# AmazonLinux
出勤する頃には全部解決してたらいいなぁって思ってたけど、AmazonLinuxのパッチが12時間遅れで何ひとつ解決してなかった
October 22, 2026 at 9:34 AM
AmazonLinux2023 に、今般の PHP 脆弱性対応パッケージを追加する GitHub issue です。みなさん 👍️ を押してください、、
github.com/amazonlinux/...
[Package Update Request] - PHP CVE 2026-109618 and CVE-2026-109619 · Issue #1148 · amazonlinux/amazon-linux-2023
PHP is releasing a CRITICAL security update today (21.10.2026): https://www.php.net/archive/2026.php#2026-10-20-1 This update will fix two critical CVE: CVE 2026-109618 CVE-2026-109619 Both rated C...
github.com
October 21, 2026 at 3:05 PM
今回特にAmazonLinuxの対応が遅すぎたので乗り換えを検討してる
October 22, 2026 at 5:28 AM
If you ever need convincing to stay far the fuck away from Amazon Linux this thread and the complete void of any useful communication tells you everything you need to know github.com/amazonlinux/...
[Package Update Request] - PHP CVE 2026-109618 and CVE-2026-109619 · Issue #1148 · amazonlinux/amazon-linux-2023
PHP is releasing a CRITICAL security update today (21.10.2026): https://www.php.net/archive/2026.php#2026-10-20-1 This update will fix two critical CVE: CVE 2026-109618 CVE-2026-109619 Both rated C...
github.com
October 21, 2026 at 9:32 PM
待つのを諦めてパッチ当て始めてるな。
状況が報告されないから、n時間待てばいいのか、n日待てばいいのかもわからない。
ディストリビューションガチャ😅
github.com/amazonlinux/...
[Package Update Request] - PHP CVE 2026-109618 and CVE-2026-109619 · Issue #1148 · amazonlinux/amazon-linux-2023
PHP is releasing a CRITICAL security update today (21.10.2026): https://www.php.net/archive/2026.php#2026-10-20-1 This update will fix two critical CVE: CVE 2026-109618 CVE-2026-109619 Both rated C...
github.com
October 21, 2026 at 9:13 PM
AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days

https://github.com/amazonlinux/amazon-linux-2023/issues/1148
October 21, 2026 at 9:30 PM
AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days

#HackerNews

<a href="https://github.com/amazonlinux/amazon-linux-2023/issues/1148" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">https://github.com/amazonlinux/amazon-linux-2023/issues/1148
October 21, 2026 at 10:13 PM
AWS rates PHP RCE as Important so Amazon Linux 2023 patch may take 20 days | Discussion
[Package Update Request] - PHP CVE 2026-109618 and CVE-2026-109619 · Issue #1148 · amazonlinux/amazon-linux-2023
PHP is releasing a CRITICAL security update today (21.10.2026): https://www.php.net/archive/2026.php#2026-10-20-1 This update will fix two critical CVE: CVE 2026-109618 CVE-2026-109619 Both rated C...
github.com
October 21, 2026 at 10:00 PM
Amazon Linux とかいう今の時代の早さに付いて来れない信頼できない OS を使っている人は、もはや情弱と言ってよいと思うのだけれど。
github.com/amazonlinux/...
[Package Update Request] - PHP CVE 2026-109618 and CVE-2026-109619 · Issue #1148 · amazonlinux/amazon-linux-2023
PHP is releasing a CRITICAL security update today (21.10.2026): https://www.php.net/archive/2026.php#2026-10-20-1 This update will fix two critical CVE: CVE 2026-109618 CVE-2026-109619 Both rated C...
github.com
October 21, 2026 at 10:15 PM
PHP自体の発表が行われたとして、結局はディストリビューション側の対応待ちになってしまうのかな

github.com/amazonlinux/...
[Package Update Request] - PHP CVE 2026-109618 and CVE-2026-109619 · Issue #1148 · amazonlinux/amazon-linux-2023
PHP is releasing a CRITICAL security update today (21.10.2026): https://www.php.net/archive/2026.php#2026-10-20-1 This update will fix two critical CVE: CVE 2026-109618 CVE-2026-109619 Both rated C...
github.com
October 21, 2026 at 2:52 PM
Amazon Linux 2027 Preview Is Live #aws #devops #linux #cloud #sre #amazonlinux #ec2

This is a clip from our recent Ship It Weekly Podcast episode.
Visit https://shipitweekly.fm or link in bio to listen to the full episode!
September 16, 2026 at 4:53 PM
Two years ago, I created a #syslog_ng repo for #AmazonLinux 2023. As I received zero feedback, I left it alone until last week. The repo is now updated to the latest version of syslog-ng: 4.12.

www.syslog-ng.com/community/b/...

