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.10
aws-otel-collector	0.45.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.2
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.9.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.30	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.0	2.0.7	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
containerd-2.1	2.1.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-bump-google-golang-org-grpc.patch
coreutils	9.9
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.4	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.4	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.3
early-boot-config	0.1
ecr-credential-helper	0.11.0
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.3
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.11
kubernetes-1.33	1.33.7
kubernetes-1.34	1.34.3
kubernetes-1.35	1.35.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.77	9001-dont-test-during-install.patch
libcryptsetup	2.8.1	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.37
libdrm	2.4.129
libelf	0.194
libexpat	2.7.3
libffi	3.5.2
libgcc	0
libglib	2.86.2
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.11.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch 0005-Add-clock_gettime-to-allowed-syscalls.patch
libnvme	1.16
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.5	0001-build-do-not-build-examples.patch
libxcrypt	4.5.2
libz	2.2.5
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.8	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.4	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
notation-image-verifier	0.1.0
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3	0001-Update-MPS-roots-for-immutable-host-OS.patch
nvme-cli	2.16
open-vm-tools	13.0.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-container-toolkit	1.2.0
rocm-k8s-device-plugin	1.31.0.9
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.12.0
static-pods	0.1
strace	6.17
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.2
xfsprogs	6.17.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 13.0.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2026.01.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3598.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.10
aws-otel-collector	0.47.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.2
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.9.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.30	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.1	2.1.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-bump-google-golang-org-grpc.patch
coreutils	9.9
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.4	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.4	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.3
early-boot-config	0.1
ecr-credential-helper	0.11.0
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.101.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 0007-fix-ecr-fips-endpoint-conflict.patch
ecs-gpu-init	0
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.3
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.11
kubernetes-1.33	1.33.7
kubernetes-1.34	1.34.3
kubernetes-1.35	1.35.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.77	9001-dont-test-during-install.patch
libcryptsetup	2.8.4	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.38
libdrm	2.4.129
libelf	0.194
libffi	3.5.2
libgcc	0
libglib	2.86.3
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.6	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.12.0
libnvidia-container	1.17.8	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch 0005-Add-clock_gettime-to-allowed-syscalls.patch
libnvme	1.16
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.5	0001-build-do-not-build-examples.patch
libxcrypt	4.5.2
libz	2.3.3
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.8	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.5	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
notation-image-verifier	0.1.0
nvidia-container-toolkit	1.17.8
nvidia-k8s-device-plugin	0.17.3	0001-Update-MPS-roots-for-immutable-host-OS.patch
nvme-cli	2.16
open-vm-tools	13.0.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-container-toolkit	1.2.0
rocm-k8s-device-plugin	1.31.0.9
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.12.0
static-pods	0.1
strace	6.18
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.3
xfsprogs	6.18.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 13.1.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2026.01.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3598.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.10
aws-otel-collector	0.47.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.2
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.9.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.30	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.1	2.1.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-bump-google-golang-org-grpc.patch 1003-transfer-service-fallback-to-credentials.toml-for-re.patch 1004-ctr-default-hosts-dir-to-etc-containerd-certs.d.patch
coreutils	9.9
cri-tools	1.35.0
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.4	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.4	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.3
early-boot-config	0.1
ecr-credential-helper	0.11.0
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.101.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 0007-fix-ecr-fips-endpoint-conflict.patch
ecs-gpu-init	0
erofs-utils	1.8.10	0001-build-disable-AC_CANONICAL_TARGET.patch
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.3
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.11
kubernetes-1.33	1.33.7
kubernetes-1.34	1.34.3
kubernetes-1.35	1.35.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.77	9001-dont-test-during-install.patch
libcryptsetup	2.8.4	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.38
libdrm	2.4.129
libelf	0.194
libffi	3.5.2
libgcc	0
libglib	2.86.3
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.6	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.12.0
libnvidia-container	1.18.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.16
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.5	0001-build-do-not-build-examples.patch
libxcrypt	4.5.2
libz	2.3.3
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.8	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.5	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
nvidia-container-toolkit	1.18.2
nvidia-k8s-device-plugin	0.18.2	0001-Update-MPS-roots-for-immutable-host-OS.patch 1001-Ensure-that-generated-CDI-specs-do-not-contain-enabl.patch
nvme-cli	2.16
open-vm-tools	13.0.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
perf	6.18.10
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-container-toolkit	1.2.0
rocm-k8s-device-plugin	1.31.0.9
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.12.0
static-pods	0.1
strace	6.18
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.3
xfsprogs	6.18.0	0001-mkfs-source-defaults-from-config-file.patch

