Alibaba Cloud Linux 2 release notes

更新时间:
复制 MD 格式

Alibaba Cloud releases Alibaba Cloud Linux 2 images on a regular basis that include the latest operating system features, functionality, and security patches. This topic describes the latest versions of and updates to Alibaba Cloud Linux 2 images.

Background information

  • Unless otherwise stated, the released updates apply to all Alibaba Cloud regions where Elastic Compute Service (ECS) is available.

  • Most instance families support Alibaba Cloud Linux 2 images. However, some instance families can use only specific public images:

    • SCC images, whose image IDs contain scc, run only on the sccg7 and sccc7 instance families.

    • Trusted images, whose image IDs contain secured, run only on the ecs.g6t and ecs.c6t instance families.

2026

Image ID

Release date

Description

aliyun_2_1903_x64_20G_alibase_20260504.vhd

2024-05-04

This image update includes 42 packages. Key updates include:

  • aliyun_assist: upgraded from 2.2.3.601 to 2.2.4.1007

  • glibc packages: upgraded from 2.17-325.2.al7 to 2.17-326.1.al7.3

  • kernel packages: upgraded from 4.19.91-28.2.al7 to 4.19.91-28.5.al7

  • util-linux packages: upgraded from 2.23.2-65.1.al7.1 to 2.23.2-69.1.al7

  • python packages: upgraded from 2.7.5-92.1.al7 to 2.7.5-94.1.al7

For details, see the detailed change list.

aliyun_2_1903_x64_20G_dengbao_alibase_20260504.vhd

2024-05-04

aliyun_2_1903_x64_20G_qboot_alibase_20260506.vhd

2024-05-06

aliyun_2_1903_x64_20G_uefi_alibase_20260506.vhd

2024-05-06

Detailed change list

This update fixes 11 CVE vulnerabilities:

Severity

CVE IDs

High

CVE-2024-2961

CVE-2021-3177

CVE-2026-31431

Medium

CVE-2024-33599

CVE-2024-33600

CVE-2024-33602

CVE-2021-27645

CVE-2024-28085

CVE-2023-40217

CVE-2023-24329

Low

CVE-2024-33601

Breakdown by component:

  • glibc: 6 CVEs (CVE-2024-2961, CVE-2024-33599/33600/33601/33602, CVE-2021-27645)

  • kernel: 1 CVE (CVE-2026-31431)

  • util-linux: 1 CVE (CVE-2024-28085)

  • python: 3 CVEs (CVE-2023-40217, CVE-2023-24329, CVE-2021-3177)

2024

Image ID

Release date

Description

aliyun_2_1903_x64_20G_dengbao_alibase_20240705.vhd

2024-07-05

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit MLPS 2.0 Level 3 Edition image.

  • This image is hardened in accordance with China's Information Security Technology—Baseline for Classified Protection of Cybersecurity (GB/T 22239-2019). This image meets the following compliance requirements out of the box:

    • identity authentication

    • access control

    • security audit

    • intrusion prevention

    • malware prevention

    For more information, see Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image (version aliyun_2_1903_x64_20G_alibase_20240628.vhd).

  • Updated the kernel version to 4.19.91-28.2.al7.x86_64 (the output of the uname -r command).

aliyun_2_1903_x64_20G_uefi_alibase_20240628.vhd

2024-06-28

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit UEFI edition image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image (version aliyun_2_1903_x64_20G_alibase_20240628.vhd).

  • The kernel version is updated to 4.19.91-28.2.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_qboot_alibase_20240628.vhd

2024-06-28

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit Quick Start edition image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image (version aliyun_2_1903_x64_20G_alibase_20240628.vhd).

  • The kernel version is updated to 4.19.91-28.2.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20240628.vhd

2024-06-28

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-28.2.al7.x86_64. You can run the uname -r command to check the kernel version.

2023

Image ID

Release date

Description

aliyun_2_1903_x64_20G_alibase_20231221.vhd

2023-12-21

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.7.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20231008.vhd

2023-10-08

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.6.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20230731.vhd

2023-07-31

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.5.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20230704.vhd

2023-07-04

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.4.al7.x86_64. You can run the uname -r command to check the kernel version.

