Core Kit packages 13.1.0

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
amazon-ecs-cni-plugins	2026.01.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.3598.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.10
aws-otel-collector	0.47.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.7.2
bash	5.3	bash-4.4-no-loadable-builtins.patch
binutils	2.43.1	0001-PR32560-stack-buffer-overflow-at-objdump-disassemble.patch
chrony	4.8
cni	1.3.0
cni-plugins	1.9.0
conntrack-tools	1.4.8	0001-disable-RPC-helper.patch
containerd-1.7	1.7.30	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.1	2.1.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-bump-google-golang-org-grpc.patch 1003-transfer-service-fallback-to-credentials.toml-for-re.patch 1004-ctr-default-hosts-dir-to-etc-containerd-certs.d.patch
coreutils	9.9
cri-tools	1.35.0
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.4	0001-non-tcp-host-header.patch
docker-engine-25	25.0.13	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.4	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.3
early-boot-config	0.1
ecr-credential-helper	0.11.0
ecr-credential-provider-1.29	1.29.8	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ecr-endpoint-for-eu.patch
ecr-credential-provider-1.30	1.30.10	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.5	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.2	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.1	0001-support-new-aws-partition-in-credential-provider.patch 0002-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.101.2	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch 0007-fix-ecr-fips-endpoint-conflict.patch
ecs-gpu-init	0
erofs-utils	1.8.10	0001-build-disable-AC_CANONICAL_TARGET.patch
ethtool	6.15
filesystem	1
findutils	4.10.0
glibc	2.42	0001-Replace-advisories-directory-with-pointer-file.patch 0002-NEWS-add-new-section.patch 0003-inet-fortified-fix-namespace-violation-bug-33227.patch 0004-stdlib-resolve-a-double-lock-init-issue-after-fork-B.patch 0005-elf-Extract-rtld_setup_phdr-function-from-dl_main.patch 0006-elf-Handle-ld.so-with-LOAD-segment-gaps-in-_dl_find_.patch 0007-nptl-Fix-SYSCALL_CANCEL-for-return-values-larger-tha.patch 0008-Delete-temporary-files-in-support_subprocess.patch 0009-tst-fopen-threaded.c-Delete-temporary-file.patch 0010-tst-freopen4-main.c-Call-support_capture_subprocess-.patch 0011-tst-env-setuid-Delete-LD_DEBUG_OUTPUT-output.patch 0012-Revert-tst-freopen4-main.c-Call-support_capture_subp.patch 0013-hurd-support-Fix-running-SGID-tests.patch 0014-malloc-Remove-redundant-NULL-check.patch 0015-malloc-Fix-MAX_TCACHE_SMALL_SIZE.patch 0016-malloc-Make-sure-tcache_key-is-odd-enough.patch 0017-malloc-Fix-checking-for-small-negative-values-of-tca.patch 0018-Use-TLS-initial-exec-model-for-__libc_tsd_CTYPE_-thr.patch 0019-i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch 0020-x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0021-x86-64-Add-GLIBC_ABI_DT_X86_64_PLT-BZ-33212.patch 0022-i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch 0023-AArch64-Fix-SVE-powf-routine-BZ-33299.patch 0024-libio-Define-AT_RENAME_-with-the-same-tokens-as-Linu.patch 0025-nss-Group-merge-does-not-react-to-ERANGE-during-merg.patch 0026-nptl-Fix-MADV_GUARD_INSTALL-logic-for-thread-without.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.12.2
iproute	6.18.0	0001-skip-libelf-check.patch
iptables	1.8.11
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.3
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.29	1.29.15
kubernetes-1.30	1.30.14
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.11
kubernetes-1.33	1.33.7
kubernetes-1.34	1.34.3
kubernetes-1.35	1.35.0
libacl	2.3.2
libaio	0.3.113
libattr	2.5.2
libaudit	4.1.2
libbpf	1.6.2
libcap	2.77	9001-dont-test-during-install.patch
libcryptsetup	2.8.4	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.38
libdrm	2.4.129
libelf	0.194
libffi	3.5.2
libgcc	0
libglib	2.86.3
libinih	62
libisal	2.31.1	0001-Address-compiler-warnings-on-ppc64le-and-s390x.patch 0002-Address-type-mismatch-warnings-on-aarch64.patch 1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.6	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.0
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.12.0
libnvidia-container	1.18.2	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.16
libpcre	10.47
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.1.3
libudev	252.39
liburcu	0.15.5	0001-build-do-not-build-examples.patch
libxcrypt	4.5.2
libz	2.3.3
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.8	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.5	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
nvidia-container-toolkit	1.18.2
nvidia-k8s-device-plugin	0.18.2	0001-Update-MPS-roots-for-immutable-host-OS.patch 1001-Ensure-that-generated-CDI-specs-do-not-contain-enabl.patch
nvme-cli	2.16
open-vm-tools	13.0.5	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch
os	0
pciutils	3.14.0
perf	6.18.10
pigz	2.8
policycoreutils	3.8.1
procps	4.0.5	0001-library-internal-expand-buffer-for-stat_fd.patch 1001-check-for-sys-pidfd.h.patch
rdma-core	60
readline	8.3	readline-8.3-shlib.patch
release	0
rocm-container-toolkit	1.2.0
rocm-k8s-device-plugin	1.31.0.9
rottweiler	0.1.0
runc	1.2.8	1001-rootfs-only-set-mode-for-tmpfs-mount.patch
selinux-policy	0
soci-snapshotter	0.12.0
static-pods	0.1
strace	6.18
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch
systemd-257	257.9	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch
tpm2-tools	5.7	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.41.3
xfsprogs	6.18.0	0001-mkfs-source-defaults-from-config-file.patch

