AWS greengrass medium security documentation change

Service: greengrass · 2026-02-19 · Security-related medium

File: greengrass/v2/developerguide/greengrass-nucleus-lite-component.md

Summary

Added release notes for versions 2.3.2 and 2.3.1, including bug fixes for deployment state handling, directory closure, certificate overwrite in fleet provisioning, and version reporting.

Security assessment

The fix 'Ensure DIR from fdopendir is closed' addresses a potential resource leak vulnerability that could lead to denial-of-service attacks. The certificate overwrite in fleet provisioning improves credential rotation security. Both changes demonstrate concrete security hardening measures.

Diff

diff --git a/greengrass/v2/developerguide/greengrass-nucleus-lite-component.md b/greengrass/v2/developerguide/greengrass-nucleus-lite-component.md
index 760a49be2..f40d1e7b5 100644
--- a//greengrass/v2/developerguide/greengrass-nucleus-lite-component.md
+++ b//greengrass/v2/developerguide/greengrass-nucleus-lite-component.md
@@ -199,0 +200,19 @@ Messages are logged to stdout and log files are handled by systemd.
+2.3.2 | 
+
+Bug fixes and improvements
+    
+
+  * Updates the version file for correct nucleus version reporting.
+
+  
+2.3.1 | 
+
+Bug fixes and improvements
+    
+
+  * GG will not attempt to update deployment state for canceled jobs.
+  * Ensure DIR from fdopendir is closed.
+  * Fleet provisioning will now trigger certificate file overwrite on each run.
+  * Other minor bug fixes.
+
+