  • The following software packages are added to the image:

    • container-selinux

    • audit-libs-python

    • checkpolicy

    • libcgroup

    • libsemanage-python

    • policycoreutils-python

    • python-IPy

    • setools-libs

aliyun_2_1903_x64_20G_alibase_20230522.vhd

2023-05-22

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.3.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20230420.vhd

2023-04-20

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.1.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20230327.vhd

2023-03-27

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.1.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20230308.vhd

2023-03-08

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-27.1.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_dengbao_alibase_20230214.vhd

2023-02-14

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3) image.

  • This image is hardened according to China's GB/T 22239-2019 Information security technology—Baseline for classified protection of cybersecurity and meets the following MLPS compliance requirements by default:

    • identity authentication

    • access control

    • security audit

    • intrusion prevention

    • malicious code prevention

    For more information, see Alibaba Cloud Linux MLPS 2.0 Level 3 image.

  • This image is built from the Alibaba Cloud Linux 2.1903 LTS 64-bit base image version aliyun_2_1903_x64_20G_alibase_20230103.vhd.

  • Updated the kernel version to 4.19.91-27.al7.x86_64 (output of the uname -r command).

aliyun_2_1903_x64_20G_qboot_alibase_20230214.vhd

2023-02-14

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (Quick Start) image.

  • This image is built from the Alibaba Cloud Linux 2.1903 LTS 64-bit base image version aliyun_2_1903_x64_20G_alibase_20230103.vhd.

aliyun_2_1903_x64_20G_uefi_alibase_20230214.vhd

2023-02-14

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (UEFI) image.

  • This image is built from the Alibaba Cloud Linux 2.1903 LTS 64-bit base image version aliyun_2_1903_x64_20G_alibase_20230103.vhd.

  • The boot mode is changed to the Unified Extensible Firmware Interface (UEFI) mode and only the UEFI mode is supported.

aliyun_2_1903_x64_20G_alibase_20230103.vhd

2023-01-03

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software packages.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-27.al7.

    • Kernel bugs and common vulnerabilities and exposures (CVEs) are fixed.

    • synchronize_rcu_expedited is used in namespace_unlock to speed up the grace period of the read-copy update (RCU) mechanism, which increases the startup speed of 100 busybox containers by 19%.

    • The buffer size of the Trusted Platform Module driver is adjusted to prevent errors caused by insufficient memory during context switching.

    • The mq-deadline io scheduler is enabled by default.

    • The stability of the Non-Volatile Memory Express (NVMe), megaraid_sas, and mpt3sas drivers is improved.

    • Aero-series RAID controllers are fully supported.

    • The following features developed by Alibaba Cloud in house are supported:

      • The group identity feature can be dynamically enabled.

      • The zero page is used to fill the sparse file caused by a read page fault, which can reduce memory consumption during virtual machine boots.

2022

Image ID

Release date

Description

aliyun_2_1903_x64_20G_alibase_20221118.vhd

2022-11-18

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-26.6.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20221102.vhd

2022-11-02

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-26.6.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20220815.vhd

2022-08-15

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-26.1.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20220727.vhd

2022-07-27

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-26.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20220701.vhd

2022-07-01

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • The kernel version is updated to 4.19.91-26.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_alibase_20220525.vhd

2022-05-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-26.al7.

    • Kernel bugs and CVEs are fixed.

    • The following features developed by Alibaba Cloud in house are supported:

      • Group identity

      • Isolation enhancement for multi-tenant container networking

      • Reclaiming and monitoring of cold slab memory

      • Unified Kernel Fault Event Framework (UKFEF)

    • The Megaraid_sas driver is supported.

    • XDP and XDP sockets are supported by virtio-net.

    • The Registry Acceleration File System (RAFS) v6 format based on Enhanced Read-Only File System (EROFS) is supported.

    • Hot fixes support static keys.

    • SMR zoned devices are supported.

    • The ext4 delalloc buffer write performance is optimized.

    • Kernel unit testing framework (KUnit) is supported.

    • More than 4 GB of memory can be reserved for a kdump crash kernel on ARM architecture.

    • Arm CoreLink CMN-700 Coherent Mesh Network (CMN) Performance Monitoring Unit (PMN) is supported.

