AWS Security ChangesHomeSearch

AWS linux documentation change

Service: linux · 2026-03-07 · Documentation low

File: linux/al2023/release-notes/support-info-by-package.md

Summary

Updated package support timelines including new versions (Clamav1.5, Corretto 25, Kernel6.18, LLVM19/20, Node.js24, PHP8.5), adjusted dates, and added package entries. Updated 'current as of' timestamp from 2025-09-16 to 2026-02-24.

Security assessment

Changes update security support end dates and add new package versions' lifecycle information, but no concrete evidence of addressing specific vulnerabilities or exploits. The modifications are routine documentation maintenance of support timelines rather than reactive security fixes.

Diff

diff --git a/linux/al2023/release-notes/support-info-by-package.md b/linux/al2023/release-notes/support-info-by-package.md
index f8309282f..85c235f14 100644
--- a//linux/al2023/release-notes/support-info-by-package.md
+++ b//linux/al2023/release-notes/support-info-by-package.md
@@ -3 +3 @@
-Clamav1.4 has security support until August 2027.Clamav has security support until October 2025.Clang 18 has security support until December 2025.Dotnet9.0 has security support until May 2026.Dotnet8.0 has security support until November 2026.Dotnet6.0 has security support until November 2024.GDAL 3.10 has security support until August 2027.Amazon Corretto 24 has security support until October 2025.Amazon Corretto 23 has security support until April 2025.Amazon Corretto 22 has security support until October 2024.Amazon Corretto 21 has security support until June 2029.Amazon Corretto 17 has security support until June 2029.Amazon Corretto 11 has security support until June 2029.Amazon Corretto 8 has security support until June 2029.Kernel6.12 has security support until June 2029.Kernel has security support until June 2029.LLVM 18 has security support until December 2025.MariaDB 10.5 has security support until June 2025.MariaDB 10.11 has security support until February 2028.NGINX has security support until June 2029.NodeJS 22 has security support until April 2027.NodeJS 20 has security support until April 2026.NodeJS 18 has security support until April 2025.PCRE has security support until June 2024.PHP 8.4 has security support until December 2028.PHP 8.3 has security support until December 2027.PHP 8.2 has security support until December 2026.PHP 8.1 has security support until December 2025.PostgreSQL 17 has security support until June 2029.PostgreSQL 16 has security support until November 2028.PostgreSQL 15 has security support until November 2027.Python 3.13 has security support until June 2029.Python 3.12 has security support until October 2028.Python 3.11 has security support until October 2027.Python 3.9 (System Python) has security support until June 2029.Redis 6 has security support until January 2026.Ruby 3.2 has security support until March 2026.Amazon Linux 2023 end-of-life.Packages
+Clamav1.5 has security support until February 2027.Clamav1.4 has security support until August 2027.Clamav has security support until October 2025.Clang 18 has security support until December 2025.Dotnet9.0 has security support until May 2026.Dotnet8.0 has security support until November 2026.Dotnet6.0 has security support until November 2024.GDAL 3.10 has security support until August 2027.Amazon Corretto 25 has security support until June 2029.Amazon Corretto 24 has security support until October 2025.Amazon Corretto 23 has security support until April 2025.Amazon Corretto 22 has security support until October 2024.Amazon Corretto 21 has security support until June 2029.Amazon Corretto 17 has security support until June 2029.Amazon Corretto 11 has security support until June 2029.Amazon Corretto 8 has security support until June 2029.Kernel6.18 has security support until June 2029.Kernel6.12 has security support until June 2029.Kernel has security support until June 2029.LLVM 20 has security support until March 2026.LLVM 19 has security support until March 2026.LLVM 18 has security support until December 2025.MariaDB 10.5 has security support until June 2025.MariaDB 10.11 has security support until February 2028.NGINX has security support until June 2029.Node.js 24 has security support until April 2028.Node.js 22 has security support until April 2027.Node.js 20 has security support until April 2026.Node.js 18 has security support until April 2025.PCRE has security support until June 2024.PHP 8.5 has security support until June 2029.PHP 8.4 has security support until December 2028.PHP 8.3 has security support until December 2027.PHP 8.2 has security support until December 2026.PHP 8.1 has security support until December 2025.PostgreSQL 17 has security support until June 2029.PostgreSQL 16 has security support until November 2028.PostgreSQL 15 has security support until November 2027.Python 3.13 has security support until June 2029.Python 3.12 has security support until October 2028.Python 3.11 has security support until October 2027.Python 3.9 (System Python) has security support until June 2029.Redis 6 has security support until January 2026.Ruby 3.2 has security support until March 2026.Amazon Linux 2023 end-of-life.Packages
