AWS Security ChangesHomeSearch

AWS linux documentation change

Service: linux · 2026-03-07 · Documentation low

File: linux/al2023/release-notes/support-info-by-support-statement.md

Summary

Updated package security support end dates, added new package versions (Corretto 25, Clamav1.5, Kernel6.18, LLVM 19/20, Node.js 24, PHP 8.5), updated current timestamp, and restructured some sections

Security assessment

The changes update security support timelines and add documentation for new package versions' security support periods. While these updates are related to security maintenance, there's no evidence of addressing specific vulnerabilities or security incidents.

Diff

diff --git a/linux/al2023/release-notes/support-info-by-support-statement.md b/linux/al2023/release-notes/support-info-by-support-statement.md
index 98031cefe..b446c9f29 100644
--- a//linux/al2023/release-notes/support-info-by-support-statement.md
+++ b//linux/al2023/release-notes/support-info-by-support-statement.md
@@ -3 +3 @@
-Amazon Corretto 11 has security support until June 2029Amazon Corretto 17 has security support until June 2029Amazon Corretto 21 has security support until June 2029Amazon Corretto 22 has security support until October 2024Amazon Corretto 23 has security support until April 2025Amazon Corretto 24 has security support until October 2025Amazon Corretto 8 has security support until June 2029Amazon Linux 2023 end-of-lifeClamav has security support until October 2025Clamav1.4 has security support until August 2027Clang 18 has security support until December 2025Dotnet6.0 has security support until November 2024Dotnet8.0 has security support until November 2026Dotnet9.0 has security support until May 2026GDAL 3.10 has security support until August 2027Kernel has security support until June 2029Kernel6.12 has security support until June 2029LLVM 18 has security support until December 2025MariaDB 10.11 has security support until February 2028MariaDB 10.5 has security support until June 2025NGINX has security support until June 2029NodeJS 18 has security support until April 2025NodeJS 20 has security support until April 2026NodeJS 22 has security support until April 2027PCRE has security support until June 2024PHP 8.1 has security support until December 2025PHP 8.2 has security support until December 2026PHP 8.3 has security support until December 2027PHP 8.4 has security support until December 2028PostgreSQL 15 has security support until November 2027PostgreSQL 16 has security support until November 2028PostgreSQL 17 has security support until June 2029Python 3.11 has security support until October 2027Python 3.12 has security support until October 2028Python 3.13 has security support until June 2029Python 3.9 (System Python) has security support until June 2029Redis 6 has security support until January 2026Ruby 3.2 has security support until March 2026
+Amazon Corretto 11 has security support until June 2029Amazon Corretto 17 has security support until June 2029Amazon Corretto 21 has security support until June 2029Amazon Corretto 22 has security support until October 2024Amazon Corretto 23 has security support until April 2025Amazon Corretto 24 has security support until October 2025Amazon Corretto 25 has security support until June 2029Amazon Corretto 8 has security support until June 2029Amazon Linux 2023 end-of-lifeClamav has security support until October 2025Clamav1.4 has security support until August 2027Clamav1.5 has security support until February 2027Clang 18 has security support until December 2025Dotnet6.0 has security support until November 2024Dotnet8.0 has security support until November 2026Dotnet9.0 has security support until May 2026GDAL 3.10 has security support until August 2027Kernel has security support until June 2029Kernel6.12 has security support until June 2029Kernel6.18 has security support until June 2029LLVM 18 has security support until December 2025LLVM 19 has security support until March 2026LLVM 20 has security support until March 2026MariaDB 10.11 has security support until February 2028MariaDB 10.5 has security support until June 2025NGINX has security support until June 2029Node.js 18 has security support until April 2025Node.js 20 has security support until