    • Shared Data Cache To Cache (C2C)/HITM Analyzer is supported.

aliyun_2_1903_x64_20G_qboot_alibase_20220525.vhd

2022-05-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit Quick Start image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image, version aliyun_2_1903_x64_20G_alibase_20220525.vhd.

aliyun_2_1903_x64_20G_dengbao_alibase_20220525.vhd

2022-05-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit MLPS 2.0 Level 3 Edition image.

  • This image is hardened according to GB/T22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity. This image meets the following MLPS compliance requirements out of the box:

    • identity authentication

    • access control

    • security audit

    • intrusion prevention

    • malicious code prevention

    For more information, see Alibaba Cloud Linux MLPS 2.0 Level 3 Edition image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image, version aliyun_2_1903_x64_20G_alibase_20220525.vhd.

  • Updated the kernel version to 4.19.91-26.al7.x86_64 (output of the uname -r command).

aliyun_2_1903_x64_20G_uefi_alibase_20220525.vhd

2022-05-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit UEFI image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image, version aliyun_2_1903_x64_20G_alibase_20220525.vhd.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

aliyun_2_1903_x64_20G_alibase_20220413.vhd

2022-04-13

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The image is compatible with the latest CentOS 7.9 version.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-25.8.al7.x86_64.

    • The CVE-2022-1016 and CVE-2022-27666 vulnerabilities are fixed.

aliyun_2_1903_x64_20G_alibase_20220408.vhd

2022-04-08

  • The kernel version is updated to 4.19.91-25.7.al7.x86_64.

  • The image is updated to include the latest software packages.

aliyun_2_1903_x64_20G_alibase_20220225.vhd

2022-02-25

Kernel updates:

  • The kernel version is updated to 4.19.91-25.6.al7.x86_64. You can run the uname -r command to check the kernel version.

  • The CVE-2022-0492, CVE-2021-4197, CVE-2022-0330, CVE-2022-22942, and CVE-2021-4155 vulnerabilities are fixed.

  • The Coordinated Universal Time (UTC) time standard is used by the real-time clock (RTC). For more information, see Linux time and time zones.

aliyun_2_1903_x64_20G_qboot_alibase_20220225.vhd

2022-02-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit Quick Start image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image, version aliyun_2_1903_x64_20G_alibase_20220225.vhd.

  • The UTC time standard is used by the RTC. For more information, see Linux time and time zones.

aliyun_2_1903_x64_20G_scc_alibase_20220225.vhd

2022-02-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit SCC Edition image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image, version aliyun_2_1903_x64_20G_alibase_20220225.vhd.

  • The boot mode is now exclusively UEFI.

  • Set the real-time clock (RTC) to Coordinated Universal Time (UTC). For more information, see Linux time and time zones.

aliyun_2_1903_x64_20G_uefi_alibase_20220225.vhd

2022-02-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit UEFI image.

  • This image is based on the Alibaba Cloud Linux 2.1903 LTS 64-bit base image, version aliyun_2_1903_x64_20G_alibase_20220225.vhd.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • The UTC time standard is used by the RTC. For more information, see Linux time and time zones.

2021

Image ID

Release date

Description

aliyun_2_1903_x64_20G_dengbao_alibase_20211220.vhd

2021-12-20

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3 Compliant) image.

  • This image is hardened according to China's GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity. It meets the following MLPS 2.0 compliance requirements without additional configuration:

    • Identity authentication

    • Access control

    • Security audit

    • Intrusion prevention

    • Malware protection

    For more information, see Alibaba Cloud Linux image that is compliant with MLPS 2.0 Level 3.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20211216.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The kernel is updated to version 4.19.91-25.1.al7.x86_64 (output of the uname -r command).

  • Available regions: China (Qingdao), China (Beijing), China (Hangzhou), China (Chengdu), and China (Hong Kong).

aliyun_2_1903_x64_20G_alibase_20211216.vhd

2021-12-16

Kernel updates:

  • The kernel version is updated to 4.19.91-25.1.al7.x86_64. You can run the uname -r command to check the kernel version.

  • Kernel bugs and CVEs are fixed.