@@ -7 +7 @@ Clamav1.4 has security support until August 2027.Clamav has security support unt
-This is current as of 2025-09-16T22:44:43.042201.
+This is current as of 2026-02-24T18:56:52.719256.
@@ -10,0 +11,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * Clamav1.5 has security support until February 2027.
+
@@ -24,0 +27,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * Amazon Corretto 25 has security support until June 2029.
+
@@ -38,0 +43,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * Kernel6.18 has security support until June 2029.
+
@@ -42,0 +49,4 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * LLVM 20 has security support until March 2026.
+
+  * LLVM 19 has security support until March 2026.
+
@@ -51 +61,3 @@ This is current as of 2025-09-16T22:44:43.042201.
-  * NodeJS 22 has security support until April 2027.
+  * Node.js 24 has security support until April 2028.
+
+  * Node.js 22 has security support until April 2027.
@@ -53 +65 @@ This is current as of 2025-09-16T22:44:43.042201.
-  * NodeJS 20 has security support until April 2026.
+  * Node.js 20 has security support until April 2026.
@@ -55 +67 @@ This is current as of 2025-09-16T22:44:43.042201.
-  * NodeJS 18 has security support until April 2025.
+  * Node.js 18 has security support until April 2025.
@@ -58,0 +71,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * PHP 8.5 has security support until June 2029.
+
@@ -91,0 +106,13 @@ This is current as of 2025-09-16T22:44:43.042201.
+## Clamav1.5 has security support until February 2027
+
+  * Start Date: 2025-10-07
+
+  * End Date: 2027-02-01
+
+
+
+
+[https://docs.clamav.net/faq/faq-eol.html#version-support-matrix](https://docs.clamav.net/faq/faq-eol.html#version-support-matrix)
+
+Support period for Clamav1.5 differs from the main distribution end-of-life date.
+
@@ -107 +134 @@ Support period for Clamav1.4 differs from the main distribution end-of-life date
-  * Start Date: 2023-03-15
+  * Start Date: 2025-10-01
@@ -109 +136 @@ Support period for Clamav1.4 differs from the main distribution end-of-life date
-  * End Date: 2025-10-01
+  * End Date: 
@@ -120 +147 @@ Clamav 0.103 has support until Oct 1st 2025. Support period for clamav differs f
-  * Start Date: 2025-06-25
+  * Start Date: 2025-12-25
@@ -122 +149 @@ Clamav 0.103 has support until Oct 1st 2025. Support period for clamav differs f
-  * End Date: 2025-12-25
+  * End Date: 
@@ -182,0 +210,13 @@ GDAL version 3.10 is supported on Al2023 for a 2 years period
+## Amazon Corretto 25 has security support until June 2029
+
+  * Start Date: 2025-09-16
+
+  * End Date: 2029-06-30
+
+
+
+
+[https://aws.amazon.com/corretto/](https://aws.amazon.com/corretto/)
+
+The End of Life of Amazon Corretto 25 is in October 2032.
+
@@ -185 +225 @@ GDAL version 3.10 is supported on Al2023 for a 2 years period
-  * Start Date: 2025-03-18
+  * Start Date: 2025-10-21
@@ -187 +227 @@ GDAL version 3.10 is supported on Al2023 for a 2 years period
-  * End Date: 2025-10-21
+  * End Date: 
@@ -273,0 +314,13 @@ The last planned update of Amazon Corretto 8 is in October 2030, with an End of
+## Kernel6.18 has security support until June 2029
+
+  * Start Date: 2026-03-03
+
+  * End Date: 2029-06-30
+
+
+
+
+[https://aws.amazon.com/amazon-linux-ami/faqs/](https://aws.amazon.com/amazon-linux-ami/faqs/)
+
+There may be live patches available for a kernel for the first three months after it is released. Individual live patches don't get updates, but new live patches and new kernels may be released.
+
@@ -299,0 +353,26 @@ There may be live patches available for a kernel for the first three months afte
+## LLVM 20 has security support until March 2026
+
+  * Start Date: 2025-10-01
+
+  * End Date: 2026-03-31
+
+
+
+
+[https://releases.llvm.org/](https://releases.llvm.org/)
+
+LLVM version 20 is supported on Al2023 for a 6 month period
+
+## LLVM 19 has security support until March 2026
+
