AWS linux documentation change
Summary
Updated package support timelines including new versions (Clamav1.4, Corretto 24, Kernel6.12, MariaDB 10.11, NodeJS 22/18, PHP 8.4, PostgreSQL 17) and revised end dates
Security assessment
Changes document extended security support periods for multiple packages but do not address specific vulnerabilities. Updates inform users of maintenance timelines to ensure continued security coverage.
Diff
diff --git a/linux/al2023/release-notes/support-info-by-package.md b/linux/al2023/release-notes/support-info-by-package.md index e23a51792..3e1dba0a1 100644 --- a//linux/al2023/release-notes/support-info-by-package.md +++ b//linux/al2023/release-notes/support-info-by-package.md @@ -3 +3 @@ -Dotnet8.0 has security support until November 2026.Dotnet6.0 has security support until November 2024.Amazon Corretto 23 has security support until April 2025.Amazon Corretto 22 has security support until October 2024.Amazon Corretto 21 has security support until June 2029.Amazon Corretto 17 has security support until June 2029.Amazon Corretto 11 has security support until June 2029.Amazon Corretto 8 has security support until June 2029.Kernel has security support until June 2029.MariaDB 10.5 has security support until June 2025.NGINX has security support until June 2029.NodeJS 20 has security support until April 2026.PCRE has security support until June 2024.PHP 8.3 has security support until December 2027.PHP 8.2 has security support until December 2026.PHP 8.1 has security support until December 2025.PostgreSQL 16 has security support until November 2028.PostgreSQL 15 has security support until November 2027.Python 3.12 has security support until October 2028.Python 3.11 has security support until October 2027.Python 3.9 (System Python) has security support until June 2029.Redis 6 has security support until August 2025.Ruby 3.2 has security support until March 2026.Amazon Linux 2023 end-of-life.Packages +Clamav1.4 has security support until August 2027.Clamav has security support until October 2025.Dotnet8.0 has security support until November 2026.Dotnet6.0 has security support until November 2024.Amazon Corretto 24 has security support until October 2025.Amazon Corretto 23 has security support until April 2025.Amazon Corretto 22 has security support until October 2024.Amazon Corretto 21 has security support until June 2029.Amazon Corretto 17 has security support until June 2029.Amazon Corretto 11 has security support until June 2029.Amazon Corretto 8 has security support until June 2029.Kernel6.12 has security support until June 2029.Kernel has security support until June 2029.MariaDB 10.5 has security support until June 2025.MariaDB 10.11 has security support until February 2028.NGINX has security support until June 2029.NodeJS 22 has security support until April 2027.NodeJS 20 has security support until April 2026.NodeJS 18 has security support until April 2025.PCRE has security support until June 2024.PHP 8.4 has security support until December 2028.PHP 8.3 has security support until December 2027.PHP 8.2 has security support until December 2026.PHP 8.1 has security support until December 2025.PostgreSQL 17 has security support until June 2029.PostgreSQL 16 has security support until November 2028.PostgreSQL 15 has security support until November 2027.Python 3.12 has security support until October 2028.Python 3.11 has security support until October 2027.Python 3.9 (System Python) has security support until June 2029.Redis 6 has security support until August 2025.Ruby 3.2 has security support until March 2026.Amazon Linux 2023 end-of-life.Packages @@ -7 +7 @@ Dotnet8.0 has security support until November 2026.Dotnet6.0 has security suppor -This is current as of 2025-02-17T21:30:54.595102. +This is current as of 2025-05-19T00:21:59.198061. @@ -10,0 +11,4 @@ This is current as of 2025-02-17T21:30:54.595102. + * Clamav1.4 has security support until August 2027. + + * Clamav has security support until October 2025. + @@ -14,0 +19,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * Amazon