AWS eks high security documentation change
Summary
Updated AMI version tables with new 2025.03.14 releases, upgraded containerd to v1.7.20 across multiple Kubernetes versions, and maintained documentation of CVE-2024-9042 patches
Security assessment
Multiple entries explicitly document inclusion of patches for CVE-2024-9042, which indicates addressing a specific security vulnerability. Containerd upgrades to 1.7.20 may include security improvements but lack explicit CVE references in the changelog notes.
Diff
diff --git a/eks/latest/userguide/eks-ami-versions-windows.md b/eks/latest/userguide/eks-ami-versions-windows.md index a5a85b3ee..270163ba9 100644 --- a/eks/latest/userguide/eks-ami-versions-windows.md +++ b/eks/latest/userguide/eks-ami-versions-windows.md @@ -39,2 +39,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.32-2025-02-18` | `1.32.1` | `1.7.20` | `1.1.3` | -`1.32-2025-01-15` | `1.32.0` | `1.7.20` | `1.1.3` | +`1.32-2025.03.14` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.02.18` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.01.15` | `1.32.0` | `1.7.20` | `1.1.3` | @@ -47,3 +48,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.31-2025-02-15` | `1.31.5` | `1.7.20` | `1.1.3` | -`1.31-2025-01-15` | `1.31.4` | `1.7.20` | `1.1.3` | -`1.31-2025-01-01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.31-2025.03.14` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.02.15` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.01.15` | `1.31.4` | `1.7.20` | `1.1.3` | +`1.31-2025.01.01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -61,3 +63,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.30-2025-02-15` | `1.30.9` | `1.7.14` | `1.1.3` | -`1.30-2025-01-15` | `1.30.8` | `1.7.14` | `1.1.3` | -`1.30-2025-01-01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.30-2025.03.14` | `1.30.9` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.30-2025.02.15` | `1.30.9` | `1.7.14` | `1.1.3` | +`1.30-2025.01.15` | `1.30.8` | `1.7.14` | `1.1.3` | +`1.30-2025.01.01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -78,2 +81,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.29-2025-02-15` | `1.29.13` | `1.7.14` | `1.1.3` | -`1.29-2025-01-15` | `1.29.12` | `1.7.14` | `1.1.3` | +`1.29-2025.03.14` | `1.29.13` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.29-2025.02.15` | `1.29.13` | `1.7.14` | `1.1.3` | +`1.29-2025.01.15` | `1.29.12` | `1.7.14` | `1.1.3` | @@ -99,0 +104 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.28-2025.03.14` | `1.28.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -126,3 +131,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.27-2025-02-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.27-2025.03.14` | `1.27.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.27-2025.02.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -159,2 +165,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.26-2025-02-15` | `1.26.15` | `1.7.14` | `1.1.3` | -`1.26-2025-01-15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.03.14` | `1.26.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.26-2025.02.15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.01.15` | `1.26.15` | `1.7.14` | `1.1.3` | @@ -191,0 +199 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.25-2025.03.14` | `1.25.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -267,2 +275,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.32-2025-02-18` | `1.32.1` | `1.7.20` | `1.1.3` | -`1.32-2025-01-01` | `1.32.0` | `1.7.20` | `1.1.3` | +`1.32-2025.03.14` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.02.18` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.01.01` | `1.32.0` | `1.7.20` | `1.1.3` | @@ -275,3 +284,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.31-2025-02-15` | `1.31.5` | `1.7.20` | `1.1.3` | -`1.31-2025-01-15` | `1.31.4` | `1.7.20` | `1.1.3` | -`1.31-2025-01-01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.31-2025.03.14` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.02.15` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.01.15` | `1.31.4` | `1.7.20` | `1.1.3` | +`1.31-2025.01.01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -289,3 +299,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.30-2025-02-15` | `1.30.9` | `1.7.14` | `1.1.3` | -`1.30-2025-01-15` | `1.30.8` | `1.7.14` | `1.1.3` | -`1.30-2025-01-01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.30-2025.03.14` | `1.30.9` | `1.7.20` | `1.1.3` | Upgraded `contianerd` to `1.7.20`. +`1.30-2025.02.15` | `1.30.9` | `1.7.14` | `1.1.3` | +`1.30-2025.01.15` | `1.30.8` | `1.7.14` | `1.1.3` | +`1.30-2025.01.01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -306,2 +317,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.29-2025-02-15` | `1.29.13` | `1.7.14` | `1.1.3` | -`1.29-2025-01-15` | `1.29.12` | `1.7.14` | `1.1.3` | +`1.29-2025.03.14` | `1.29.13` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.29-2025.02.15` | `1.29.13` | `1.7.14` | `1.1.3` | +`1.29-2025.01.15` | `1.29.12` | `1.7.14` | `1.1.3` | @@ -327,0 +340 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.28-2025.03.14` | `1.28.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -329,2 +342,2 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.28-2025-01-15` | `1.28.15` | `1.7.14` | `1.1.3` | -`1.28-2025-01-01` | `1.28.15` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.28-2025.01.15` | `1.28.15` | `1.7.14` | `1.1.3` | +`1.28-2025.01.01` | `1.28.15` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -354,3 +367,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.27-2025-02-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.27-2025.03.14` | `1.27.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.27-2025.02.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -387,2 +401,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.26-2025-02-15` | `1.26.15` | `1.7.14` | `1.1.3` | -`1.26-2025-01-15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.03.14` | `1.26.