AWS ground-station documentation change
Summary
Updated agent version to 1.0.5953.0 with new release date. Added separate checksums for AL2023 and AL2. Updated validation instructions to specify OS version matching and changed RPM verification command.
Security assessment
The changes update version information and checksums for a new release, add support for Amazon Linux 2023, and improve RPM validation instructions. While validation helps ensure software integrity, there's no evidence of a specific security vulnerability being addressed. The changes maintain existing security practices without introducing new security features.
Diff
diff --git a/ground-station/latest/gs-agent-ug/rpm-install-validation.md b/ground-station/latest/gs-agent-ug/rpm-install-validation.md index fe5bf8371..db2d6d291 100644 --- a//ground-station/latest/gs-agent-ug/rpm-install-validation.md +++ b//ground-station/latest/gs-agent-ug/rpm-install-validation.md @@ -11 +11 @@ Latest Agent VersionVerify the RPM -The latest RPM version, MD5 hash validated from RPM, and SHA256 hash using sha256sum are shown below. These values, combined, can be used to validate the RPM version being used for the ground station agent. +The latest RPM version, MD5 hash validated from RPM, and SHA256 hash using sha256sum are shown below. These values, combined, can be used to validate the RPM version being used for the AWS Ground Station Agent. @@ -15 +15 @@ The latest RPM version, MD5 hash validated from RPM, and SHA256 hash using sha25 -### Version 1.0.4382.0 +### Version 1.0.5953.0 @@ -17 +17 @@ The latest RPM version, MD5 hash validated from RPM, and SHA256 hash using sha25 -Release Date: 11/18/2025 +Release Date: 06/29/2026 @@ -19 +19 @@ Release Date: 11/18/2025 -RPM Checksums: +AL2023 RPM Checksums: @@ -21 +21 @@ RPM Checksums: - * SHA256: `620fd307124f1276194f2faa0104fe0549427ae18e4f5655444f8c30b919c640` + * SHA256: `083eaf4da2095250ab901251446c67b764a574a3cee34c7d2c6d41aa5790ae16` @@ -23 +23,10 @@ RPM Checksums: - * MD5: `73e06dcad44adaccbe2ab005218abfc7` + * MD5: `76fedce9de360cbb0464986214bcfbc1` + + + + +AL2 RPM Checksums: + + * SHA256: `f2905ff0da26473669ac2d3c096b04c8e423166be3e5b1dcf39912a2f6002915` + + * MD5: `c178f0d7f1ad86e0717c7fac2c6edaf2` @@ -30 +39 @@ Changes: - * Update client retry behavior when server indicates overload. + * Add support for Amazon Linux 2023 @@ -46 +55 @@ Tools that you will need to be able to verify this RPM installation are: -Both tools come by default on Amazon Linux 2. These tools will help to validate that the RPM you are using is the correct version. First download the latest RPM from the S3 bucket (see [Download agent](./installing-the-agent.html#download-agent) for instructions on downloading the RPM). Once this file is downloaded, there will be a few things to check: +Both tools come by default on Amazon Linux 2 and Amazon Linux 2023. These tools will help to validate that the RPM you are using is the correct version. First download the latest RPM from the S3 bucket (see [Download agent](./installing-the-agent.html#download-agent) for instructions on downloading the RPM). Once this file is downloaded, there will be a few things to check: @@ -53 +62 @@ Both tools come by default on Amazon Linux 2. These tools will help to validate -Take this value and compare it to the table above. This shows that the RPM file that is downloaded is a valid file to use that AWS Ground Station has vended out to customers. If the hashes do not match, do not install the RPM, and delete it from the compute instance. +Compare this value to the section of the table above that corresponds to your instance's Linux OS version. A match shows that the RPM you downloaded is a valid file that AWS Ground Station has vended out to customers. If the hashes do not match, do not install the RPM, and delete it from the compute instance. @@ -57 +66 @@ Take this value and compare it to the table above. This shows that the RPM file - rpm -Kv ./aws-groundstation-agent.rpm + rpm -qp --qf '%{SIGMD5}\n' ./aws-groundstation-agent.rpm @@ -60 +69 @@ Take this value and compare it to the table above. This shows that the RPM file -Validate that the MD5 hash listed here is the same as the MD5 hash of the version that is in the table above. Once both of these hashes have been validated against this table that is listed within AWS Docs, the customer can be ensured that the RPM that was downloaded and installed is the safe and uncompromised version of the RPM. +Validate that the MD5 hash listed here is the same as the MD5 hash in the section of the table above that corresponds to your instance's Linux OS version. After you validate both hashes against the table in the AWS documentation, you can be confident that the RPM you downloaded and installed is the safe, uncompromised version vended by AWS Ground Station.