Corretto 24 has security support until October 2025. + @@ -26,0 +33,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * Kernel6.12 has security support until June 2029. + @@ -30,0 +39,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * MariaDB 10.11 has security support until February 2028. + @@ -32,0 +43,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * NodeJS 22 has security support until April 2027. + @@ -34,0 +47,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * NodeJS 18 has security support until April 2025. + @@ -36,0 +51,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * PHP 8.4 has security support until December 2028. + @@ -42,0 +59,2 @@ This is current as of 2025-02-17T21:30:54.595102. + * PostgreSQL 17 has security support until June 2029. + @@ -63,0 +82,26 @@ This is current as of 2025-02-17T21:30:54.595102. +## Clamav1.4 has security support until August 2027 + + * Start Date: 2025-03-03 + + * End Date: 2027-08-15 + + + + +[https://docs.clamav.net/faq/faq-eol.html#version-support-matrix](https://docs.clamav.net/faq/faq-eol.html#version-support-matrix) + +Support period for Clamav1.4 differs from the main distribution end-of-life date. + +## Clamav has security support until October 2025 + + * Start Date: 2023-03-15 + + * End Date: 2025-10-01 + + + + +[https://docs.clamav.net/faq/faq-eol.html#version-support-matrix](https://docs.clamav.net/faq/faq-eol.html#version-support-matrix) + +Clamav 0.103 has support until Oct 1st 2025. Support period for clamav differs from the main distribution end-of-life date. Update to clamav1.4 package for continued support + @@ -89,0 +134,13 @@ Support period for Dotnet6.0 differs from the main distribution end-of-life date +## Amazon Corretto 24 has security support until October 2025 + + * Start Date: 2025-03-18 + + * End Date: 2025-10-21 + + + + +[https://aws.amazon.com/corretto/](https://aws.amazon.com/corretto/) + +The End of Life of Amazon Corretto 24 is in April 2025. + @@ -92 +149 @@ Support period for Dotnet6.0 differs from the main distribution end-of-life date - * Start Date: 2024-10-28 + * Start Date: 2025-04-15 @@ -94 +151 @@ Support period for Dotnet6.0 differs from the main distribution end-of-life date - * End Date: 2025-04-25 + * End Date: @@ -167,0 +225,13 @@ The last planned update of Amazon Corretto 8 is in October 2030, with an End of +## Kernel6.12 has security support until June 2029 + + * Start Date: 2025-04-01 + + * End Date: 2029-06-30 + + + + +[https://aws.amazon.com/amazon-linux-ami/faqs/](https://aws.amazon.com/amazon-linux-ami/faqs/) + +There may be live patches available for a kernel for the first three months after it is released. Individual live patches don't get updates, but new live patches and new kernels may be released. + @@ -193,0 +264,13 @@ Support period for MariaDB 10.5 differs from the main distribution end-of-life d +## MariaDB 10.11 has security support until February 2028 + + * Start Date: 2023-02-16 + + * End Date: 2028-02-16 + + + + +[https://mariadb.org/about/#maintenance-policy](https://mariadb.org/about/#maintenance-policy) + +Support period for MariaDB 10.11 differs from the main distribution end-of-life date. + @@ -206,0 +290,13 @@ AL2023 will keep ingesting new upstream NGINX releases. +## NodeJS 22 has security support until April 2027 + + * Start Date: 2024-10-29 + + * End Date: 2027-04-30 + + + + +[https://github.com/nodejs/release#release-schedule](https://github.com/nodejs/release#release-schedule) + +Support period for NodeJS 22 differs from the main distribution end-of-life date. + @@ -209 +305 @@ AL2023 will keep ingesting new upstream NGINX releases. - * Start Date: 2023-12-11 + * Start Date: 2023-10-24 @@ -216 +312 @@ AL2023 will keep ingesting new upstream NGINX releases. -[https://nodejs.org/en/about/previous-releases](https://nodejs.org/en/about/previous-releases) +[https://github.com/nodejs/release#release-schedule](https://github.com/nodejs/release#release-schedule) @@ -219,0 +316,13 @@ Support period for NodeJS 20 differs