AWS sagemaker high security documentation change
Summary
Added June 19, 2026 release notes for SageMaker Hyperpod AMI on Amazon EKS, including updates for Kubernetes versions 1.28-1.35 with detailed component versions for AL2 and AL2023 architectures.
Security assessment
The update includes security-relevant component upgrades: OpenSSL updated from 1.0.2k-fips to 3.5.5 (addressing vulnerabilities in older versions), Linux kernel upgrades (e.g., 5.10 to 6.1/6.12 with security patches), containerd/runc updates (container runtime security fixes), and NVIDIA driver updates (GPU security improvements). These mitigate known vulnerabilities in cryptographic libraries, kernel exploits, and container runtime threats.
Diff
diff --git a/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md b/sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md index 0f9307ee2..e7ed09dd8 100644 --- a//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md +++ b//sagemaker/latest/dg/sagemaker-hyperpod-release-ami-eks.md @@ -7 +7 @@ -May 27, 2026May 07, 2026April 23, 2026March 30, 2026March 01, 2026February 12, 2026January 25, 2026December 29, 2025November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 +June 19, 2026May 27, 2026May 07, 2026April 23, 2026March 30, 2026March 01, 2026February 12, 2026January 25, 2026December 29, 2025November 22, 2025November 07, 2025October 29, 2025October 22, 2025September 29, 2025August 25, 2025August 12, 2025August 6, 2025July 31, 2025July 15, 2025June 09, 2025May 22, 2025May 07, 2025April 28, 2025April 18, 2025February 18, 2025January 22, 2025December 21, 2024December 13, 2024November 24, 2024November 15, 2024November 11, 2024October 21, 2024September 10, 2024 @@ -23,0 +24,1265 @@ EKS workloads run inside containers that bundle their own CUDA toolkit, so the m +## SageMaker Hyperpod AMI releases for Amazon EKS: June 19, 2026 + +**AMI general updates** + + * Released updates for SageMaker Hyperpod AMI for Amazon EKS versions 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35. + + * Base DLAMI release note is available [here](https://docs.aws.amazon.com//dlami/latest/devguide/appendix-ami-release-notes.html#appendix-ami-release-notes-base). + + + + +**SageMaker Hyperpod DLAMI for Amazon EKS support** + +This release includes the following updates: + +Kubernetes v1.28 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10.248-247.988.amzn2.x86_64 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.14, build 0bab007 + + * Runc version: 1.3.4 + + * Containerd version: 1.7.29 + + * aws CLI v2 version: aws-cli/1.44.50 Python/3.10.17 Linux/5.10.248-247.988.amzn2.x86_64 botocore/1.42.60 + + * aws SSM Agent version: 3.3.3598.0 + + * aws Neuronx DKMS version: 2.26.5.0 + + * NVIDIA Driver version: 570.211.01 + + * Maximum Supported CUDA Version version: 12.8 + + * NVIDIA CUDA Toolkit version: 12.2 + + * EFA Installer version: 1.45.0 + + * ENA Driver version: 2.16.1g + + * Python version: 3.7.16 + + * Kubernetes version: v1.28.15-eks-ecaa3a6 + + * iptables-services version: 1.8.4 + + * nginx version: 1.20.1 + + * nvme-cli version: 1.11.1 + + * epel-release version: 7 + + * stress version: 1.0.4 + + * collectd version: 5.8.1 + + * acl version: 2.2.51 + + * rsyslog version: 8.24.0 + + * lustre-client version: 2.12.8 + + * systemd version: 219 + + * openssh version: 7.4 + + * sudo version: 1.8.23 + + * gcc version: 7.3.1 + + * cmake version: 2.8.12.2 + + * git version: 2.47.3 + + * make version: 3.82 + + * cloudwatch-agent version: 1.300066.2 + + * nfs-utils version: 1.3.0 + + * lvm2 version: 2.02.187 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 60.0 + + * AL2023 (x86_64): + + * Linux Kernel version: 6.1.170-213.321.amzn2023.x86_64 + + * Glibc version: 2.34 + + * OpenSSL version: 3.5.5 + + * FSx Lustre Client version: 2.15.6 + + * Runc version: 1.3.4 + + * Containerd version: 1.7.27 + + * aws SSM Agent version: 3.3.4108.0 + + * aws Neuronx DKMS version: 2.27.4.0 + + * NVIDIA Driver version: 580.150 + + * Maximum Supported CUDA Version version: 13.0 + + * NVIDIA CUDA Toolkit version: 12.8 + + * EFA Installer version: 1.47.0 + + * ENA Driver version: 2.16.1g + + * Python version: 3.9.25 + + * Kubernetes version: v1.28.15-eks-ecaa3a6 + + * iptables-services version: 1.8.8 + + * nginx version: 1.30.0 + + * nvme-cli version: 2.13 1.13 + + * stress version: 1.0.7 + + * collectd version: 5.12.0. + + * acl version: 2.3.1 + + * lustre-client version: 2.15.6 + + * systemd version: 252 + + * openssh version: 8.7 + + * sudo version: 1.9.15 + + * gcc version: 11.5.0 + + * cmake version: 3.22.2 + + * git version: 2.50.1 + + * make version: 4.3 + + * cloudwatch-agent version: 1.300064.2 + + * nfs-utils version: 2.5.4 + + * lvm2 version: 2.03.16 + + * ec2-instance-connect version: 1.1 + + * aws-cfn-bootstrap version: 2.0 + + * rdma-core version: 61.0 + + + + +Kubernetes v1.29 + + + * **AL2 is now deprecated. Kubernetes AMI is based on AL2023.** + + * AL2 (x86_64): + + * Linux Kernel version: 5.10.248-247.988.amzn2.x86_64 + + * Glibc version: 2.26 + + * OpenSSL version: 1.0.2k-fips + + * FSx Lustre Client version: 2.12.8 + + * Docker version: Docker version 25.0.14, build 0bab007 +