AWS sagemaker high security documentation change
Summary
Added release notes for November 22, 2025 SageMaker Hyperpod AMI updates across Kubernetes versions 1.28-1.33, including component version updates and OS migration from AL2 to AL2023.
Security assessment
The update includes security-relevant component upgrades like OpenSSL (3.2.2), Linux kernel (6.1), containerd (1.7.27), and sudo (1.9.15). These versions address known vulnerabilities in previous releases (e.g., OpenSSL 1.0.2k had multiple CVEs). The explicit deprecation of AL2 due to outdated components provides concrete evidence of security mitigation.
Diff
diff --git a/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md b/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md index 08d3e2bc0..4e13a0d47 100644 --- a//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md +++ b//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md @@ -5 +5 @@ -November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 +November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 @@ -10,0 +11,1025 @@ The following release notes track the latest updates for Amazon SageMaker HyperP +## SageMaker Hyperpod AMI releases for Amazon EKS: November 22, 2025 + +**AMI general updates** + + * Released updates for SageMaker Hyperpod AMI for Amazon EKS versions 1.28, 1.29, 1.30, 1.31, 1.32, 1.33. + + * Base DLAMI release note is available [here](https://docs.aws.amazon.com//dlami/latest/devguide/appendix-ami-release-notes.html#appendix-ami-release-notes-base). + + + + +**SageMaker Hyperpod DLAMI for Amazon EKS support** + +This release includes the following updates: + +Kubernetes v1.28 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.13, build 0bab007 + + * Runc version: 1.3.3 + + * Containerd version: containerd github.com/containerd/containerd 1.7.27 + + * aws CLI v2 version: aws-cli/1.42.71 Python/3.10.17 Linux/5.10.245-241.978.amzn2.x86_64 botocore/1.40.71 + + * aws Neuronx DKMS version: 2.24.7.0 + + * NVIDIA Driver version: 570.195.03 + + * CUDA version: 12.2 + + * ENA Driver version: 2.15.0g + + * Python version: 3.7.16 + + * Kubernetes version: v1.28.15-eks-473151a + + * iptables-services version: 1.8.4 + + * nginx version: 1.20.1 + + * nvme-cli version: 1.11.1 + + * epel-release version: 7 + + * stress version: 1.0.4 + + * collectd version: 5.8.1 + + * acl version: 2.2.51 + + * rsyslog version: 8.24.0 + + * lustre-client version: 2.12.8 + + * systemd version: 219 + + * openssh version: 7.4 + + * sudo version: 1.8.23 + + * gcc version: 7.3.1 + + * cmake version: 2.8.12.2 + + * git version: 2.47.3 + + * make version: 3.82 + + * cloudwatch-agent version: 1.300060.1 + + * nfs-utils version: 1.3.0 + + * lvm2 version: 2.02.187 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 59. + + * AL2023 (x86_64): + + * Linux Kernel version: 6.1 + + * Glibc version: 2.34 + + * OpenSSL version: 3.2.2 + + * FSx Lustre Client version: 2.15.6 + + * Runc version: 1.3.3 + + * Containerd version: containerd github.com/containerd/containerd 1.7.27 + + * aws Neuronx DKMS version: 2.24.7.0 + + * NVIDIA Driver version: 580.95.05 + + * CUDA version: 12.8 + + * ENA Driver version: 2.15.0g + + * Python version: 3.9.24 + + * Kubernetes version: v1.28.15-eks-473151a + + * iptables-services version: 1.8.8 + + * nginx version: 1.28.0 + + * nvme-cli version: 2.13 1.13 + + * stress version: 1.0.7 + + * collectd version: 5.12.0. + + * acl version: 2.3.1 + + * lustre-client version: 2.15.6 + + * systemd version: 252 + + * openssh version: 8.7 + + * sudo version: 1.9.15 + + * gcc version: 11.5.0 + + * cmake version: 3.22.2 + + * git version: 2.50.1 + + * make version: 4.3 + + * cloudwatch-agent version: 1.300060.1 + + * nfs-utils version: 2.5.4 + + * lvm2 version: 2.03.16 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 59. + + + + +Kubernetes v1.29 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.13, build 0bab007 + + * Runc version: 1.3.3 + + * Containerd version: containerd github.com/containerd/containerd 1.7.27 + + * aws CLI v2 version: aws-cli/1.42.71 Python/3.10.17 Linux/5.10.245-241.978.amzn2.x86_64 botocore/1.40.71 + + * aws Neuronx DKMS version: 2.24.7.0 + + * NVIDIA Driver version: 570.195.03 + + * CUDA version: 12.2 +