from the main distribution end-of-life date +## NodeJS 18 has security support until April 2025 + + * Start Date: 2025-04-30 + + * End Date: + + + + +[https://github.com/nodejs/release#release-schedule](https://github.com/nodejs/release#release-schedule) + +Support period for NodeJS 18 differs from the main distribution end-of-life date. + @@ -232,0 +342,13 @@ pcre version 1 is deprecated, replaced by pcre2. This support period is to allow +## PHP 8.4 has security support until December 2028 + + * Start Date: 2024-11-21 + + * End Date: 2028-12-31 + + + + +[https://www.php.net/supported-versions](https://www.php.net/supported-versions) + +Support period for PHP 8.4 is the same as PHP 8.4 upstream end-of-life. + @@ -271,0 +394,13 @@ Support period for PHP 8.1 is the same as PHP 8.1 upstream end-of-life. PHP 8.2 +## PostgreSQL 17 has security support until June 2029 + + * Start Date: 2024-09-26 + + * End Date: 2029-06-30 + + + + +[https://www.postgresql.org/support/versioning/](https://www.postgresql.org/support/versioning/) + +The support period for PostgreSQL 17 aligns with AL2023's end-of-life date rather than the upstream project's support timeline. + @@ -383,0 +519,3 @@ Package | Supported? | Start date | End date | Support +` `accountsservice` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) +` `accountsservice-devel` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) +` `accountsservice-libs` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) @@ -399,0 +538,2 @@ Package | Supported? | Start date | End date | Support +` `adwaita-icon-theme-legacy` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) +` `adwaita-icon-theme-legacy-devel` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) @@ -421,0 +562 @@ Package | Supported? | Start date | End date | Support +` `amazon-linux-logos` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) @@ -429,0 +571 @@ Package | Supported? | Start date | End date | Support +` `amdgcn-common` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) @@ -658 +800 @@ Upstream end-of-life for Python 3.9 (System Python) (python3) is 2029-06-30 -` `bcc` ` | Yes | 2023-03-15 | 2029-06-30 | [Kernel has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel) +` `bcc` ` | Yes | 2025-04-01 | 2029-06-30 | [Kernel6.12 has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel6.12) @@ -662 +804 @@ Upstream end-of-life for Python 3.9 (System Python) (python3) is 2029-06-30 -This package has a runtime dependency on kernel-libbpf, and thus also falls under the support statements for kernel. Amazon Linux will support a kernel until AL2023 End of Life +This package has a runtime dependency on kernel-libbpf, and thus also falls under the support statements for kernel6.12. Amazon Linux will support a kernel until AL2023 End of Life @@ -665 +807 @@ This package has a runtime dependency on kernel-libbpf, and thus also falls unde -` `bcc-tools` ` | Yes | 2023-03-15 | 2029-06-30 | [Kernel has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel) +` `bcc-tools` ` | Yes | 2025-04-01 | 2029-06-30 | [Kernel6.12 has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel6.12) @@ -669 +811 @@ This package has a runtime dependency on kernel-libbpf, and thus also falls unde -This package has a runtime dependency on kernel-libbpf, and thus also falls under the support statements for kernel. Amazon Linux will support a kernel until AL2023 End of Life +This package has a runtime dependency on kernel-libbpf, and thus also falls under the support statements for kernel6.12. Amazon Linux will support a kernel until AL2023 End of Life @@ -797,2 +939,6 @@ Upstream end-of-life for Python 3.9 (System Python) (python3) is 2029-06-30 -` `bpftool` ` | Yes | 2023-03-15 | 2029-06-30 | [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol) -` `bpftrace` ` | Yes | 2023-03-15 | 2029-06-30 | [Kernel has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel) +` `bpftool` ` | Yes | 2025-04-01 | 2029-06-30 | [Kernel6.12 has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel6.12)