AWS sagemaker high security documentation change
Summary
Added new AMI release details for May 27, 2026 including updates for Kubernetes versions 1.28-1.35. Updated component versions across AL2/AL2023 OS, NVIDIA drivers, CUDA toolkits, containerd, OpenSSL, Linux kernels, and other dependencies.
Security assessment
The update includes security-critical component upgrades: OpenSSL updated from 1.0.2k to 3.5.5 (addressing multiple CVEs), Linux kernel upgrades (e.g., 5.10 → 6.1), containerd updates from 1.7.29 to 2.2.3 (fixing container escape vulnerabilities), and SSM Agent updates. These mitigate known vulnerabilities in cryptographic libraries, container runtimes, and remote management systems.
Diff
diff --git a/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md b/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md index eaedba9cc..0f9307ee2 100644 --- a//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md +++ b//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md @@ -7 +7 @@ -May 07, 2026April 23, 2026March 30, 2026March 01, 2026February 12, 2026January 25, 2026December 29, 2025November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 +May 27, 2026May 07, 2026April 23, 2026March 30, 2026March 01, 2026February 12, 2026January 25, 2026December 29, 2025November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 @@ -23,0 +24,1409 @@ EKS workloads run inside containers that bundle their own CUDA toolkit, so the m +## SageMaker Hyperpod AMI releases for Amazon EKS: May 27, 2026 + +**AMI general updates** + + * Released updates for SageMaker Hyperpod AMI for Amazon EKS versions 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35. + + * Base DLAMI release note is available [here](https://docs.aws.amazon.com//dlami/latest/devguide/appendix-ami-release-notes.html#appendix-ami-release-notes-base). + + + + +**SageMaker Hyperpod DLAMI for Amazon EKS support** + +This release includes the following updates: + +Kubernetes v1.28 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10.248-247.988.amzn2.x86_64 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.14, build 0bab007 + + * Runc version: 1.3.4 + + * Containerd version: 1.7.29 + + * aws CLI version: aws-cli/1.44.50 Python/3.10.17 Linux/5.10.248-247.988.amzn2.x86_64 botocore/1.42.60 + + * aws SSM Agent version: 3.3.3598.0 + + * aws Neuronx DKMS version: 2.26.5.0 + + * NVIDIA Driver version: 570.211.01 + + * Maximum Supported CUDA Version version: 12.8 + + * NVIDIA CUDA Toolkit version: 12.2 + + * EFA Installer version: 1.45.0 + + * ENA Driver version: 2.16.1g + + * Python version: 3.7.16 + + * Kubernetes version: v1.28.15-eks-ecaa3a6 + + * iptables-services version: 1.8.4 + + * nginx version: 1.20.1 + + * nvme-cli version: 1.11.1 + + * epel-release version: 7 + + * stress version: 1.0.4 + + * collectd version: 5.8.1 + + * acl version: 2.2.51 + + * rsyslog version: 8.24.0 + + * lustre-client version: 2.12.8 + + * systemd version: 219 + + * openssh version: 7.4 + + * sudo version: 1.8.23 + + * gcc version: 7.3.1 + + * cmake version: 2.8.12.2 + + * git version: 2.47.3 + + * make version: 3.82 + + * cloudwatch-agent version: 1.300064.2 + + * nfs-utils version: 1.3.0 + + * lvm2 version: 2.02.187 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 60.0 + + * AL2023 (x86_64): + + * Linux Kernel version: 6.1.170-210.320.amzn2023.x86_64 + + * Glibc version: 2.34 + + * OpenSSL version: 3.5.5 + + * FSx Lustre Client version: 2.15.6 + + * Runc version: 1.3.4 + + * Containerd version: 1.7.27 + + * aws SSM Agent version: 3.3.4108.0 + + * aws Neuronx DKMS version: 2.27.4.0 + + * NVIDIA Driver version: 580.126.09 + + * Maximum Supported CUDA Version version: 13.0 + + * NVIDIA CUDA Toolkit version: 12.8 + + * EFA Installer version: 1.47.0 + + * ENA Driver version: 2.16.1g + + * Python version: 3.9.25 + + * Kubernetes version: v1.28.15-eks-ecaa3a6 + + * iptables-services version: 1.8.8 + + * nginx version: 1.28.3 + + * nvme-cli version: 2.13 1.13 + + * stress version: 1.0.7 + + * collectd version: 5.12.0. + + * acl version: 2.3.1 + + * lustre-client version: 2.15.6 + + * systemd version: 252 + + * openssh version: 8.7 + + * sudo version: 1.9.15 + + * gcc version: 11.5.0 + + * cmake version: 3.22.2 + + * git version: 2.50.1 + + * make version: 4.3 + + * cloudwatch-agent version: 1.300064.2 + + * nfs-utils version: 2.5.4 + + * lvm2 version: 2.03.16 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 61.0 + + + + +Kubernetes v1.29 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10.248-247.988.amzn2.x86_64 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.14, build 0bab007 +