#LogManagement #AWS
www.syslog-ng.com
September 15, 2026 at 1:20 PM
Depends:
for Linux; dpkg or 'sudo apt' (if I am feeling lazy).
Apt-get still works but is 4 letters longer and tends to be a fair way to spot older "how-to".
For AmazonLinux; Yum mostly. For Azure: haha fuck that.
November 21, 2024 at 6:38 AM
One of my most popular #syslog_ng repo on #Fedora Copr is for #AmazonLinux 2023. However, I have never received any issue reports or feature requests. Is it something I should keep working on?

www.syslog-ng.com/community/b/...
Fedora 44, CentOS 7 and Amazon Linux syslog-ng questions
Fedora 44 was announced last week: syslog-ng 4.11 is part of it. While checking the Fedora Copr build service for Fedora 44, I realized that CentOS 7 and Amazon Linux 2023 packages are also there. I h...
www.syslog-ng.com
May 11, 2026 at 8:19 AM
Samuel Henrique: Bringing HTTP/3 to curl on Amazon Linux tl;dr Starting with curl 8.17.0-1.amzn2023.0.2 in Amazon Linux 2023, you can now use HTTP/3. dnf swap -y libcurl-minimal libcurl-full dnf sw...

Origin | Interest | Match
Samuel Henrique: Bringing HTTP/3 to curl on Amazon Linux
#### tl;dr Starting with **curl 8.17.0-1.amzn2023.0.2** in Amazon Linux 2023, you can now use HTTP/3. dnf swap -y libcurl-minimal libcurl-full dnf swap -y curl-minimal curl-full curl --http3-only https://example.com _(HTTP/3 is only enabled in the curl -full builds)_ Or, if you would like to try it out in a container: podman run amazonlinux:2023 /bin/sh -c 'dnf upgrade -y --releasever=latest && dnf swap -y libcurl-minimal libcurl-full && dnf swap -y curl-minimal curl-full && curl --http3-only https://example.com' For a list of test endpoints, you can refer to https://bagder.github.io/HTTP3-test/ # The Upgrade I Didn't Have to Make My teammate Steve Zarkos, who previously worked on upgrading OpenSSL in Amazon Linux from 3.0 to 3.2, spent the last few months on the complex task of bumping OpenSSL again, this time to 3.5. A bump like this only happens after extensive code analysis and testing, something that I didn't foresee happening when AL2023 was released but that was a notable request from users. Having enabled HTTP/3 on Debian, I was always keeping an eye on when I would get to do the same for Amazon Linux (mind you, I work at AWS, in the Amazon Linux org). The bump to OpenSSL 3.5 was the perfect opportunity to do that, for the first time Amazon Linux is shipping an OpenSSL version that is supported by ngtcp2 for HTTP/3 support. # Non-Intrusive Change In order to avoid any intrusive changes to existing users of AL2023, I've only enabled HTTP/3 in the full build of curl, not in the minimal one, this means there is no change for the minimal images. The way curl handles HTTP/3 today also does not lead to any behavior changes for those who have the full variants of curl installed, this is due to the fact that HTTP/3 is only used if the user explicitly asks for it with the flags `--http3` or `--http3-only`. # Side Quests Supporting HTTP/3 on curl also requires building it with ngtcp2 and nghttp3, two packages which were not shipped in Amazon Linux, besides, my team doesn't even own the curl package, we are a security team so our packages are the security related stuff such as OpenSSL and GnuTLS. Our main focus is the services behind Amazon Linux's vulnerability handling, not package maintenance. I worked with the owners of the curl package and got approvals on a plan to introduce the two new dependencies under their ownership and to enable the feature on curl, I appreciate their responsiveness. Amazon Linux 2023 is forked from Fedora, so while introducing ngtcp2, I also sent a couple of Pull Requests upstream to keep things in sync: [ngtcp2] package latest release 1.21.0 [ngtcp2] do not skip tests While building the curl package in Amazon Linux, I've noticed the build was taking 1 hour from start to end, and the culprit was something well known to me; tests. The curl test suite is quite extensive, with more than 1600 tests, all of that running without parallelization, running two times for each build of the package; once for the minimal build and again for the full build. I had previously enabled parallel tests in Debian back in 2024 but never got around to submit the same improvements to Amazon Linux or Fedora, this is now fixed. The build times for Amazon Linux came down to 10 minutes under the same host (previously 1 hour), and Fedora promptly merged my PR to do the same there: [curl] run tests in parallel All of this uncovered a test which is timing-dependent, meaning it's not supposed to be run with high levels of parallelism, so there goes another PR, this time to curl: Flag test 766 as timing-dependent#21155 What started as enabling a single feature turned into improvements that landed in curl, Fedora, and Amazon Linux alike. I did this in a mix of work and volunteer time, mostly during work hours (work email address used when this was the case), but I'm glad I put in the extra time for the sake of improving curl for everyone. # Release Notes Amazon Linux 2023 release notes for 2023.10.20260330
samueloph.dev
April 2, 2026 at 8:50 AM
paniakin-aws pushed linux paniakin-aws pushed to linux-4.14.y in amazonlinux/linux · March 17, 2026 00:00 2 commits to linux-4.14.y 72d5387 parisc: add missing export of __cmpxchg_u8() 7eb7c75 cry...

Origin | Interest | Match
Comparing c31e35278e...1e6347375d · amazonlinux/linux
Linux kernel stable tree mirror. Contribute to amazonlinux/linux development by creating an account on GitHub.
github.com
March 17, 2026 at 12:06 AM