Core Kit packages 13.3.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2026.03.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3598.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.10
aws-otel-collector	0.47.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.3
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.9.0
conntrack-tools	1.4.9	0001-disable-RPC-helper.patch
containerd-1.7	1.7.30	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.1	2.1.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-bump-google-golang-org-grpc.patch 1003-transfer-service-fallback-to-credentials.toml-for-re.patch 1004-ctr-default-hosts-dir-to-etc-containerd-certs.d.patch
coreutils	9.1
cri-tools	1.35.0
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.4	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.4	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.3
early-boot-config	0.1
ecr-credential-helper	0.12.0
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.101.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 0007-fix-ecr-fips-endpoint-conflict.patch
ecs-gpu-init	0
erofs-utils	1.8.10	0001-build-disable-AC_CANONICAL_TARGET.patch
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.43	0001-Replace-advisories-directory-with-file-ADVISORIES.patch 0002-NEWS-add-new-section-2.43.1.patch 0003-Fix-ldbl-128ibm-ceill-floorl-roundl-and-truncl-zero-.patch 0004-po-Incorporate-translatins-nl-updated-ar-new.patch 0005-Don-t-include-bits-openat2.h-directly-bug-33848.patch 0006-nss-Introduce-dedicated-struct-nss_database_for_fork.patch 0007-Linux-In-getlogin_r-use-utmp-fallback-only-for-speci.patch 0008-nss-Missing-checks-in-__nss_configure_lookup-__nss_d.patch 0009-debug-Fix-build-with-enable-fortify-source-1-BZ-3390.patch 0010-Add-BZ-33904-entry-to-NEWS.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.13.0
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.3
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.12
kubernetes-1.33	1.33.8
kubernetes-1.34	1.34.4
kubernetes-1.35	1.35.2
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.3
libcap	2.77	9001-dont-test-during-install.patch
libcryptsetup	2.8.4	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.38
libdrm	2.4.129
libelf	0.194	0001-fix-const-correctness-for-C23-compatibility-as-implemented-in-glibc-2.43.patch
libffi	3.5.2
libgcc	0
libglib	2.86.3
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.6	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.1
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.12.0
libnvidia-container	1.18.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.16
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.5	0001-build-do-not-build-examples.patch
libxcrypt	4.5.2	0001-fix-Werror-discarded-qualifiers.patch
libz	2.3.3
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.8	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.5	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
nvidia-container-toolkit	1.18.2	0001-discover-reduce-missing-resource-warnings-to-debug-l.patch
nvidia-k8s-device-plugin	0.18.2	0001-Update-MPS-roots-for-immutable-host-OS.patch 1001-Ensure-that-generated-CDI-specs-do-not-contain-enabl.patch
nvme-cli	2.16
open-vm-tools	13.0.10	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch 0004-fix-initialization-discards-const-qualifier-from-poi.patch 0005-glib_stubs-avoid-GLib-g_free-macro-redefinition-erro.patch
os	0
pciutils	3.14.0
perf	6.18.10
pigz	2.8
policycoreutils	3.8.1
procps	4.0.6	1001-fix-const-correctness-for-C23-compatibility-as-implemented-in-glibc-2.43.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-container-toolkit	1.2.0
rocm-k8s-device-plugin	1.31.0.9
rottweiler	0.1.0
runc	1.3.4
selinux-policy	0
soci-snapshotter	0.12.1
static-pods	0.1
strace	6.18
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.3
xfsprogs	6.18.0	0001-mkfs-source-defaults-from-config-file.patch

Documentation on Bottlerocket

Concepts

Concepts

Prerequisite: cert-manager

Note

Installing cert-manager using kubectl

Installing cert-manager using helm

Install Brupop

Install with helm

Operate & Observe

Adhoc Query

Setup

Note

Define your environment

Operate & Observe

ECS Updater logs in the console

Configure Brupop

Required Configuration

Label nodes

Warning

Troubleshoot

Debugging information

API Server deployment logs

Agent logs

Troubleshoot

Common Issues

Bottlerocket instances start with an old version of Bottlerocket

Uninstall

1.13.0

1.13.1

1.13.2

1.13.3

1.14.0

1.14.1

1.14.2

1.14.3

1.15.0

1.15.1

1.15.1

1.16.0

1.16.0

1.16.1

1.16.1

1.17.0

1.17.0

1.18.0

1.18.0

1.19.0

1.19.0

1.19.1

1.19.1

1.19.2

1.19.2

1.19.3

1.19.3

1.19.4

1.19.4

1.19.5

1.19.5

1.20.0

1.20.0

1.20.1

1.20.1

1.20.2

1.20.2

1.20.3

1.20.3

1.20.4

1.20.4

1.20.5

1.20.5

1.21.0

1.21.0

1.21.1

1.21.1

1.22.0

1.22.0

1.23.0

1.23.0

1.24.0

Installing `cert-manager` using `kubectl`

Installing `cert-manager` using `helm`

Install with `helm`