  • Kata-container is supported by the ARM64 architecture.

  • In IO_uring, the scheduling policies and priorities of sqthread can be modified.

  • The cpupower feature used for the AMD Milan platform is added.

  • For virtio-fs:

    • Performance is optimized and improved.

    • The fuse DAX feature is supported.

    • The fuse CACHE_DIR/CACHE_SYMLINK feature is supported.

  • For crypto, the AVX and AVX2 instruction sets of the SM4 algorithm are optimized in the kernel.

  • The following features developed in-house by Alibaba Cloud are supported:

    • Rich container

    • Hugetext (Transparent huge pages are enabled for code segments.)

aliyun_2_1903_x64_20G_qboot_alibase_20211216.vhd

2021-12-16

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (Quick Start) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20211216.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

aliyun_2_1903_x64_20G_scc_alibase_20211216.vhd

2021-12-16

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (SCC Edition) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20211216.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • This image now exclusively supports the UEFI boot mode.

aliyun_2_1903_x64_20G_uefi_alibase_20211216.vhd

2021-12-16

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (UEFI) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20211216.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

aliyun_2_1903_x64_20G_scc_alibase_20210806.vhd

2021-08-06

  • Added the Alibaba Cloud Linux 2.1903 LTS 64-bit (SCC Edition) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210726.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • This image now exclusively supports the UEFI boot mode.

  • Available regions: China (Hangzhou), China (Shanghai), China (Beijing), and China (Shenzhen).

aliyun_2_1903_x64_20G_alibase_20210726.vhd

2021-07-26

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to the latest software versions. This image is compatible with CentOS 7.9 and includes security fixes for its software packages.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-24.1.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Critical security vulnerabilities are fixed.

    • PCI Express (PCIe) drivers are updated.

aliyun_2_1903_x64_20G_qboot_alibase_20210726.vhd

2021-07-26

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (Quick Start) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210726.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

aliyun_2_1903_x64_20G_dengbao_alibase_20210726.vhd

2021-07-26

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3 Compliant) image.

  • This image is hardened according to China's GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity. It meets the following MLPS 2.0 compliance requirements without additional configuration:

    • Identity authentication

    • Access control

    • Security audit

    • Intrusion prevention

    • Malware protection

    For more information, see Alibaba Cloud Linux image that is compliant with MLPS 2.0 Level 3.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210726.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The kernel is updated to version 4.19.91-24.1.al7.x86_64 (output of the uname -r command).

  • Available regions: China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), and China (Hong Kong).

aliyun_2_1903_x64_20G_uefi_alibase_20210726.vhd

2021-07-26

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (UEFI) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210726.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Supported regions: China (Hangzhou), China (Shanghai), China (Beijing), China (Shenzhen), and Singapore.

aliyun_2_1903_x64_20G_alibase_20210630.vhd

2021-06-30

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to the latest software versions. This image is compatible with CentOS 7.9 and includes security fixes for its software packages.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-24.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Kernel bugs and critical security vulnerabilities are fixed.

    • The x86 FSGSBASE feature is supported.

    • The AMD Milan architecture is supported.

    • The RDMA NET Namespace feature is supported.

    • The ZSR feature is supported.

    • The group identity feature is supported in scenarios in which CPU resources are isolated.

    • The ARM64 MPAM feature is supported.

    • The Hisilicon, Phytium, and Zhaoxin architectures are supported.

    • The information about whether Transparent Huge Page (THP) is enabled for processes is added to /proc/<pid>/status and /proc/<pid>/smap.

  • Supported regions: China (Hangzhou), China (Qingdao), China (Beijing), China (Chengdu), China (Hong Kong), and Singapore.

aliyun_2_1903_x64_20G_alibase_20210325.vhd

2021-03-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to the latest software versions. This image is compatible with CentOS 7.9 and includes security fixes for its software packages.

  • The CVE-2021-3156 sudo vulnerability in Linux is fixed. For more information, see Vulnerability announcement | Linux sudo permission vulnerability (CVE-2021-3156).

  • The default service for network configuration is switched to network-scripts.

  • The net.ipv4.tcp_max_tw_buckets value is increased.