April 2026Node.js 22 has security support until April 2027Node.js 24 has security support until April 2028PCRE has security support until June 2024PHP 8.1 has security support until December 2025PHP 8.2 has security support until December 2026PHP 8.3 has security support until December 2027PHP 8.4 has security support until December 2028PHP 8.5 has security support until June 2029PostgreSQL 15 has security support until November 2027PostgreSQL 16 has security support until November 2028PostgreSQL 17 has security support until June 2029Python 3.11 has security support until October 2027Python 3.12 has security support until October 2028Python 3.13 has security support until June 2029Python 3.9 (System Python) has security support until June 2029Redis 6 has security support until January 2026Ruby 3.2 has security support until March 2026
@@ -9 +9 @@ Support statements information for packages in Amazon Linux 2023 (AL2023).
-This is current as of 2025-09-16T22:44:43.042201.
+This is current as of 2026-02-24T18:56:52.719256.
@@ -24,0 +25,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * Amazon Corretto 25 has security support until June 2029
+
@@ -32,0 +35,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * Clamav1.5 has security support until February 2027
+
@@ -46,0 +51,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * Kernel6.18 has security support until June 2029
+
@@ -48,0 +55,4 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * LLVM 19 has security support until March 2026
+
+  * LLVM 20 has security support until March 2026
+
@@ -55 +65 @@ This is current as of 2025-09-16T22:44:43.042201.
-  * NodeJS 18 has security support until April 2025
+  * Node.js 18 has security support until April 2025
@@ -57 +67 @@ This is current as of 2025-09-16T22:44:43.042201.
-  * NodeJS 20 has security support until April 2026
+  * Node.js 20 has security support until April 2026
@@ -59 +69,3 @@ This is current as of 2025-09-16T22:44:43.042201.
-  * NodeJS 22 has security support until April 2027
+  * Node.js 22 has security support until April 2027
+
+  * Node.js 24 has security support until April 2028
@@ -70,0 +83,2 @@ This is current as of 2025-09-16T22:44:43.042201.
+  * PHP 8.5 has security support until June 2029
+
@@ -156 +169,0 @@ Package | Note
-` `collectd-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
@@ -163,6 +175,0 @@ Package | Note
-` `libwebp-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `openmpi-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `R-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `R-java-devel` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `sphinx-java` ` | This package has a runtime dependency on java-21-amazon-corretto-headless, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
-` `systemtap-runtime-java` ` | This package has a runtime dependency on java-21-amazon-corretto-devel, and thus also falls under the support statements for java-21-amazon-corretto. Upstream end-of-life for Amazon Corretto 21 (java-21-amazon-corretto) is 2030-10-01. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
@@ -223 +230,3 @@ Package | Note
-  * Start Date: 2025-03-18
+###### End of Support
+
+This package is no longer supported and will not receive security updates.
@@ -225 +234 @@ Package | Note
-  * End Date: 2025-10-21
+  * Support Ended: 2025-10-21
@@ -244,0 +254,31 @@ Package | Note
+## Amazon Corretto 25 has security support until June 2029
+
+  * Start Date: 2025-09-16
+
+  * End Date: 2029-06-30
+
+
+
+
+[https://aws.amazon.com/corretto/](https://aws.amazon.com/corretto/)
+
+The End of Life of Amazon Corretto 25 is in October 2032.
+
+### Packages
+
+Package | Note  
+---|---  