Kernel Kit packages 5.0.1

Mon, 01 Jan 0001 00:00:00 +0000

package	version	patches
grub	2.06	0001-setup-Add-root-device-argument-to-grub-setup.patch 0002-gpt-start-new-GPT-module.patch 0003-gpt-rename-misnamed-header-location-fields.patch 0004-gpt-record-size-of-of-the-entries-table.patch 0005-gpt-consolidate-crc32-computation-code.patch 0006-gpt-add-new-repair-function-to-sync-up-primary-and-b.patch 0007-gpt-add-write-function-and-gptrepair-command.patch 0008-gpt-add-a-new-generic-GUID-type.patch 0009-gpt-new-gptprio.next-command-for-selecting-priority-.patch 0010-gpt-split-out-checksum-recomputation.patch 0011-gpt-move-gpt-guid-printing-function-to-common-librar.patch 0012-gpt-switch-partition-names-to-a-16-bit-type.patch 0013-tests-add-some-partitions-to-the-gpt-unit-test-data.patch 0014-gpt-add-search-by-partition-label-and-uuid-commands.patch 0015-gpt-clean-up-little-endian-crc32-computation.patch 0016-gpt-minor-cleanup.patch 0017-gpt-add-search-by-disk-uuid-command.patch 0018-gpt-do-not-use-disk-sizes-GRUB-will-reject-as-invali.patch 0019-gpt-add-verbose-debug-logging.patch 0020-gpt-improve-validation-of-GPT-headers.patch 0021-gpt-refuse-to-write-to-sector-0.patch 0022-gpt-properly-detect-and-repair-invalid-tables.patch 0023-gptrepair_test-fix-typo-in-cleanup-trap.patch 0024-gptprio_test-check-GPT-is-repaired-when-appropriate.patch 0025-gpt-fix-partition-table-indexing-and-validation.patch 0026-gpt-prefer-disk-size-from-header-over-firmware.patch 0027-gpt-add-helper-for-picking-a-valid-header.patch 0028-gptrepair-fix-status-checking.patch 0029-gpt-use-inline-functions-for-checking-status-bits.patch 0030-gpt-allow-repair-function-to-noop.patch 0031-gpt-do-not-use-an-enum-for-status-bit-values.patch 0032-gpt-check-header-and-entries-status-bits-together.patch 0033-gpt-be-more-careful-about-relocating-backup-header.patch 0034-gpt-selectively-update-fields-during-repair.patch 0035-gpt-always-revalidate-when-recomputing-checksums.patch 0036-gpt-include-backup-in-sync-check-in-revalidation.patch 0037-gpt-read-entries-table-at-the-same-time-as-the-heade.patch 0038-gpt-report-all-revalidation-errors.patch 0039-gpt-rename-and-update-documentation-for-grub_gpt_upd.patch 0040-gpt-write-backup-GPT-first-skip-if-inaccessible.patch 0041-gptprio-Use-Bottlerocket-boot-partition-type-GUID.patch 0042-util-mkimage-Bump-EFI-PE-header-size-to-accommodate-.patch 0043-util-mkimage-avoid-adding-section-table-entry-outsid.patch 0044-efi-return-virtual-size-of-section-found-by-grub_efi.patch 0045-mkimage-pgp-move-single-public-key-into-its-own-sect.patch 0046-Revert-sb-Add-fallback-to-EFI-LoadImage-if-shim_lock.patch 0047-Revert-UBUNTU-Move-verifiers-after-decompressors.patch 0048-Hard-code-BOOT_IMAGE-on-kernel-command-line.patch
kernel-6.1	6.1.161	0001-Revert-wireguard-device-enable-threaded-NAPI.patch 1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Revert-Revert-drm-fb_helper-improve-CONFIG_FB-depend.patch 1006-strscpy-write-destination-buffer-only-once.patch 1007-efi-libstub-don-t-measure-kernel-command-line-into-P.patch
kernel-6.12	6.12.68	0001-Revert-wireguard-device-enable-threaded-NAPI.patch 1001-Makefile-add-prepare-target-for-external-modules.patch 1002-Revert-kbuild-hide-tools-build-targets-from-external.patch 1003-initramfs-unlink-INITRAMFS_FORCE-from-CMDLINE_-EXTEN.patch 1004-af_unix-increase-default-max_dgram_qlen-to-512.patch 1005-Lustre-cast-unsigned-long-to-pointer.patch 1006-Select-prerequisites-for-gpu-drivers.patch 1007-strscpy-write-destination-buffer-only-once.patch 1008-efi-libstub-don-t-measure-kernel-command-line-into-P.patch
kmod-6.1-efa	2.17.3g
kmod-6.1-nvidia-r580	580.126.09	0001-makefile-allow-to-use-any-kernel-arch.patch
kmod-6.12-amdgpu	30.20.1
kmod-6.12-efa	2.17.3g
kmod-6.12-nvidia-r580	580.126.09	0001-makefile-allow-to-use-any-kernel-arch.patch
libkcapi	1.4.0
linux-firmware	20251111
microcode	0
nvidia-migmanager	0.1
nvlsm	2025.06.6
shim	16

1.56.0 Package Versions on Bottlerocket

Core Kit packages 13.1.0

Kernel Kit packages 5.0.1