  • The NVMe driver is added to initramfs.

  • The kdump service is enabled by default.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-23.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Kernel bugs and critical security vulnerabilities are fixed.

    • Intel Software Guard Extensions (SGX) is supported.

    • The network diagnostic tool Ping Trace is supported.

    • Cgroups are easier to create for scenarios in which multiple instances are deployed on a single server. This way, the amount of time required to create cgroups can be reduced.

    • Intel Ice Lake Machine Check Architecture (MCA) is supported.

aliyun_2_1903_x64_20G_qboot_alibase_20210325.vhd

2021-03-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (Quick Start) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210325.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • Supported regions: China (Hangzhou), China (Beijing), China (Zhangjiakou), China (Shenzhen), China (Hong Kong), Singapore, Malaysia (Kuala Lumpur), and US (Virginia).

aliyun_2_1903_x64_20G_dengbao_alibase_20210325.vhd

2021-03-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3 Compliant) image.

  • This image is hardened according to China's GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity. It meets the following MLPS 2.0 compliance requirements without additional configuration:

    • Identity authentication

    • Access control

    • Security audit

    • Intrusion prevention

    • Malware protection

    For more information, see Alibaba Cloud Linux image that is compliant with MLPS 2.0 Level 3.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210325.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • Kernel version: 4.19.91-23.al7.x86_64 (output of the uname -r command).

  • Available regions: China (Hangzhou), China (Shanghai), China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), and China (Hong Kong).

aliyun_2_1903_x64_20G_uefi_alibase_20210325.vhd

2021-03-25

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (UEFI) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210325.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Supported regions: China (Beijing), China (Hangzhou), China (Shanghai), and China (Shenzhen).

aliyun_2_1903_x64_20G_secured_alibase_20210325.vhd

2021-03-25

  • Updated the Alibaba Cloud Linux 2.1903 64-bit (Trusted) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210325.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Kernel updates: The kernel version is updated to 4.19.91-23.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_qboot_alibase_20210218.vhd

2021-02-18

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (Quick Start) image.

  • The default service for network configuration is switched to network-scripts.

  • The CVE-2021-3156 sudo vulnerability in Linux is fixed. For more information, see Vulnerability announcement | Linux sudo permission vulnerability (CVE-2021-3156).

  • Supported regions: China (Hangzhou), China (Shenzhen), China (Beijing), China (Zhangjiakou), China (Hong Kong), Singapore, Malaysia (Kuala Lumpur), and US (Virginia).

aliyun_2_1903_x64_20G_dengbao_alibase_20210218.vhd

2021-02-18

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3 Compliant) image.

  • This image is hardened according to China's GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity. It meets the following MLPS 2.0 compliance requirements without additional configuration:

    • Identity authentication

    • Access control

    • Security audit

    • Intrusion prevention

    • Malware protection

    For more information, see Alibaba Cloud Linux image that is compliant with MLPS 2.0 Level 3.

  • Switched the default network configuration service to network-scripts.

  • Fixed the CVE-2021-3156 vulnerability, also known as the Linux sudo privilege escalation vulnerability. For more information, see Security Bulletin | Linux sudo privilege escalation vulnerability (CVE-2021-3156).

  • Kernel version: 4.19.91-22.2.al7.x86_64 (output of the uname -r command).

  • Available regions: China (Hangzhou), China (Shanghai), China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), and China (Hong Kong).

aliyun_2_1903_x64_20G_secured_alibase_20210218.vhd

2021-02-18

  • Updated the Alibaba Cloud Linux 2.1903 64-bit (Trusted) image.

  • The default service for network configuration is switched to network-scripts.

  • The CVE-2021-3156 sudo vulnerability in Linux is fixed. For more information, see Vulnerability announcement | Linux sudo permission vulnerability (CVE-2021-3156).

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Kernel updates: The kernel version is updated to 4.19.91-22.2.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_uefi_alibase_20210218.vhd

2021-02-18

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (UEFI) image to the latest software versions.

  • The default service for network configuration is switched to network-scripts.

  • The CVE-2021-3156 sudo vulnerability in Linux is fixed. For more information, see Vulnerability announcement | Linux sudo permission vulnerability (CVE-2021-3156).

