Release: Elastic Beanstalk Amazon Linux platform updates on December 21, 2021 - AWS Elastic Beanstalk

Release: Elastic Beanstalk Amazon Linux platform updates on December 21, 2021

This release provides new versions for AWS Elastic Beanstalk platforms based on Amazon Linux. The release contains security updates, including the hotpatch for Apache Log4j. It also includes AMI, Go, Corretto, Tomcat, .NET Core, Node.js, Python, and Ruby updates.

Release date: December 21, 2021

Changes

The following table lists the changes included in this release.

Important

Elastic Beanstalk installs Log4j from the Amazon Linux default package repositories in its Tomcat platforms for Amazon Linux 1 and Amazon Linux 2. The versions of Log4j available in the Amazon Linux 1 and Amazon Linux 2 repositories are not affected by CVE-2021-44228 or CVE-2021-45046 in their default configuration.

If you've made configuration changes to your application’s use of log4j, or installed newer versions of log4j, then we recommend that you take action to update your application’s code to mitigate this issue.

Out of caution, Elastic Beanstalk is releasing new platform versions that use the latest Amazon Linux default package repositories, which include the Log4j hotpatched JDK, in today's release. If you've customized log4j installation as your application dependency, we recommend that you upgrade to the latest Elastic Beanstalk platform version to mitigate CVE-2021-44228 or CVE-2021-45046. You can also enable automated managed updates as part of normal update practices.

For more information about security-related software updates for Amazon Linux, see the Amazon Linux Security Center.

Notes
  • These release notes focus on changes to currently supported platform branches. For full version information of Elastic Beanstalk retiring (deprecated) platform branches, see Elastic Beanstalk platform versions scheduled for retirement in the AWS Elastic Beanstalk Platforms guide.

  • Be aware that at the time these release notes are published, the new platform versions might not yet be available in all the AWS Regions that Elastic Beanstalk supports. It might take a few hours for the release to complete.

Category Description

Security updates

Applied all security updates published in the Amazon Linux Security Center on or before December 17, 2021 to all released Amazon Linux 2 platforms.

In particular, the release includes the Amazon Linux hotpatch tool for Apache Log4j. This tool can help mitigate recently discovered Log4j vulnerabilities. See the Important message at the top of this release note page.

The Go, Corretto, .NET Core, and Ruby releases are security releases. For more information, see Platform-specific updates in this table.

Cross-platform updates

Made these cross-platform updates:

Component Update

Base AMI

Updated the base AMI to version 2.0.20211201.

Platform-specific updates

Made these platform-specific updates:

Platform Update

Go

Updated Go to release 1.17.5. For details, see go1.17 in The Go Programming Language Release History.

The Go 1.17.5 release is a security release.

Corretto, Tomcat

Updated Corretto 11 to version 11.0.13.8.2. For more information, see Change Log for Amazon Corretto 11 in the Corretto 11 repository on GitHub.

Updated Corretto 8 to version 8.312.07.2. For more information, see Change Log for Amazon Corretto 8 in the Corretto 8 repository on GitHub.

Both Corretto updates are security releases.

.NET Core

Updated .NET Core to releases 5.0.13 and 3.1.22.

Both .NET Core updates are security releases.

Node.js

Updated Node.js 14 to add support for Node version 14.18.2.

Updated Node.js 12 to add support for Node version 12.22.8.

Python

Updated Pipenv to release 2021.11.9. For details, see the Pipenv Release and Version History.

Ruby

Updated Ruby 3.0, 2.7, and 2.6 to releases 3.0.3, 2.7.5, and 2.6.9, respectively.

Updated RubyGems to release 3.2.32.

The three Ruby updates are security releases.

New platform versions

These currently supported platforms are updated:

Docker

Platform Version and Solution Stack Name

AMI

Docker

Docker Compose

Proxy Server

Docker AL2 version 3.4.10

64bit Amazon Linux 2 v3.4.10 running Docker

2.0.20211201

20.10.7-3

1.29.2

nginx 1.20.0

Go

Platform Version and Solution Stack Name

AMI

Language

AWS X-Ray

Proxy Server

Go 1 AL2 version 3.4.4

64bit Amazon Linux 2 v3.4.4 running Go 1

2.0.20211201

Go 1.17.5

3.2.0

nginx 1.20.0

Java SE

Platform Version and Solution Stack Name

AMI

Language

Tools

AWS X-Ray

Proxy Server

Corretto 11 version 3.2.9

64bit Amazon Linux 2 v3.2.9 running Corretto 11

2.0.20211201

Corretto 11.0.13.8.2

Ant 1.10.7, Gradle 5.6.2, Maven 3.6.2

3.2.0

nginx 1.20.0

Corretto 8 version 3.2.9

64bit Amazon Linux 2 v3.2.9 running Corretto 8

2.0.20211201

Corretto 8.312.07.2

Ant 1.10.7, Gradle 5.6.2, Maven 3.6.2

3.2.0

nginx 1.20.0

Tomcat

Platform Version and Solution Stack Name

AMI

Language

AWS X-Ray

Application Server

Proxy Server

Corretto 11 with Tomcat 8.5 AL2 version 4.2.9

64bit Amazon Linux 2 v4.2.9 running Tomcat 8.5 Corretto 11

2.0.20211201

Corretto 11.0.13.8.2

3.2.0

Tomcat 8.5.72

nginx 1.20.0 (default), Apache 2.4.51

Corretto 8 with Tomcat 8.5 AL2 version 4.2.9

64bit Amazon Linux 2 v4.2.9 running Tomcat 8.5 Corretto 8

2.0.20211201

Corretto 8.312.07.2

3.2.0

Tomcat 8.5.72

nginx 1.20.0 (default), Apache 2.4.51

.NET Core on Linux

Platform Version and Solution Stack Name

Framework

Proxy Server

AMI

AWS X-Ray

.NET Core on AL2 version 2.2.9

64bit Amazon Linux 2 v2.2.9 running .NET Core

.NET 5.0.13, supports 5.0.13, 3.1.22, 2.1.30

nginx 1.20.0

2.0.20211201

3.2.0

Node.js

Platform Version and Solution Stack Name

AMI

Node.js versions (npm versions)

