AWS parallelcluster high security documentation change
Summary
Added release notes for AWS ParallelCluster 3.14.2, including munge upgrade to address CVE-2026-25506 and NodeJS version update.
Security assessment
Explicitly references CVE-2026-25506 vulnerability remediation via munge upgrade. This documents a security fix for a known vulnerability (concrete evidence via CVE ID and GitHub advisory link).
Diff
diff --git a/parallelcluster/latest/ug/document_history.md b/parallelcluster/latest/ug/document_history.md index c3997bbae..71734ade6 100644 --- a//parallelcluster/latest/ug/document_history.md +++ b//parallelcluster/latest/ug/document_history.md @@ -10,0 +11,6 @@ AWS ParallelCluster Change | Description | Date +AWS ParallelCluster version 3.14.2 released | To upgrade, enter the following: `sudo pip install --upgrade aws-parallelcluster`. Changes: + + * Upgrade munge to version 0.5.18 (from 0.5.16) to address [CVE-2026-25506 ](https://github.com/dun/munge/security/advisories/GHSA-r9cr-jf4v-75gh). + * Upgrade NodeJS version in installer to version 22.22.0 (from 20.18.3). + +| February 16, 2026