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

aliyun_2_1903_x64_20G_alibase_20210120.vhd

2021-01-20

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to the latest software versions. This image is compatible with CentOS 7.9 and includes security fixes for its software packages.

  • The update-motd service is added and enabled by default.

  • The rhel-loadmodules service is enabled by default.

  • The vring_force_dma_api startup parameter is added.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-22.2.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Kernel bugs and critical security vulnerabilities are fixed.

    • The kernel file system is updated to the latest Ext4 file system from the Linux community to gain enhanced stability.

    • RAID is supported by default.

    • The Dragonfly Enclaves feature is supported.

    • The performance of Intel Ice Lake PMU Topdown can be debugged.

    • The read capability of io_uring buffer is optimized.

    • blk-throttle is optimized.

    • The Chinese cryptographic algorithm SM2 and the standard X509-formatted certificate that uses the SM2-with-SM3 Chinese cryptographic algorithm are supported.

    • blk-mq batch requests are supported.

    • The PCIe Error recover feature is supported.

    • Swap is optimized to improve the memory overselling stability.

    • The container enhancement technology is supported.

    • The CPU burst feature is supported. For more information, see Enable the CPU burst feature for cgroup v1.

aliyun_2_1903_x64_20G_qboot_alibase_20210120.vhd

2021-01-20

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (Quick Start) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210120.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • Supported regions: China (Hangzhou), China (Shenzhen), China (Beijing), China (Zhangjiakou), China (Hong Kong), Singapore, Malaysia (Kuala Lumpur), and US (Virginia).

aliyun_2_1903_x64_20G_dengbao_alibase_20210120.vhd

2021-01-20

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3 Compliant) image.

  • This image is hardened according to China's GB/T 22239-2019 Information Security Technology—Baseline for Classified Protection of Cybersecurity. It meets the following MLPS 2.0 compliance requirements without additional configuration:

    • Identity authentication

    • Access control

    • Security audit

    • Intrusion prevention

    • Malware protection

    For more information, see Alibaba Cloud Linux image that is compliant with MLPS 2.0 Level 3.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210120.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • Kernel version: 4.19.91-22.2.al7.x86_64 (output of the uname -r command).

  • Available regions: China (Hangzhou), China (Shanghai), China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), and China (Hong Kong).

aliyun_2_1903_x64_20G_secured_alibase_20210120.vhd

2021-01-20

  • Updated the Alibaba Cloud Linux 2.1903 64-bit (Trusted) image.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210120.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Kernel updates: The kernel version is updated to 4.19.91-22.2.al7.x86_64. You can run the uname -r command to check the kernel version.

aliyun_2_1903_x64_20G_uefi_alibase_20210120.vhd

2021-01-20

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit (UEFI) image to the latest software versions.

  • This image is based on the aliyun_2_1903_x64_20G_alibase_20210120.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

2020

Image ID

Release date

Description

aliyun_2_1903_x64_20G_dengbao_alibase_20200925.vhd

2020-09-25

  • Added the Alibaba Cloud Linux 2.1903 LTS 64-bit (MLPS 2.0 Level 3 Compliant) image.

  • This image is hardened according to GB/T22239-2019 Information Security Technology—Baseline for Multi-Level Protection Scheme. It meets the following MLPS compliance requirements out of the box:

    • identity authentication

    • access control

    • security audit

    • intrusion prevention

    • malware protection

    For more information, see Alibaba Cloud Linux MLPS 2.0 Level 3 Compliant image.

  • This image is built on the aliyun_2_1903_x64_20G_alibase_20200904.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • Kernel version: 4.19.91-22.2.al7.x86_64 (from the uname -r command).

  • Supported regions: China (Hangzhou), China (Shanghai), China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu), and China (Hong Kong).

aliyun_2_1903_x64_20G_alibase_20200904.vhd

2020-09-04

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to include the latest software versions. The image is compatible with the latest CentOS 7.8 version and includes fixes for software security vulnerabilities.

  • Aliyun Linux release 7.2 LTS (Hunting Beagle) in /etc/redhat-release is replaced by Alibaba Cloud Linux (Aliyun Linux) release 2.1903 LTS (Hunting Beagle).