+  * Start Date: 2025-09-15
+
+  * End Date: 2026-03-15
+
+
+
+
+[https://releases.llvm.org/](https://releases.llvm.org/)
+
+LLVM version 19 is supported on Al2023 for a 6 month period
+
@@ -302 +381 @@ There may be live patches available for a kernel for the first three months afte
-  * Start Date: 2025-06-25
+  * Start Date: 2025-12-25
@@ -304 +383 @@ There may be live patches available for a kernel for the first three months afte
-  * End Date: 2025-12-25
+  * End Date: 
@@ -352 +431,14 @@ AL2023 will keep ingesting new upstream NGINX releases.
-## NodeJS 22 has security support until April 2027
+## Node.js 24 has security support until April 2028
+
+  * Start Date: 2025-10-28
+
+  * End Date: 2028-04-30
+
+
+
+
+[https://github.com/nodejs/release#release-schedule](https://github.com/nodejs/release#release-schedule)
+
+Support period for Node.js 24 differs from the main distribution end-of-life date.
+
+## Node.js 22 has security support until April 2027
@@ -363 +455 @@ AL2023 will keep ingesting new upstream NGINX releases.
-Support period for NodeJS 22 differs from the main distribution end-of-life date.
+Support period for Node.js 22 differs from the main distribution end-of-life date.
@@ -365 +457 @@ Support period for NodeJS 22 differs from the main distribution end-of-life date
-## NodeJS 20 has security support until April 2026
+## Node.js 20 has security support until April 2026
@@ -376 +468 @@ Support period for NodeJS 22 differs from the main distribution end-of-life date
-Support period for NodeJS 20 differs from the main distribution end-of-life date.
+Support period for Node.js 20 differs from the main distribution end-of-life date.
@@ -378 +470 @@ Support period for NodeJS 20 differs from the main distribution end-of-life date
-## NodeJS 18 has security support until April 2025
+## Node.js 18 has security support until April 2025
@@ -389 +481 @@ Support period for NodeJS 20 differs from the main distribution end-of-life date
-Support period for NodeJS 18 differs from the main distribution end-of-life date.
+Support period for Node.js 18 differs from the main distribution end-of-life date.
@@ -403,0 +496,13 @@ pcre version 1 is deprecated, replaced by pcre2. This support period is to allow
+## PHP 8.5 has security support until June 2029
+
+  * Start Date: 2025-11-20
+
+  * End Date: 2029-06-30
+
+
+
+
+[https://www.php.net/supported-versions](https://www.php.net/supported-versions)
+
+Support period for PHP 8.5 is the same as PHP 8.5 upstream end-of-life.
+
@@ -445 +550 @@ Support period for PHP 8.2 is the same as PHP 8.2 upstream end-of-life.
-  * Start Date: 2023-03-15
+  * Start Date: 2025-12-31
@@ -447 +552 @@ Support period for PHP 8.2 is the same as PHP 8.2 upstream end-of-life.
-  * End Date: 2025-12-31
+  * End Date: 
@@ -549 +654 @@ AL2023 has Python 3.9 as the System Python. Amazon will continue to security pat
-  * Start Date: 2023-03-15
+  * Start Date: 2026-01-31
@@ -551 +656 @@ AL2023 has Python 3.9 as the System Python. Amazon will continue to security pat
-  * End Date: 2026-01-31
+  * End Date: 
@@ -589,0 +695,4 @@ Package | Supported? | Start date | End date | Support
+` `7zip` ` |  Yes | 2023-03-15 | 2029-06-30 |  [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol)  
+` `7zip-reduced` ` |  Yes | 2023-03-15 | 2029-06-30 |  [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol)  
+` `7zip-standalone` ` |  Yes | 2023-03-15 | 2029-06-30 |  [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol)  
+` `7zip-standalone-all` ` |  Yes | 2023-03-15 | 2029-06-30 |  [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol)  
@@ -739,0 +849 @@ Upstream end-of-life for Python 3.9 (System Python) (python3) is 2029-06-30
+` `apr-util-lmdb` ` |  Yes | 2023-03-15 | 2029-06-30 |  [Amazon Linux 2023 end-of-life](./support-info-by-support-statement.html#support-info-by-support-statement-eol)  
@@ -895 +1005 @@ Upstream end-of-life for Python 3.9 (System Python) (python3) is 2029-06-30
-` `bcc` ` |  Yes | 2025-04-01 | 2029-06-30 |  [Kernel6.12 has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel6.12)  
+` `bcc` ` |  Yes | 2026-03-03 | 2029-06-30 |  [Kernel6.18 has security support until June 2029](./support-info-by-support-statement.html#support-info-by-support-statement-eol_kernel6.18)  
@@ -899 +1009 @@ Upstream end-of-life for Python 3.9 (System Python) (python3) is 2029-06-30
-This package has a runtime dependency on kernel-libbpf, and thus also falls under the support statements for kernel6.12. Amazon Linux will support a kernel until AL2023 End of Life