AWS linux high security documentation change
Summary
Updated kernel live patch RPM names and added end-of-support date warning
Security assessment
The change specifies kernel version end-of-support dates (2025-07-22), which directly relates to security patching lifecycle management. Running unsupported kernels exposes systems to unpatched vulnerabilities. Updated RPM names indicate security patch delivery mechanism changes.
Diff
diff --git a/linux/al2023/ug/live-patching.md b/linux/al2023/ug/live-patching.md index b3e4bf9ae..4fa9bbc47 100644 --- a//linux/al2023/ug/live-patching.md +++ b//linux/al2023/ug/live-patching.md @@ -111 +111 @@ This command also installs the latest version of the kernel live patch RPM from -When you enable Kernel Live Patching, an empty kernel live patch RPM is automatically applied. If Kernel Live Patching was successfully enabled, this command returns a list that includes the initial empty kernel live patch RPM. +When you enable Kernel Live Patching, an empty kernel live patch RPM is automatically applied. If Kernel Live Patching was successfully enabled, this command returns a list that includes the initial empty kernel live patch RPM (and another RPM setting up the DNF repository containing the livepatches). @@ -114,2 +114,2 @@ When you enable Kernel Live Patching, an empty kernel live patch RPM is automati - dnf-plugin-kernel-livepatch-1.0-0.11.amzn2023.noarch - kernel-livepatch-6.1.12-17.42-1.0-0.amzn2023.x86_64 + kernel-livepatch-repo-s3-2023.7.20250428-0.amzn2023.noarch + kernel-livepatch-6.1.134-150.224-1.0-0.amzn2023.x86_64 @@ -202,0 +203 @@ Omit the `--security` option to include bug fixes. + The current version of the Linux kernel you are running will no longer receive live patches after 2025-07-22.