  • The image type information in /etc/image-id is optimized.

  • The tuned service is enabled by default.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-21.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Kernel bugs and security vulnerabilities are fixed.

    • The io_uring bug is fixed and new features are added.

    • THP fork optimization is added to accelerate the creation of memory-intensive processes.

    • Secure operations on Apache Pass (AEP) devices are supported.

    • The TCP-RT feature developed by Alibaba Cloud is supported.

    • The virtio-mem feature is supported.

    • The PCIe Gen4 and Reliability, Availability, and Serviceability (RAS) feature, and the power management of Intel® Ice Lake processors are enhanced.

    • The Intel® Speed Select Technology is supported.

aliyun_2_1903_x64_20G_qboot_alibase_20200904.vhd

2020-09-04

  • Updated the Alibaba Cloud Linux 2.1903 64-bit Quick Start image.

  • This image is built on the aliyun_2_1903_x64_20G_alibase_20200904.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • Supported regions: China (Hangzhou), China (Shenzhen), China (Zhangjiakou), and China (Hong Kong).

aliyun_2_1903_x64_20G_secured_alibase_20200904.vhd

2020-09-04

  • Updated the Alibaba Cloud Linux 2.1903 64-bit Trusted image to include the latest software versions.

  • This image is built on the aliyun_2_1903_x64_20G_alibase_20200904.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Trusted features are added.

aliyun_2_1903_x64_20G_uefi_alibase_20200904.vhd

2020-09-04

  • Updated the Alibaba Cloud Linux 2.1903 64-bit AMD-compatible image to include the latest software versions.

  • This image is built on the aliyun_2_1903_x64_20G_alibase_20200904.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

aliyun_2_1903_x64_20G_secured_alibase_20200622.vhd

2020-06-22

  • Added the Alibaba Cloud Linux 2.1903 64-bit Trusted image.

  • This image is built on the aliyun_2_1903_x64_20G_alibase_20200529.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Trusted features are added.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-19.2.al7.x86_64. You can run the uname -r command to check the kernel version.

    • AMD I/O Virtualization Technology (IOMMU) is supported.

aliyun_2_1903_x64_20G_uefi_alibase_20200616.vhd

2020-06-16

  • Added the Alibaba Cloud Linux 2.1903 64-bit AMD-compatible image.

  • This image is built on the aliyun_2_1903_x64_20G_alibase_20200529.vhd version of the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The boot mode is changed to the UEFI mode and only the UEFI mode is supported.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-19.2.al7.x86_64. You can run the uname -r command to check the kernel version.

    • AMD IOMMU is supported.

aliyun_2_1903_x64_20G_alibase_20200529.vhd

2020-05-29

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to include the latest software versions. The image is compatible with the latest CentOS 7.8 version and includes fixes for software security vulnerabilities.

  • The /etc/image-id file that contains image information such as the image type is added.

  • The tuned service is disabled by default.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-19.1.al7.x86_64. You can run the uname -r command to check the kernel version.

    • The kernel interfaces supported by the Alibaba Cloud kernel for collecting scheduling and memory Quality of Service (QoS) metrics are open sourced. These interfaces can be used to perform fine-grained monitoring of Service Level Indicators (SLIs) related to scheduling and memory.

    • The kernel interfaces supported by the Alibaba Cloud kernel for controlling priorities of processes when a memcg is out of memory (OOM) are open sourced. These interfaces can be used to improve protection on important processes during system OOM.

    • AMD QoS is supported.

    • The virtio pmem driver is supported.

    • The free page reporting feature is supported to enhance the awareness of hypervisors about idle memory of a guest OS, and improve the management and utilization efficiency of physical memory resources.

    • Memory compaction is optimized to reduce memory fragmentation and improve system memory usage.

    • Kernel bugs and security vulnerabilities are fixed.

aliyun_2_1903_x64_20G_alibase_20200324.vhd

2020-03-24

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to include the latest software versions. The image is compatible with the latest CentOS 7.8 version and includes fixes for software security vulnerabilities.

  • The latest fixes for CVEs can be obtained by using YUM.

