Core Kit packages 17.2.0

Core Kit Package Versions in Bottlerocket Release 1.67.0

package	version	patches
amazon-ecs-cni-plugins	2026.05.0	0001-bottlerocket-default-filesystem-locations.patch
amazon-ssm-agent	3.3.5390.0	0001-agent-Add-config-to-make-shell-optional.patch
amazon-vpc-cni-plugins	1.3
aws-iam-authenticator	0.7.20
aws-otel-collector	0.49.0	0001-change-logger-and-extraconfig-file-paths.patch
aws-signer-notation-plugin	1.0.2292
aws-signing-helper	1.8.4
bash	5.3.15	bash-4.4-no-loadable-builtins.patch
binutils	2.44
chrony	4.8
cni	1.3.0
cni-plugins	1.9.1
conntrack-tools	1.4.9	0001-disable-RPC-helper.patch
containerd-1.7	1.7.36	1001-Use-Intel-ISA-L-s-igzip-if-available.patch 1002-Skip-exec.LookPath-if-a-specific-gzip-implementation.patch 1003-config-change-Plugins-type-from-toml.Tree-to-interfa.patch 1004-Allow-sections-of-Plugins-to-be-merged-and-not-overw.patch
containerd-2.2	2.2.9	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-transfer-service-fallback-to-credentials.toml-for-re.patch 1003-ctr-default-hosts-dir-to-etc-containerd-certs.d.patch
containerd-2.3	2.3.6	1001-Revert-Don-t-allow-io_uring-related-syscalls-in-the-.patch 1002-transfer-service-fallback-to-credentials.toml-for-re.patch 1003-ctr-default-hosts-dir-to-etc-containerd-certs.d.patch
coreutils	9.11
cri-tools	1.35.0
dbus-broker	37	0001-c-utf8-disable-strict-aliasing-optimizations.patch 0002-meson.build-remove-condition-to-build-the-journal-ca.patch
docker-cli-25	25.0.7	0001-non-tcp-host-header.patch
docker-cli-29	29.0.4	0001-non-tcp-host-header.patch
docker-engine-25	25.0.17	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch
docker-engine-29	29.0.4	0001-Change-default-capabilities-using-daemon-config.patch 0002-oci-inject-kmod-in-all-containers.patch 0004-Set-label-for-containerd-overlayfs-mounts.patch
docker-init	19.03.15
e2fsprogs	1.47.4
early-boot-config	0.1
ecr-credential-helper	0.12.0
ecr-credential-provider-1.31	1.31.9	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.32	1.32.8	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.33	1.33.4	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.34	1.34.3	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.35	1.35.2	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.36	1.36.1	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecr-credential-provider-1.37	1.37.0	0001-ecr-credential-provider-hardcode-ECR-endpoint-for-eu.patch
ecs-agent	1.106.1	0001-bottlerocket-default-filesystem-locations.patch 0002-bottlerocket-remove-unsupported-capabilities.patch 0003-bottlerocket-bind-introspection-to-localhost.patch 0004-bottlerocket-fix-procfs-path-on-host.patch 0005-bottlerocket-change-execcmd-directories-for-Bottlero.patch 0006-containermetadata-don-t-use-dataDirOnHost-for-metada.patch
ecs-gpu-init	0
erofs-utils	1.8.10	0001-build-disable-AC_CANONICAL_TARGET.patch
ethtool	7.1
filesystem	1
findutils	4.11.0
