AWS Security ChangesHomeSearch

AWS linux documentation change

Service: linux · 2025-09-28 · Documentation low

File: linux/al2023/release-notes/support-info-by-support-statement.md

Summary

Added security support entries for Clang 18, Dotnet9.0, GDAL 3.10, LLVM 18, Python 3.13; Updated Redis 6 support end date; Added multiple new packages and dependencies

Security assessment

Changes include new security support timelines for multiple components (Clang 18, Dotnet9.0, etc.) and extended support periods (Redis 6). These updates document security maintenance periods but do not indicate fixes for specific vulnerabilities. The addition of TPM-related packages (aws-nitro-tpm-tools, tpm2-abrmd) relates to security features but does not address a disclosed vulnerability.

Diff

diff --git a/linux/al2023/release-notes/support-info-by-support-statement.md b/linux/al2023/release-notes/support-info-by-support-statement.md
index 9bc4a1e4c..395f6f251 100644
--- a//linux/al2023/release-notes/support-info-by-support-statement.md
+++ b//linux/al2023/release-notes/support-info-by-support-statement.md
@@ -3 +3 @@
-Amazon Corretto 11 has security support until June 2029Amazon Corretto 17 has security support until June 2029Amazon Corretto 21 has security support until June 2029Amazon Corretto 22 has security support until October 2024Amazon Corretto 23 has security support until April 2025Amazon Corretto 24 has security support until October 2025Amazon Corretto 8 has security support until June 2029Amazon Linux 2023 end-of-lifeClamav has security support until October 2025Clamav1.4 has security support until August 2027Dotnet6.0 has security support until November 2024Dotnet8.0 has security support until November 2026Kernel has security support until June 2029Kernel6.12 has security support until June 2029MariaDB 10.11 has security support until February 2028MariaDB 10.5 has security support until June 2025NGINX has security support until June 2029NodeJS 18 has security support until April 2025NodeJS 20 has security support until April 2026NodeJS 22 has security support until April 2027PCRE has security support until June 2024PHP 8.1 has security support until December 2025PHP 8.2 has security support until December 2026PHP 8.3 has security support until December 2027PHP 8.4 has security support until December 2028PostgreSQL 15 has security support until November 2027PostgreSQL 16 has security support until November 2028PostgreSQL 17 has security support until June 2029Python 3.11 has security support until October 2027Python 3.12 has security support until October 2028Python 3.9 (System Python) has security support until June 2029Redis 6 has security support until August 2025Ruby 3.2 has security support until March 2026
+Amazon Corretto 11 has security support until June 2029Amazon Corretto 17 has security support until June 2029Amazon Corretto 21 has security support until June 2029Amazon Corretto 22 has security support until October 2024Amazon Corretto 23 has security support until April 2025Amazon Corretto 24 has security support until October 2025Amazon Corretto 8 has security support until June 2029Amazon Linux 2023 end-of-lifeClamav has security support until October 2025Clamav1.4 has security support until August 2027Clang 18 has security support until December 2025Dotnet6.0 has security support until November 2024Dotnet8.0 has security support until November 2026Dotnet9.0 has security support until May 2026GDAL 3.10 has security support until August 2027Kernel has security support until June 2029Kernel6.12 has security support until June 2029LLVM 18 has security support until December 2025MariaDB 10.11 has security support until February 2028MariaDB 10.5 has security support until June 2025NGINX has security support until June 