  • The LTS version of Alibaba Cloud Linux 2 is released and /etc/alinux-release is updated to Aliyun Linux release 2.1903 LTS (Hunting Beagle).

  • The tuned service is enabled by default.

  • Kernel updates:

    • The kernel version is updated to 4.19.91-18.al7.x86_64. You can run the uname -r command to check the kernel version.

    • NVMe devices are supported.

    • The THP feature is enabled by default to improve application performance.

    • io_uring is added.

    • Intel_idle and guest halt polling are enabled to improve the guest CPU performance.

    • ftrace syscalls is enabled to enhance the performance of the bpftrace tool.

    • Multiple Alibaba Cloud kernel optimizations and bug fixes that involve subsystems, such as schedulers, memory, file systems, and block layers, are open sourced.

    • Kernel security vulnerabilities are fixed.

aliyun_2_1903_x64_20G_alibase_20200221.vhd

2020-02-21

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image to include the latest software versions. The image is compatible with the latest CentOS 7.8 version and includes fixes for software security vulnerabilities.

  • IPv6 is enabled by default.

  • Kernel updates:

    • The kernel version is updated to 4.19.81-17.1.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Intel Cooper Lake processors and Ice Lake processors are supported.

    • The support for AMD and ARM 64-bit CPU architectures is enhanced.

    • Persistent memory is supported.

    • The blk-iocost feature is supported. This feature is based on the cost model and the weight-based throttling feature of blkio cgroup controllers. For more information, see Configure the blk-iocost weight-based throttling feature.

    • The Pressure Stall Information (PSI) feature that is implemented based on cgroup v1 interfaces is supported. For more information, see Enable the PSI feature for cgroup v1.

    • Multiple Alibaba Cloud kernel optimizations and bug fixes that involve subsystems, such as schedulers, memory, file systems, and block layers, are open sourced.

    • Kernel security vulnerabilities are fixed.

aliyun_2_1903_x64_20G_alibase_20200114.qboot.vhd

2020-01-14

  • Added the Alibaba Cloud Linux 2.1903 64-bit Quick Start image.

  • Kernel updates:

    • The kernel version is updated to 4.19.81-17.al7.x86_64. You can run the uname -r command to check the kernel version.

    • Quick boot (Qboot) is supported.

  • Supported regions: China (Beijing), China (Hangzhou), and China (Hong Kong).

2019

Image ID

Release date

Description

aliyun_2_1903_64_20G_alibase_20190829.vhd

2019-08-29

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • Kernel updates:

    • The kernel version is updated to 4.19.57-15.1.al7.x86_64. You can run the uname -r command to check the kernel version.

    • The Spectre-V1 SWAPGS vulnerability is fixed.

    • Issues of DM bio splitting code are resolved.

    • The default TCP congestion control algorithm is set to CUBIC.

    • Network configurations are stored in the 10-eth0.network file.

aliyun_2_1903_64_20G_alibase_20190619.vhd

2019-06-19

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • Kernel updates:

    • The kernel version is updated to 4.19.43-13.2.al7.x86_64. You can run the uname -r command to check the kernel version.

    • The cgroup writeback feature that is implemented based on cgroup v1 interfaces is supported.

    • Policy-based routing is supported.

    • The INET_DIAG kernel configuration option is enabled to support the ss command from the iproute2 suite.

    • The configurable net.ipv4.tcp_tw_timeout kernel interface is supported.

    • The following network-related CVEs are fixed:

      • CVE-2019-11477

      • CVE-2019-11478

      • CVE-2019-11479

aliyun-2.1903-x64-20G-alibase-20190507.vhd

2019-05-07

  • Updated the Alibaba Cloud Linux 2.1903 LTS 64-bit base image with the latest software versions.

  • The issue of time synchronization latency on instance startup is resolved.

  • The kernel version is updated to 4.19.34-11.al7.x86_64. You can run the uname -r command to check the kernel version. Several issues are resolved.

aliyun-2.1903-x64-20G-alibase-20190327.vhd

2019-03-27

  • Released the Alibaba Cloud Linux 2.1903 LTS 64-bit base image.

  • The 4.19.24-9.al7.x86_64 kernel version is used in the base image. You can run the uname -r command to check the kernel version.

References