AWS dlami: Expand unpatched CVE warning to PyTorch 2.9-2.12 DLAMIs
Summary
Broadened the notice about unpatched CVEs from PyTorch 2.9 to versions 2.9 through 2.12, updated migration recommendation to PyTorch 2.13+, and added Ubuntu Pro base GPU AMI release note links.
Security assessment
Documents that certain PyTorch DLAMI versions contain unpatched CVEs and advises migrating to PyTorch 2.13+; this is security guidance rather than a fix for a specific vulnerability, and no CVE ID is given.
Evidence
PyTorch DLAMIs for versions 2.9 through 2.12 (that is, PyTorch 2.9, 2.10, 2.11, and 2.12) contain known common vulnerabilities and exposures (CVEs) that cannot be patched. Because we maintain a separate DLAMI currency release for each PyTorch version, we do not backport security fixes to these images.
Diff
diff --git a/dlami/latest/devguide/appendix-ami-release-notes.md b/dlami/latest/devguide/appendix-ami-release-notes.md index 808209de1..a7ca1e0b5 100644 --- a//dlami/latest/devguide/appendix-ami-release-notes.md +++ b//dlami/latest/devguide/appendix-ami-release-notes.md @@ -15 +15 @@ For release notes for DLAMI frameworks that we no longer support, see the **Unsu -###### Security patches not available for PyTorch 2.9 DLAMIs +###### Security patches not available for PyTorch 2.9 through 2.12 DLAMIs @@ -17 +17 @@ For release notes for DLAMI frameworks that we no longer support, see the **Unsu -PyTorch DLAMIs for versions earlier than 2.10 (that is, PyTorch 2.9) contain known common vulnerabilities and exposures (CVEs) that cannot be patched. Because we maintain a separate DLAMI currency release for each PyTorch version, we do not backport security fixes to these images. +PyTorch DLAMIs for versions 2.9 through 2.12 (that is, PyTorch 2.9, 2.10, 2.11, and 2.12) contain known common vulnerabilities and exposures (CVEs) that cannot be patched. Because we maintain a separate DLAMI currency release for each PyTorch version, we do not backport security fixes to these images. @@ -19 +19 @@ PyTorch DLAMIs for versions earlier than 2.10 (that is, PyTorch 2.9) contain kno -We recommend that you migrate to PyTorch 2.10 or later DLAMIs, which continue to receive security patches. +We recommend that you migrate to PyTorch 2.13 or later DLAMIs, which continue to receive security patches. @@ -51,0 +52,2 @@ Below are the release notes for X86 Base DLAMI: + * [Base GPU AMI (Ubuntu Pro 24.04)](./aws-deep-learning-x86-base-gpu-ami-ubuntu-pro-24-04.html) + @@ -53,0 +56,2 @@ Below are the release notes for X86 Base DLAMI: + * [Base GPU AMI (Ubuntu Pro 22.04)](./aws-deep-learning-x86-base-gpu-ami-ubuntu-pro-22-04.html) + @@ -74,0 +79,2 @@ Below are the release notes for ARM64 Base DLAMI: + * [ARM64 Base GPU AMI (Ubuntu Pro 24.04)](./aws-deep-learning-arm64-base-gpu-ami-ubuntu-pro-24-04.html) + @@ -76,0 +83,2 @@ Below are the release notes for ARM64 Base DLAMI: + * [ARM64 Base GPU AMI (Ubuntu Pro 22.04)](./aws-deep-learning-arm64-base-gpu-ami-ubuntu-pro-22-04.html) +