2029NodeJS 18 has security support until April 2025NodeJS 20 has security support until April 2026NodeJS 22 has security support until April 2027PCRE has security support until June 2024PHP 8.1 has security support until December 2025PHP 8.2 has security support until December 2026PHP 8.3 has security support until December 2027PHP 8.4 has security support until December 2028PostgreSQL 15 has security support until November 2027PostgreSQL 16 has security support until November 2028PostgreSQL 17 has security support until June 2029Python 3.11 has security support until October 2027Python 3.12 has security support until October 2028Python 3.13 has security support until June 2029Python 3.9 (System Python) has security support until June 2029Redis 6 has security support until January 2026Ruby 3.2 has security support until March 2026
@@ -9 +9 @@ Support statements information for packages in Amazon Linux 2023 (AL2023).
-This is current as of 2025-05-19T00:21:59.198061.
+This is current as of 2025-09-16T22:44:43.042201.
@@ -32,0 +33,2 @@ This is current as of 2025-05-19T00:21:59.198061.
+  * Clang 18 has security support until December 2025
+
@@ -36,0 +39,4 @@ This is current as of 2025-05-19T00:21:59.198061.
+  * Dotnet9.0 has security support until May 2026
+
+  * GDAL 3.10 has security support until August 2027
+
@@ -40,0 +47,2 @@ This is current as of 2025-05-19T00:21:59.198061.
+  * LLVM 18 has security support until December 2025
+
@@ -72,0 +81,2 @@ This is current as of 2025-05-19T00:21:59.198061.
+  * Python 3.13 has security support until June 2029
+
@@ -75 +85 @@ This is current as of 2025-05-19T00:21:59.198061.
-  * Redis 6 has security support until August 2025
+  * Redis 6 has security support until January 2026
@@ -146 +156 @@ Package | Note
-` `collectd-java` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `collectd-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
@@ -153,3 +163,3 @@ Package | Note
-` `libwebp-java` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `openmpi-java` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `R-java` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `libwebp-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `openmpi-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `R-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
@@ -157 +167 @@ Package | Note
-` `sphinx-java` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `sphinx-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
@@ -452 +461,0 @@ Package
-` `audit-libs-devel` `  
@@ -486,0 +496 @@ Package
+` `aws-nitro-tpm-tools` `  
@@ -554,0 +565 @@ Package
+` `blueprint-compiler` `  
@@ -695,0 +707,3 @@ Package
+` `clang18-libs` `  
+` `clang18-resource-filesystem` `  
+` `clang18-tools-extra-devel` `  
@@ -773,0 +788,2 @@ Package
+` `compat-poppler22` `  
+` `compat-poppler22-cpp` `  
@@ -850,0 +867 @@ Package
+` `dav1d` `  
@@ -945,0 +963,3 @@ Package
+` `dracut-kiwi-lib` `  
+` `dracut-kiwi-overlay` `  
+` `dracut-kiwi-verity` `  
@@ -1027,0 +1048,2 @@ Package
+` `espeak` `  
+` `espeak-devel` `  
@@ -1334 +1355,0 @@ Package
-` `glibc-devel` `  
@@ -1569,0 +1591 @@ Package
+` `gnome-common` `  
@@ -1662,0 +1685,5 @@ Package
+` `google-noto-fangsong-kss-rotated-fonts` `  
+` `google-noto-fangsong-kss-vertical-fonts` `  
+` `google-noto-fonts-all` `  
+` `google-noto-fonts-all-static` `  
+` `google-noto-fonts-all-vf` `  
@@ -1671,0 +1699 @@ Package
+` `google-noto-nastaliq-urdu-vf-fonts` `  
@@ -1714,0 +1743 @@ Package
+` `google-noto-sans-chorasmian-fonts` `  
@@ -1725,0 +1755 @@ Package
+` `google-noto-sans-cypro-minoan-fonts` `  
@@ -1750,0 +1781 @@ Package
+` `google-noto-sans-gujarati-vf-fonts` `  
@@ -1751,0 +1783 @@ Package
+` `google-noto-sans-gunjala-gondi-vf-fonts` `  
@@ -1769,0 +1802 @@ Package