+` `collectd-java` ` | This package has a runtime dependency on java-25-amazon-corretto-headless, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `java-25-amazon-corretto` ` | Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `java-25-amazon-corretto-debugsymbols` ` | Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `java-25-amazon-corretto-devel` ` | Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `java-25-amazon-corretto-headless` ` | Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `java-25-amazon-corretto-javadoc` ` | Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `java-25-amazon-corretto-jmods` ` | Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `libwebp-java` ` | This package has a runtime dependency on java-25-amazon-corretto-headless, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `openmpi-java` ` | This package has a runtime dependency on java-25-amazon-corretto-headless, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `R-java` ` | This package has a runtime dependency on java-25-amazon-corretto-headless, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `R-java-devel` ` | This package has a runtime dependency on java-25-amazon-corretto-devel, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `sphinx-java` ` | This package has a runtime dependency on java-25-amazon-corretto-headless, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+` `systemtap-runtime-java` ` | This package has a runtime dependency on java-25-amazon-corretto-devel, and thus also falls under the support statements for java-25-amazon-corretto. Upstream end-of-life for Amazon Corretto 25 (java-25-amazon-corretto) is 2032-10-31. The end-of-life of Amazon Linux 2023 is June 2029. From this point, the Amazon Linux 2023 packages will no longer receive any updates from AWS.  
+  
@@ -281,0 +322,4 @@ Package
+` `7zip` `  
+` `7zip-reduced` `  
+` `7zip-standalone` `  
+` `7zip-standalone-all` `  
@@ -421,0 +466 @@ Package
+` `apr-util-lmdb` `  
@@ -524,0 +570 @@ Package
+` `below` `  
@@ -804,0 +851,4 @@ Package
+` `corosync` `  
+` `corosync-vqsim` `  
+` `corosynclib` `  
+` `corosynclib-devel` `  
@@ -893,0 +944 @@ Package
+` `decibels` `  
@@ -971,0 +1023,4 @@ Package
+` `drbd` `  
+` `drbd-bash-completion` `  
+` `drbd-selinux` `  
+` `drbd-udev` `  
@@ -2131 +2185,0 @@ Package
-` `grpc-devel` `  
@@ -2228,0 +2283 @@ Package
+` `heif-pixbuf-loader` `  
@@ -3078,0 +3134,2 @@ Package
+` `libde265` `  
+` `libde265-devel` `  
@@ -3204,0 +3262,3 @@ Package
+` `libheif` `  
+` `libheif-devel` `  
+` `libheif-tools` `  
@@ -3271,0 +3332,8 @@ Package
+` `libknet1` `  
+` `libknet1-compress-plugins-all` `  
+` `libknet1-compress-zlib-plugin` `  
+` `libknet1-crypto-nss-plugin` `  
+` `libknet1-crypto-openssl-plugin` `  
+` `libknet1-crypto-plugins-all` `  
+` `libknet1-devel` `  
+` `libknet1-plugins-all` `  
@@ -3342,0 +3411,2 @@ Package
+` `libnozzle1` `  
+` `libnozzle1-devel` `  
@@ -3853,0 +3924 @@ Package
+` `lsscsi` `  
@@ -4047,0 +4119,7 @@ Package
+` `maven3.9` `  
+` `maven3.9-amazon-corretto11` `  
+` `maven3.9-amazon-corretto17` `  
+` `maven3.9-amazon-corretto21` `  
+` `maven3.9-amazon-corretto8` `  
+` `maven3.9-javadoc` `  
+` `maven3.9-lib` `  
@@ -4117,0 +4196 @@ Package
+` `mod_dav_svn` `  
@@ -4133,0 +4213 @@ Package
+` `mount-s3` `  
@@ -4142,0 +4223,5 @@ Package
+` `mpg123` `  
+` `mpg123-devel` `  
+` `mpg123-libs` `  
+` `mpg123-plugins-jack` `  
+` `mpg123-plugins-pulseaudio` `  
@@ -4262,0 +4348,2 @@ Package
+` `nvidia-repo-cdn` `  
+` `nvidia-repo-s3` `  
@@ -4408,0 +4496,8 @@ Package
+` `pacemaker-cli` `  
+` `pacemaker-cluster-libs` `  
+` `pacemaker-cts` `  
+` `pacemaker-doc` `  
+` `pacemaker-libs` `  
+` `pacemaker-libs-devel` `  
+` `pacemaker-remote` `  
+` `pacemaker-schemas` `  
@@ -4461,0 +4557 @@ Package
+` `pcs-snmp` `  
@@ -4573,0 +4670 @@ Package
+` `perl-Convert-BinHex` `  
@@ -4583,0 +4681 @@ Package
+` `perl-Crypt-Blowfish` `  
@@ -4584,0 +4683,3 @@ Package
+` `perl-Crypt-CBC` `  
+` `perl-Crypt-DES` `  
+` `perl-Crypt-IDEA` `  
@@ -4592,0 +4694,2 @@ Package
+` `perl-Crypt-Rijndael` `  
+` `perl-Crypt-SSLeay` `  
@@ -4602,0 +4706 @@ Package
+` `perl-Data-Dumper-Names` `  
@@ -4688,0 +4793 @@ Package
+` `perl-Email-Valid` `  
@@ -4842,0 +4948 @@ Package
+` `perl-IO-SessionData` `  
@@ -4919,0 +5026 @@ Package
+` `perl-Math-BigInt-FastCalc-tests` `  
@@ -4931,0 +5039 @@ Package
+` `perl-MIME-tools` `  
@@ -5026,0 +5135,2 @@ Package
+` `perl-Net-SNMP` `  
+` `perl-Net-SNMP-tests` `  
@@ -5156,0 +5267 @@ Package
+` `perl-SOAP-Lite` `  
@@ -5267,0 +5379 @@ Package
+` `perl-Test-Most` `  
@@ -5312,0 +5425 @@ Package
+` `perl-Test-XML` `  
@@ -5405,0 +5519 @@ Package
+` `perl-XML-Parser-Lite` `  
@@ -5409,0 +5524 @@ Package
+` `perl-XML-SemanticDiff` `  
@@ -5600,0 +5716 @@ Package