You are viewing documentation for version 1.40.x. The most current version is 1.47.x.

Core Kit packages 8.2.0

Core Kit Package Versions in Bottlerocket Release 1.40.0

package	version	patches
amazon-ecs-cni-plugins	2024.09.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.1957.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.6.30
aws-otel-collector	0.43.1	0001-change-logger-and-extraconfig-file-paths.patch
aws-signing-helper	1.6.0
bash	5.2.37	bash-4.4-no-loadable-builtins.patch bash-5.0-patch-1.patch bash-5.0-patch-2.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.6.1
cni	1.2.3
cni-plugins	1.6.2
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.27	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch
containerd-2.0	2.0.5	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch
coreutils	9.7
dbus-broker	36	0001-c-utf8-disable-strict-aliasing-optimizations.patch
docker-cli	25.0.7	0001-non-tcp-host-header.patch
docker-engine	25.0.8	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-init	19.03.15
e2fsprogs	1.47.1
early-boot-config	0.1
ecr-credential-provider-1.26	1.26.14
ecr-credential-provider-1.27	1.27.10
ecr-credential-provider-1.28	1.28.11
ecr-credential-provider-1.29	1.29.8
ecr-credential-provider-1.30	1.30.8
ecr-credential-provider-1.31	1.31.5
ecr-credential-provider-1.32	1.32.2
ecr-credential-provider-1.33	1.33.0
ecs-agent	1.91.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
ethtool	6.11
filesystem	1
findutils	4.10.0
glibc	2.41	0001-Remove-advisories-from-release-branch.patch 0002-NEWS-start-new-section.patch 0003-math-Fix-log10p1f-internal-table-value-BZ-32626.patch 0004-math-Fix-sinhf-for-some-inputs-BZ-32627.patch 0005-nptl-Correct-stack-size-attribute-when-stack-grows-u.patch 0006-math-Fix-tanf-for-some-inputs-BZ-32630.patch 0007-assert-Add-test-for-CVE-2025-0395.patch 0008-Fix-tst-aarch64-pkey-to-handle-ENOSPC-as-not-support.patch 0009-x86-__HAVE_FLOAT128-Defined-to-0-for-Intel-SYCL-comp.patch 0010-math-Fix-unknown-type-name-__float128-for-clang-3.4-.patch 0011-math-Add-optimization-barrier-to-ensure-a1-u.d-is-no.patch 0012-RISC-V-Fix-IFUNC-resolver-cannot-access-gp-pointer.patch 0013-Aarch64-Improve-codegen-in-SVE-asinh.patch 0014-Aarch64-Improve-codegen-in-SVE-exp-and-users-and-upd.patch 0015-AArch64-Improve-codegen-for-SVE-erfcf.patch 0016-AArch64-Improve-codegen-for-SVE-pow.patch 0017-AArch64-Improve-codegen-for-SVE-powf.patch 0018-aarch64-Add-configure-checks-for-GCS-support.patch 0019-aarch64-Add-tests-for-Guarded-Control-Stack.patch 0020-aarch64-Add-GCS-tests-for-transitive-dependencies.patch 0021-aarch64-Add-GCS-tests-for-dlopen.patch 0022-aarch64-Add-GCS-test-with-signal-handler.patch 0023-math-Improve-layout-of-exp-exp10-data.patch 0024-AArch64-Add-SVE-memset.patch 0025-AArch64-Use-prefer_sve_ifuncs-for-SVE-memset.patch 0026-Pass-Wl-no-error-execstack-for-tests-where-Wl-z-exec.patch 0027-static-pie-Skip-the-empty-PT_LOAD-segment-at-offset-.patch 0028-elf-Check-if-__attribute__-aligned-65536-is-supporte.patch 0029-configure-Fix-spelling-of-Wl-no-error-execstack-opti.patch 0030-posix-Move-environ-helper-variables-next-to-environ-.patch 0031-math-Remove-an-extra-semicolon-in-math-function-decl.patch 0032-Linux-Remove-attribute-access-from-sched_getattr-bug.patch 0033-nptl-clear-the-whole-rseq-area-before-registration.patch 0034-nptl-PTHREAD_COND_INITIALIZER-compatibility-with-pre.patch 0035-nptl-Check-if-thread-is-already-terminated-in-sigcan.patch 0036-x86_64-Add-tanh-with-FMA.patch 0037-x86_64-Add-sinh-with-FMA.patch 0038-x86_64-Add-atanh-with-FMA.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.11
host-ctr	0
iproute	6.12.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20240905
kexec-tools	2.0.30
keyutils	1.6.1
kmod	33
kubernetes-1.26	1.26.15
kubernetes-1.27	1.27.16
kubernetes-1.28	1.28.15
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.11
kubernetes-1.31	1.31.7
kubernetes-1.32	1.32.3
kubernetes-1.33	1.33.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.0.3
libbpf	1.5.0
libcap	2.75	9001-dont-test-during-install.patch
libcrypto	3.0.0	0001-Cherry-pick-BORINGSSL_bcm_text_hash-Go-utility-2221.patch 0002-Cherry-pick-Fix-out-of-bound-OOB-input-read-in-AES-X.patch 0003-Cherry-pick-support-for-CMake-4.0-to-fips-2024-09-27.patch
libcryptsetup	2.7.5	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch
libdbus	1.16.2
libdevmapper	2.03.31
libelf	0.192
libexpat	2.7.0
libffi	3.4.7
libgcc	0
libglib	2.84.0
libinih	58
libisal	2.31.1	0001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libiw	29	wireless-tools-29-makefile.patch
libjson-c	0.18
libmnl	1.0.5
libncurses	6.5	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.2.8
libnl	3.11.0
libnvidia-container	1.17.4	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.13
libpcre	10.44
libpopt	1.19
libseccomp	2.5.5
libselinux	3.7
libsemanage	3.7	0001-remove-bzip2-dependency.patch
libsepol	3.7
libstd-rust	0
libtirpc	1.3.6
libtss2	4.1.3
liburcu	0.15.1
libxcrypt	4.4.38
libz	2.2.4
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.6	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.3	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nvidia-container-toolkit	1.17.6	0001-ldcache-fix-parsing-for-aarch64.patch
nvidia-k8s-device-plugin	0.17.1	0001-fix-ldcache-parsing-for-aarch64.patch
nvme-cli	2.13
open-vm-tools	12.5.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.13.0
pigz	2.8
policycoreutils	3.7
procps	4.0.5
rdma-core	57
readline	8.2.13	readline-8.2-shlib.patch
release	0
runc	1.2.6
selinux-policy	0
socat	1.8.0.3
soci-snapshotter	0.9.0
static-pods	0.1
strace	6.13
systemd	252.22	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.40.4
wicked	0.6.68	0001-dhcp6-refresh-ipv6-flags-on-staring-in-auto-mode.patch 1001-avoid-gcrypt-dependency.patch 1002-exclude-unused-components.patch 1003-ship-mkconst-and-schema-sources-for-runtime-use.patch 1004-adjust-safeguard-for-dhcp6-defer-timeout.patch 1005-client-validate-ethernet-namespace-node.patch 1006-server-discover-hardware-address-of-unconfigured-int.patch 1007-dhpc6-don-t-cancel-transmission-if-random-delay-happ.patch 1008-dhcp6-reduce-maximum-initial-solicitation-delay-to-1.patch
xfsprogs	6.9.0