+` `google-noto-sans-javanese-vf-fonts` `  
@@ -1775,0 +1809,2 @@ Package
+` `google-noto-sans-kawi-fonts` `  
+` `google-noto-sans-kawi-vf-fonts` `  
@@ -1844,0 +1880,3 @@ Package
+` `google-noto-sans-nag-mundari-fonts` `  
+` `google-noto-sans-nag-mundari-vf-fonts` `  
+` `google-noto-sans-nandinagari-fonts` `  
@@ -1848,0 +1887,2 @@ Package
+` `google-noto-sans-nko-unjoined-fonts` `  
+` `google-noto-sans-nko-unjoined-vf-fonts` `  
@@ -1863,0 +1904 @@ Package
+` `google-noto-sans-oriya-vf-fonts` `  
@@ -1870,0 +1912 @@ Package
+` `google-noto-sans-phagspa-fonts` `  
@@ -1899,0 +1942,2 @@ Package
+` `google-noto-sans-syriac-eastern-fonts` `  
+` `google-noto-sans-syriac-eastern-vf-fonts` `  
@@ -1900,0 +1945,3 @@ Package
+` `google-noto-sans-syriac-vf-fonts` `  
+` `google-noto-sans-syriac-western-fonts` `  
+` `google-noto-sans-syriac-western-vf-fonts` `  
@@ -1915,0 +1963,2 @@ Package
+` `google-noto-sans-tangsa-fonts` `  
+` `google-noto-sans-tangsa-vf-fonts` `  
@@ -1945,0 +1995,2 @@ Package
+` `google-noto-sans-vithkuqi-fonts` `  
+` `google-noto-sans-vithkuqi-vf-fonts` `  
@@ -1969,0 +2021 @@ Package
+` `google-noto-serif-dives-akuru-fonts` `  
@@ -1985,0 +2038 @@ Package
+` `google-noto-serif-khitan-small-script-fonts` `  
@@ -1992,0 +2046 @@ Package
+` `google-noto-serif-makasar-fonts` `  
@@ -1995,0 +2050,3 @@ Package
+` `google-noto-serif-myanmar-vf-fonts` `  
+` `google-noto-serif-np-hmong-fonts` `  
+` `google-noto-serif-np-hmong-vf-fonts` `  
@@ -1997,0 +2055,4 @@ Package
+` `google-noto-serif-old-uyghur-fonts` `  
+` `google-noto-serif-oriya-fonts` `  
+` `google-noto-serif-oriya-vf-fonts` `  
+` `google-noto-serif-ottoman-siyaq-fonts` `  
@@ -2013,0 +2075,2 @@ Package
+` `google-noto-serif-toto-fonts` `  
+` `google-noto-serif-toto-vf-fonts` `  
@@ -2014,0 +2078,2 @@ Package
+` `google-noto-serif-vithkuqi-fonts` `  
+` `google-noto-serif-vithkuqi-vf-fonts` `  
@@ -2017,0 +2083 @@ Package
+` `google-noto-traditional-nushu-vf-fonts` `  
@@ -2094,0 +2161,3 @@ Package
+` `gstreamer1-plugin-dav1d` `  
+` `gstreamer1-plugin-gtk4` `  
+` `gstreamer1-plugin-openh264` `  
@@ -2288 +2356,0 @@ Package
-` `ipset-devel` `  
@@ -2491 +2558,0 @@ Package
-` `kernel-headers` `  
@@ -2511,0 +2579,7 @@ Package
+` `kiwi-cli` `  
+` `kiwi-image-descriptions-examples` `  
+` `kiwi-systemdeps` `  
+` `kiwi-systemdeps-bootloaders` `  
+` `kiwi-systemdeps-core` `  
+` `kiwi-systemdeps-disk-images` `  
+` `kiwi-systemdeps-filesystems` `  
@@ -2531,0 +2606,2 @@ Package
+` `ladspa` `  
+` `ladspa-devel` `  
@@ -2937 +3012,0 @@ Package
-` `libcap-ng-devel` `  
@@ -2973,0 +3049,2 @@ Package
+` `libdav1d` `  
+` `libdav1d-devel` `  
@@ -3012 +3088,0 @@ Package
-` `libdrm-devel` `  
@@ -3141,0 +3218,2 @@ Package
+` `libid3tag` `  
+` `libid3tag-devel` `  
@@ -3243 +3320,0 @@ Package
-` `libnetfilter_conntrack-devel` `  
@@ -3245 +3321,0 @@ Package
-` `libnetfilter_cthelper-devel` `  
@@ -3247 +3322,0 @@ Package
-` `libnetfilter_cttimeout-devel` `  
@@ -3249 +3323,0 @@ Package
-` `libnetfilter_queue-devel` `  
@@ -3251 +3324,0 @@ Package
-` `libnfnetlink-devel` `  
@@ -3263 +3335,0 @@ Package
-` `libnl3-devel` `  
@@ -3419,0 +3492,2 @@ Package
+` `libsamplerate` `  
+` `libsamplerate-devel` `  
@@ -3685,0 +3760,2 @@ Package
+` `libXpresent` `  
+` `libXpresent-devel` `  
@@ -3727,0 +3804 @@ Package
+` `lld18-libs` `  
@@ -3736,0 +3814,5 @@ Package
+` `llvm18-cmake-utils` `  
+` `llvm18-doc` `  
+` `llvm18-googletest` `  
+` `llvm18-libs` `  
+` `llvm18-static` `  
@@ -4000,0 +4083,2 @@ Package
+` `metacity` `  
+` `metacity-devel` `  
@@ -4046,0 +4131 @@ Package
+` `mozilla-openh264` `  
@@ -4240,0 +4326,2 @@ Package
+` `openh264` `  
+` `openh264-devel` `  
@@ -4344,0 +4432,6 @@ Package
+` `papers` `  
+` `papers-devel` `