Release Summary Repository Updates Image Updates

Amazon Linux 2 version 2.0.20250902.3 release notes

These are the release notes for Amazon Linux 2 version 2.0.20250902.3.

Release Summary

This release of Amazon Linux 2 includes the latest security updates.

Notable updates

Amazon Linux will stop evaluating and fixing CVEs for the redis6 Amazon Linux 2 Extras on 2026-01-31. With the release of Redis 8, upstream security support for Redis 6.2 will be ending in 2025. We recommend that customers migrate to Valkey in Amazon Linux 2023. Redis 6 is provided in Amazon Linux 2023 which may help with migrating from AL2 to AL2023. However, security support for Redis 6 in AL2023 will also be ending on 2026-01-31.
krb5: The KDC will not issue tickets with triple-DES or RC4 session keys unless explicitly configured using the new allow_des3 and allow_rc4 variables in [libdefaults]. This change resolves CVE-2025-3576.

Note

Starting with this Amazon Linux 2 release, we have added additional SSM parameters to clearly indicate the kernel version installed on the AMIs:

(Existing): SSM parameters containing "kernel-5.10" in their name indicate kernel-5.10 is installed on the AMI
(Existing): SSM parameters without any kernel reference in their name indicate kernel-4.14 is installed on the AMI
(New): SSM parameters containing "kernel-4.14" in their name reference the same AMI IDs as (2) above
(New): SSM parameters containing "kernel-default" in their name reference the latest kernel AMI IDs, which are currently the same as (1) above

These changes are additive; however, we strongly recommend that customers migrate to the latest kernel version (kernel-5.10) by using either option (1) or (4) above.

Security updates

For information on the CVEs addressed in this release, see the Amazon Linux Security Center.
For visibility into the status of CVEs that haven't been addressed yet, see the Amazon Linux Security Center.

Repository Updates

Core Updated Packages

This section provides details about core updated packages.

ImageMagick-6.9.10.97-1.amzn2.0.15

aws-cfn-bootstrap-2.0-36.amzn2

cairo-1.15.12-4.amzn2.0.1

cloud-init-19.3-46.amzn2.0.7

compat-libtiff3-3.9.4-12.amzn2.0.5

giflib-4.1.6-9.amzn2.0.3

golang-1.24.6-1.amzn2.0.1

httpd-2.4.65-1.amzn2.0.2

kernel-4.14.355-280.679.amzn2

krb5-1.15.1-55.amzn2.2.9

libxml2-2.9.1-6.amzn2.5.20

mod_security-2.9.12-1.amzn2.0.1

ruby-2.0.0.648-36.amzn2.0.17

rust-1.86.0-1.amzn2.0.3

samba-4.10.16-24.amzn2.0.5

udisks2-2.7.3-9.amzn2.0.4

vorbis-tools-1.4.0-13.amzn2.0.1

[AL2 Extras] Aws-nitro-enclaves-cli Updated Packages

This section provides details about [al2 extras] aws-nitro-enclaves-cli updated packages.

docker-25.0.8-1.amzn2.0.6

[AL2 Extras] Docker Updated Packages

This section provides details about [al2 extras] docker updated packages.

docker-25.0.8-1.amzn2.0.6

runfinch-finch-1.10.0-1.amzn2.0.4

[AL2 Extras] Ecs Updated Packages

This section provides details about [al2 extras] ecs updated packages.

ecs-init-1.98.0-1.amzn2

[AL2 Extras] Kernel-5.10 Updated Packages

This section provides details about [al2 extras] kernel-5.10 updated packages.

kernel-5.10.240-238.966.amzn2

[AL2 Extras] Kernel-5.15 Updated Packages

This section provides details about [al2 extras] kernel-5.15 updated packages.

kernel-5.15.189-131.211.amzn2

[AL2 Extras] Kernel-5.4 Updated Packages

This section provides details about [al2 extras] kernel-5.4 updated packages.

kernel-5.4.296-217.428.amzn2

[AL2 Extras] Postgresql13 Updated Packages

This section provides details about [al2 extras] postgresql13 updated packages.

libpq-13.22-1.amzn2.0.1

postgresql-13.22-1.amzn2.0.1

[AL2 Extras] Postgresql14 Updated Packages

This section provides details about [al2 extras] postgresql14 updated packages.

libpq-14.19-1.amzn2.0.2

postgresql-14.19-1.amzn2.0.1

[AL2 Extras] Tomcat9 Updated Packages

This section provides details about [al2 extras] tomcat9 updated packages.

tomcat-9.0.108-1.amzn2.0.1

Image Updates

Default Kernel-5.10 AMI

This section provides details about default kernel-5.10 ami.