AWS sagemaker high security documentation change
Summary
Updated SageMaker HyperPod AMI release notes for April 23, 2026 with new component versions, added ARM64 support for Kubernetes v1.31-v1.34, deprecated AL2 in favor of AL2023, and enhanced version details for March 30, 2026 release.
Security assessment
The update includes security-relevant component upgrades: OpenSSL updated from 1.0.2k to 3.5.5 (addressing multiple CVEs), sudo from 1.8.23 to 1.9.15 (security patches), and Linux kernel upgrades (vulnerability fixes). These changes mitigate known vulnerabilities.
Diff
diff --git a/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md b/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md index 688f56a4e..d23d26c7e 100644 --- a//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md +++ b//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md @@ -7 +7 @@ -April 20, 2026March 01, 2026February 12, 2026January 25, 2026December 29, 2025November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 +April 23, 2026March 30, 2026March 01, 2026February 12, 2026January 25, 2026December 29, 2025November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 @@ -13 +13,1271 @@ The following release notes track the latest updates for Amazon SageMaker HyperP -## SageMaker Hyperpod AMI releases for Amazon EKS: April 20, 2026 +###### Note + +EKS workloads run inside containers that bundle their own CUDA toolkit, so the maximum supported version determines which containerized CUDA versions are compatible with the host driver. + + * **Maximum Supported CUDA Version** — The highest CUDA version the installed NVIDIA driver can support. Your containerized workloads can use any CUDA version up to the maximum supported version. + + * **NVIDIA CUDA Toolkit** — The CUDA toolkit version installed on the host. + + + + +## SageMaker Hyperpod AMI releases for Amazon EKS: April 23, 2026 + +**AMI general updates** + + * Released updates for SageMaker Hyperpod AMI for Amazon EKS versions 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34. + + * Base DLAMI release note is available [here](https://docs.aws.amazon.com//dlami/latest/devguide/appendix-ami-release-notes.html#appendix-ami-release-notes-base). + + + + +**SageMaker Hyperpod DLAMI for Amazon EKS support** + +This release includes the following updates: + +Kubernetes v1.28 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10.248-247.988.amzn2.x86_64 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.14, build 0bab007 + + * Runc version: 1.3.4 + + * Containerd version: 1.7.29 + + * aws CLI v2 version: aws-cli/1.44.50 Python/3.10.17 Linux/5.10.248-247.988.amzn2.x86_64 botocore/1.42.60 + + * aws SSM Agent version: 3.3.3598.0 + + * aws Neuronx DKMS version: 2.26.5.0 + + * NVIDIA Driver version: 570.211.01 + + * Maximum Supported CUDA Version: 12.8 + + * NVIDIA CUDA Toolkit version: 12.2 + + * EFA Installer version: 1.45.0 + + * ENA Driver version: 2.16.1g + + * Python version: 3.7.16 + + * Kubernetes version: v1.28.15-eks-ecaa3a6 + + * iptables-services version: 1.8.4 + + * nginx version: 1.20.1 + + * nvme-cli version: 1.11.1 + + * epel-release version: 7 + + * stress version: 1.0.4 + + * collectd version: 5.8.1 + + * acl version: 2.2.51 + + * rsyslog version: 8.24.0 + + * lustre-client version: 2.12.8 + + * systemd version: 219 + + * openssh version: 7.4 + + * sudo version: 1.8.23 + + * gcc version: 7.3.1 + + * cmake version: 2.8.12.2 + + * git version: 2.47.3 + + * make version: 3.82 + + * cloudwatch-agent version: 1.300064.2 + + * nfs-utils version: 1.3.0 + + * lvm2 version: 2.02.187 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 60.0 + + * AL2023 (x86_64): + + * Linux Kernel version: 6.1.166-197.305.amzn2023.x86_64 + + * Glibc version: 2.34 + + * OpenSSL version: 3.5.5 + + * FSx Lustre Client version: 2.15.6 + + * Runc version: 1.3.4 + + * Containerd version: 1.7.27 + + * aws SSM Agent version: 3.3.4108.0 + + * aws Neuronx DKMS version: 2.27.4.0 + + * NVIDIA Driver version: 580.126.09 + + * Maximum Supported CUDA Version: 13.0 + + * NVIDIA CUDA Toolkit version: 12.8 + + * EFA Installer version: 1.47.0 + + * ENA Driver version: 2.16.1g + + * Python version: 3.9.25 + + * Kubernetes version: v1.28.15-eks-ecaa3a6 + + * iptables-services version: 1.8.8 + + * nginx version: 1.28.3 + + * nvme-cli version: 2.13 1.13 + + * stress version: 1.0.7 + + * collectd version: 5.12.0. + + * acl version: 2.3.1 + + * lustre-client version: 2.15.6 + + * systemd version: 252 + + * openssh version: 8.7 + + * sudo version: 1.9.15 + + * gcc version: 11.5.0 + + * cmake version: 3.22.2 + + * git version: 2.50.1 + + * make version: 4.3 + + * cloudwatch-agent version: 1.300064.2 + + * nfs-utils version: 2.5.4 + + * lvm2 version: 2.03.16 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 61.0 + + + + +Kubernetes v1.29 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** +