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.26-2025.02.15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.01.15` | `1.26.15` | `1.7.14` | `1.1.3` | @@ -419,0 +435 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.25-2025.03.14` | `1.25.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -495,2 +511,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.32-2025-02-18` | `1.32.1` | `1.7.20` | `1.1.3` | -`1.32-2025-01-15` | `1.32.4` | `1.7.20` | `1.1.3` | +`1.32-2025.03.14` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.02.18` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.01.15` | `1.32.4` | `1.7.20` | `1.1.3` | @@ -503,3 +520,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.31-2025-02-15` | `1.31.5` | `1.7.20` | `1.1.3` | -`1.31-2025-01-15` | `1.31.4` | `1.7.20` | `1.1.3` | -`1.31-2025-01-01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.31-2025.03.14` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.02.15` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.01.15` | `1.31.4` | `1.7.20` | `1.1.3` | +`1.31-2025.01.01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -516,0 +535 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.30-2025.03.14` | `1.30.9` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -518,2 +537,2 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.30-2025-01-15` | `1.30.8` | `1.7.14` | `1.1.3` | -`1.30-2025-01-01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.30-2025.01.15` | `1.30.8` | `1.7.14` | `1.1.3` | +`1.30-2025.01.01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -534,2 +553,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.29-2025-02-15` | `1.29.13` | `1.7.14` | `1.1.3` | -`1.29-2025-01-15` | `1.29.12` | `1.7.14` | `1.1.3` | +`1.29-2025.03.14` | `1.29.13` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.29-2025.02.15` | `1.29.13` | `1.7.14` | `1.1.3` | +`1.29-2025.01.15` | `1.29.12` | `1.7.14` | `1.1.3` | @@ -555,0 +576 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.28-2025.03.14` | `1.28.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -582,3 +603,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.27-2025-02-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.27-2025.03.14` | `1.27.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.27-2025.02.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -615,2 +637,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.26-2025-02-15` | `1.26.15` | `1.7.14` | `1.1.3` | -`1.26-2025-01-15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.03.14` | `1.26.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.26-2025.02.15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.01.15` | `1.26.15` | `1.7.14` | `1.1.3` | @@ -647,0 +671 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.25-2025.03.14` | `1.25.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -723,2 +747,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.32-2025-02-18` | `1.32.1` | `1.7.20` | `1.1.3` | -`1.32-2025-01-15` | `1.32.0` | `1.7.20` | `1.1.3` | +`1.32-2025.03.14` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.02.18` | `1.32.1` | `1.7.20` | `1.1.3` | +`1.32-2025.01.15` | `1.32.0` | `1.7.20` | `1.1.3` | @@ -731,3 +756,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.31-2025-02-15` | `1.31.5` | `1.7.20` | `1.1.3` | -`1.31-2025-01-15` | `1.31.4` | `1.7.20` | `1.1.3` | -`1.31-2025-01-01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.31-2025.03.14` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.02.15` | `1.31.5` | `1.7.20` | `1.1.3` | +`1.31-2025.01.15` | `1.31.4` | `1.7.20` | `1.1.3` | +`1.31-2025.01.01` | `1.31.4` | `1.7.20` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -745,3 +771,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.30-2025-02-15` | `1.30.9` | `1.7.14` | `1.1.3` | -`1.30-2025-01-15` | `1.30.8` | `1.7.14` | `1.1.3` | -`1.30-2025-01-01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.30-2025.03.14` | `1.30.9` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.30-2025.02.15` | `1.30.9` | `1.7.14` | `1.1.3` | +`1.30-2025.01.15` | `1.30.8` | `1.7.14` | `1.1.3` | +`1.30-2025.01.01` | `1.30.8` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -762,2 +789,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.29-2025-02-15` | `1.29.13` | `1.7.14` | `1.1.3` | -`1.29-2025-01-15` | `1.29.12` | `1.7.14` | `1.1.3` | +`1.29-2025.03.14` | `1.29.13` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.29-2025.02.15` | `1.29.13` | `1.7.14` | `1.1.3` | +`1.29-2025.01.15` | `1.29.12` | `1.7.14` | `1.1.3` | @@ -783,0 +812 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.28-2025.03.14` | `1.28.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. @@ -810,3 +839,4 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.27-2025-02-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-15` | `1.27.16` | `1.7.14` | `1.1.3` | -`1.27-2025-01-01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. +`1.27-2025.03.14` | `1.27.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.27-2025.02.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.15` | `1.27.16` | `1.7.14` | `1.1.3` | +`1.27-2025.01.01` | `1.27.16` | `1.7.14` | `1.1.3` | Includes patches for `CVE-2024-9042`. @@ -843,2 +873,3 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release -`1.26-2025-02-15` | `1.26.15` | `1.7.14` | `1.1.3` | -`1.26-2025-01-15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.03.14` | `1.26.15` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`. +`1.26-2025.02.15` | `1.26.15` | `1.7.14` | `1.1.3` | +`1.26-2025.01.15` | `1.26.15` | `1.7.14` | `1.1.3` | @@ -875,0 +907 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.25-2025.03.14` | `1.25.16` | `1.7.20` | `1.1.3` | Upgraded `containerd` to `1.7.20`.