glibc	2.44	0001-advisories-replace-with-ADVISORIES-text-file.patch 0002-NEWS-start-2.44.1-section.patch 0003-hurd-Make-the-readlink-__fstatat64-references-option.patch 0004-hurd-fix-fork-s-longjmp-demangling-on-i386.patch 0005-math-Fix-sinh-worst-case-results-for-x-36.736801-BZ-.patch 0006-math-Fix-x86_64-tanh-_FloatN-aliases-binding-to-the-.patch 0007-io-fix-ftw-ABI-on-MIPS-n64.patch 0008-hurd-Fix-build-after-the-ftw-kernel_stat.h-inclusion.patch 0009-linux-Inline-syscall-cancellation-to-keep-wrapper-fr.patch 0010-Fix-gen-as-const-headers-races-with-the-parallel-sub.patch 0011-Makerules-Only-install-the-ABI-lib-names-header-from.patch 0012-Makefile-Only-print-the-test-summary-in-the-second-p.patch 0013-Makerules-Make-the-.dt-to-.d-conversion-safe-against.patch 0014-Makefile-Order-the-top-level-stamp-files-before-the-.patch 0015-arm-Order-the-rtld-link-after-libgcc-stubs.a.patch 0016-benchtests-Create-objdir-in-the-bench-.c-generation-.patch 0017-elf-test-handle-different-rootsbindir-in-tst-ldconfi.patch 0018-ldbl-opt-Fix-mlong-double-128-configure-test-for-Cla.patch 0019-powerpc-Fix-mlong-double-128-IBM-format-configure-te.patch 0020-stdio-common-run-AWK-in-the-C-locale-in-the-printf-f.patch 0021-stdio-common-avoid-repeated-regexp-matches-in-tst-pr.patch 0022-string-Speed-up-strcmp-test-data-initialization.patch 0023-string-Speed-up-strcasecmp-test-data-initialization.patch 0024-elf-Honour-skip_ifunc-for-cross-object-IFUNC-relocat.patch 0025-m68k-Fix-fmod-fmodf-infinite-recursion-BZ-34508.patch 0026-misc-Fix-out-of-bounds-array-write-in-tdelete-bug-34.patch 0027-m68k-remove-sysdeps-m68k-m680x0-fpu-w_fmod_compat.c-.patch 0028-posix-Remove-unnecessary-overflow-check-in-wordexp-B.patch 0029-stdlib-Fix-right-justification-in-strfmon-bug-34510-.patch 0030-iconvdata-SHIFT_JISX0213-decoding-lacks-pending-char.patch 0031-iconvdata-EUC_JISX0213-decoding-lacks-pending-charac.patch 0032-iconvdata-Test-case-for-bug-34556-bug-34568.patch 0033-alpha-Fix-stack-alignment-in-makecontext.patch 0034-alpha-add-the-denormal-trap-enable-bit-to-FE_NOMASK_.patch 0035-alpha-expect-test-float32x-float64-div-to-fail.patch 0036-Add-check-symbol-version.awk.patch 0037-powerpc-Fix-non-atomic-stack-pointer-update-in-forti.patch 0038-powerpc-Fix-preprocessor-conditional-in-soft-float-_.patch 0039-libio-Fix-CVE-2026-18374-heap-buffer-overflow-in-ccs.patch 0040-libio-Add-test-for-fopen-with-an-empty-ccs-value-BZ-.patch 0041-nptl-Skip-pretty-printer-tests-without-python3-BZ-34.patch 0042-elf-Do-not-load-cache-extensions-from-an-old-format-.patch 0043-io-drop-nonnull-attribute-for-fchmodat-faccessat-fch.patch 0044-x86-64-Link-tst-shstk-legacy-1-f-g-with-Wl-no-as-nee.patch 0045-Revert-io-drop-nonnull-attribute-for-fchmodat-facces.patch 0046-io-drop-nonnull-attribute-for-fchmodat-faccessat-fch.patch 0047-fcntl-drop-nonnull-attribute-for-openat-openat2-s-pa.patch 0048-resolv-Fix-assertion-failure-on-search-list-truncati.patch 9001-move-ldconfig-cache-to-ephemeral-storage.patch 9002-Revert-malloc-auto-enable-THP-on-aarch64.patch glibc-cs-path.patch HACK-only-build-and-install-localedef.patch
grep	3.12
host-ctr	0
hwloc	2.14.0
