AWS dlami: Expand unpatched CVE warning and add Ubuntu Pro support rows
Summary
Broadened the unpatched CVE notice to PyTorch 2.9-2.12, updated migration recommendation to PyTorch 2.13+, and added Ubuntu Pro 24.04/22.04 support policy rows.
Security assessment
Security-adjacent guidance warning that PyTorch 2.9-2.12 DLAMIs carry unpatched CVEs and recommending migration to patched versions; no specific CVE is referenced.
Evidence
We recommend that you migrate to PyTorch 2.13 or later DLAMIs, which continue to receive security patches.
Diff
diff --git a/dlami/latest/devguide/dlami-support-policy-table.md b/dlami/latest/devguide/dlami-support-policy-table.md index f14b243f8..4dcb3030c 100644 --- a//dlami/latest/devguide/dlami-support-policy-table.md +++ b//dlami/latest/devguide/dlami-support-policy-table.md @@ -13 +13 @@ For more details see the [Support Policy](https://docs.aws.amazon.com/dlami/late -###### Security patches not available for PyTorch 2.9 DLAMIs +###### Security patches not available for PyTorch 2.9 through 2.12 DLAMIs @@ -15 +15 @@ For more details see the [Support Policy](https://docs.aws.amazon.com/dlami/late -PyTorch DLAMIs for versions earlier than 2.10 (that is, PyTorch 2.9) contain known common vulnerabilities and exposures (CVEs) that cannot be patched. Because we maintain a separate DLAMI currency release for each PyTorch version, we do not backport security fixes to these images. +PyTorch DLAMIs for versions 2.9 through 2.12 (that is, PyTorch 2.9, 2.10, 2.11, and 2.12) contain known common vulnerabilities and exposures (CVEs) that cannot be patched. Because we maintain a separate DLAMI currency release for each PyTorch version, we do not backport security fixes to these images. @@ -17 +17 @@ PyTorch DLAMIs for versions earlier than 2.10 (that is, PyTorch 2.9) contain kno -We recommend that you migrate to PyTorch 2.10 or later DLAMIs, which continue to receive security patches. +We recommend that you migrate to PyTorch 2.13 or later DLAMIs, which continue to receive security patches. @@ -35,0 +36 @@ Ubuntu 24.04 | 2029-04-30 +Ubuntu Pro 24.04 | 2029-04-30 @@ -36,0 +38 @@ Ubuntu 22.04 | 2027-04-30 +Ubuntu Pro 22.04 | 2027-04-30