iproute	7.1.0	0001-skip-libelf-check.patch
iptables	1.8.13
iputils	20250605
kexec-tools	2.0.32
keyutils	1.6.3
kmod	34.2	0001-meson-add-support-for-static-builds.patch 0002-meson-create-pkgconfig-files-in-default-path.patch
kubernetes-1.31	1.31.14
kubernetes-1.32	1.32.13
kubernetes-1.33	1.33.13
kubernetes-1.34	1.34.9	0001-apiserver-drop-unused-go-proxyproto-require.patch
kubernetes-1.35	1.35.6
kubernetes-1.36	1.36.2
kubernetes-1.37	1.37.0
libacl	2.4.0
libaio	0.3.113
libattr	2.6.0
libaudit	4.2.1
libbpf	1.7.0
libcap	2.78	9001-dont-test-during-install.patch
libcryptsetup	2.8.8	0001-pbkdf-check-whether-FIPS-is-enabled-at-runtime.patch 0002-build-replace-openssl-with-libcrypto-in-pkgconfig.patch 0003-random-quiet-message-about-FIPS-mode.patch
libdevmapper	2.03.42
libdrm	2.4.129
libelf	0.196	0001-fix-const-correctness-for-C23-compatibility-as-implemented-in-glibc-2.43.patch 0002-backends-use-sys-uio.h-instead-of-linux-uio.h.patch
libffi	3.8.0
libgcc	0
libglib	2.90.0
libinih	62
libisal	2.32.1	1001-igzip-increase-stdin-and-stdout-pipe-sizes.patch
libjansson	2.14.1
libjson-c	0.18
libmnl	1.0.5
libncurses	6.6	ncurses-config.patch ncurses-libs.patch ncurses-urxvt.patch
libnetfilter_conntrack	1.1.1
libnetfilter_cthelper	1.0.1
libnetfilter_cttimeout	1.0.1
libnetfilter_queue	1.0.5
libnfnetlink	1.0.2
libnftnl	1.3.1
libnl	3.12.0
libnvidia-container	1.19.1	0001-use-shared-libtirpc.patch 0002-use-prefix-from-environment.patch 0003-keep-debug-symbols.patch 0004-makefile-avoid-ldconfig-when-cross-compiling.patch
libnvme	1.16
libpcre	10.49
libpopt	1.19
libseccomp	2.6.0
libselinux	3.8.1
libsemanage	3.8.1	0001-remove-bzip2-dependency.patch
libsepol	3.8.1
libstd-rust	0
libtirpc	1.3.7
libtss2	4.2.0
libudev	252.39
liburcu	0.15.6	0001-build-do-not-build-examples.patch
libxcrypt	4.5.2	0001-fix-Werror-discarded-qualifiers.patch
libz	2.3.3
libzstd	1.5.7
login	0.0.1
makedumpfile	1.7.9	0000-fix-strip-invocation-for-TARGET-env-variable.patch 0001-do-not-overlink-with-bzip2.patch
mdadm	4.6	0001-report-monitor-output-to-syslog.patch
netdog	0.1.1
nftables	1.1.6
notation	1.3.2
nvidia-container-toolkit	1.19.1	0001-discover-reduce-missing-resource-warnings-to-debug-l.patch 0002-add-additional-symlinks-flag.patch
nvidia-dra-driver-gpu	25.8.1
nvidia-k8s-device-plugin	0.19.3	0001-Update-MPS-roots-for-immutable-host-OS.patch 1001-Ensure-that-generated-CDI-specs-do-not-contain-enabl.patch 1002-Enable-library-path-compatibility-symlinks.patch 1003-vendor-add-CreateLibSymlinksHook.patch
nvme-cli	2.16
open-vm-tools	13.1.0	0001-no_cflags_werror.patch 0002-dont-force-cppflags.patch 0003-Update-shutdown-code-to-work-for-Bottlerocket.patch 0004-fix-initialization-discards-const-qualifier-from-poi.patch 0005-glib_stubs-avoid-GLib-g_free-macro-redefinition-erro.patch
os	0
pciutils	3.15.0
perf	6.18.10	0001-libperf-fix-parallel-build-race-with-header-install.patch
pigz	2.8
policycoreutils	3.8.1
procps	4.0.7	1001-fix-const-correctness-for-C23-compatibility-as-implemented-in-glibc-2.43.patch
readline	8.3	readline-8.3-shlib.patch
release	0
rottweiler	0.1.0
runc	1.3.6
selinux-policy	0
soci-snapshotter	0.16.1
static-pods	0.1
strace	7.1
systemd-252	252.39	1001-sd-netlink-make-calc_elapse-return-USEC_INFINITY-whe.patch 1002-sd-netlink-make-the-default-timeout-configurable-by-.patch 1003-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-use-absolute-path-for-var-run-symlink.patch 9002-core-add-separate-timeout-for-system-shutdown.patch 9003-machine-id-setup-generate-stable-ID-under-Xen-and-VM.patch 9004-units-mount-tmp-with-noexec.patch 9005-mount-setup-apply-noexec-to-more-mounts.patch 9006-mount-setup-mount-etc-with-specific-label.patch 9007-pkg-config-stop-hardcoding-prefix-to-usr.patch 9008-sysctl-do-not-set-rp_filter-via-wildcard.patch 9009-sysusers-set-root-shell-to-sbin-nologin.patch 9010-units-keep-modprobe-service-units-running.patch 9011-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9012-core-mount-increase-mount-rate-limit-burst-to-25.patch 9013-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9014-meson-make-gpt-auto-generator-selectable-at-build-ti.patch 9015-allow-lookups-of-local-domains-using-unicast-DNS.patch 9016-meson-always-set-HAVE_OPENSSL_OR_GCRYPT-to-false.patch 9017-dissect-image-disable-openssl-support.patch 9018-meson-replace-openssl-dependency-with-libcrypto.patch 9019-suppress-log-for-units-with-mode-0044.patch 9020-core-validate-input-cgroup-path-more-prudently.patch 9038-nspawn-normalize-pivot_root-paths.patch 9039-nspawn-apply-BindUser-Ephemeral-from-settings-fil.patch
systemd-257	257.13	1001-exec-util-make-missing-agents-a-gracefull-handled-issues.patch 9001-machine-id-setup-generate-stable-ID-under-VM.patch 9002-mount-setup-apply-noexec-to-more-mounts.patch 9003-mount-setup-mount-etc-with-specific-label.patch 9004-sysctl-do-not-set-rp_filter-via-wildcard.patch 9005-sysusers-set-root-shell-to-sbin-nologin.patch 9006-systemd-networkd-Conditionalize-hostnamed-timezoned-.patch 9007-sd-dhcp-lease-parse-multiple-domains-in-option-15.patch 9008-allow-lookups-of-local-domains-using-unicast-DNS.patch 9009-dissect-image-disable-openssl-support.patch 9010-meson-replace-openssl-dependency-with-libcrypto.patch 9011-suppress-log-for-units-with-mode-0044.patch 9012-openssl-util-build-without-ui.patch 9013-fix-openssl-aws-lc-divergence-in-data-types.patch 9014-remove-NID_sm2.patch 9015-disable-sb-sign.patch 9016-bootctl-disable-secure-boot-autoenroll.patch 9017-meson-set-DOPENSSL_NO_UI_CONSOLE-when-using-openssl.patch 9018-build-correct-sd-boot-EFI-arch-on-the-Bottlerocket-S.patch 9019-boot-remove-SMBIOS-Type-11-kernel-cmdline-extra-mech.patch 9020-boot-vmspawn-finish-removing-SMBIOS-cmdline-extra-bi.patch 9021-measure-figure-success-of-measurement-correctly.patch 9022-efivars-kill-SystemdOptions-efi-var-support.patch
tpm2-tools	5.8	0001-tpm2-tools-disable-SM2-and-SM3-checks.patch 0002-tpm2-tools-disable-tpm2_getekcertificate.patch
util-linux	2.42.2	0001-libblkid-keep-only-supported-partition-probers.patch
xfsprogs	7.1.1	0001-mkfs-source-defaults-from-config-file.patch