Proxy Server

Git

AWS X-Ray

Node.js 14 AL2 version 5.4.9

64bit Amazon Linux 2 v5.4.9 running Node.js 14

2.0.20211201

14.18.2 (6.14.15), 14.18.1 (6.14.15), 14.18.0 (6.14.15), 14.17.6 (6.14.15), 14.17.5 (6.14.14), 14.17.4 (6.14.14), 14.17.3 (6.14.13), 14.17.2 (6.14.13), 14.17.1 (6.14.13), 14.17.0 (6.14.13), 14.16.1 (6.14.12), 14.16.0 (6.14.11), 14.15.5 (6.14.11), 14.15.4 (6.14.10), 14.15.3 (6.14.9), 14.15.2 (6.14.9), 14.15.1 (6.14.8), 14.15.0 (6.14.8), 14.14.0 (6.14.8), 14.13.1 (6.14.8), 14.13.0 (6.14.8), 14.12.0 (6.14.8), 14.11.0 (6.14.8), 14.10.1 (6.14.8), 14.10.0 (6.14.8), 14.9.0 (6.14.8), 14.8.0 (6.14.7), 14.7.0 (6.14.7), 14.6.0 (6.14.6), 14.5.0 (6.14.5), 14.4.0 (6.14.5), 14.3.0 (6.14.5), 14.2.0 (6.14.4), 14.1.0 (6.14.4), 14.0.0 (6.14.4)

Default version: 14.18.2

nginx 1.20.0 (default), Apache 2.4.51

2.32.0

3.2.0

Node.js 12 AL2 version 5.4.9

64bit Amazon Linux 2 v5.4.9 running Node.js 12

2.0.20211201

12.22.8 (6.14.15), 12.22.7 (6.14.15), 12.22.6 (6.14.15), 12.22.5 (6.14.14), 12.22.4 (6.14.14), 12.22.3 (6.14.13), 12.22.2 (6.14.13), 12.22.1 (6.14.12), 12.22.0 (6.14.11), 12.21.0 (6.14.11), 12.20.2 (6.14.11), 12.20.1 (6.14.10), 12.20.0 (6.14.8), 12.19.1 (6.14.8), 12.19.0 (6.14.8), 12.18.4 (6.14.6), 12.18.3 (6.14.6), 12.18.2 (6.14.5), 12.18.1 (6.14.5), 12.18.0 (6.14.4), 12.17.0 (6.14.4), 12.16.3 (6.14.4), 12.16.2 (6.14.4), 12.16.1 (6.13.4), 12.16.0 (6.13.4), 12.15.0 (6.13.4), 12.14.1 (6.13.4), 12.14.0 (6.13.4), 12.13.1 (6.12.1), 12.13.0 (6.12.0), 12.12.0 (6.11.3), 12.11.1 (6.11.3), 12.11.0 (6.11.3), 12.10.0 (6.10.3), 12.9.1 (6.10.2), 12.9.0 (6.10.2), 12.8.1 (6.10.2), 12.8.0 (6.10.2), 12.7.0 (6.10.0), 12.6.0 (6.9.0), 12.5.0 (6.9.0), 12.4.0 (6.9.0), 12.3.1 (6.9.0), 12.3.0 (6.9.0), 12.2.0 (6.9.0), 12.1.0 (6.9.0), 12.0.0 (6.9.0)

Default version: 12.22.8

nginx 1.20.0 (default), Apache 2.4.51

2.32.0

3.2.0

PHP

Platform Version and Solution Stack Name

AMI

Language

Composer

Proxy Server

PHP 8.0 AL2 version 3.3.9

64bit Amazon Linux 2 v3.3.9 running PHP 8.0

2.0.20211201

PHP 8.0.8

2.0.13

nginx 1.20.0 (default), Apache 2.4.51

PHP 7.4 AL2 version 3.3.9

64bit Amazon Linux 2 v3.3.9 running PHP 7.4

2.0.20211201

PHP 7.4.21

1.10.22

nginx 1.20.0 (default), Apache 2.4.51

Python

Platform Version and Solution Stack Name

AMI

Language

Package Manager

Packager

meld3

AWS X-Ray

Proxy Server

Python 3.8 AL2 version 3.3.9

64bit Amazon Linux 2 v3.3.9 running Python 3.8

2.0.20211201

Python 3.8.5

pipenv 2021.11.9

3.2.0

nginx 1.20.0 (default), Apache 2.4.51

Python 3.7 AL2 version 3.3.9

64bit Amazon Linux 2 v3.3.9 running Python 3.7

2.0.20211201

Python 3.7.10

pipenv 2021.11.9

3.2.0

nginx 1.20.0 (default), Apache 2.4.51

Ruby

Platform Version and Solution Stack Name

AMI

Language

Package Manager

Application Server

AWS X-Ray

Proxy Server

Ruby 3.0 AL2 version 3.4.1

64bit Amazon Linux 2 v3.4.1 running Ruby 3.0

2.0.20211201

Ruby 3.0.3-p157

RubyGems 3.2.32

Puma 5.5.2

3.2.0

nginx 1.20.0

Ruby 2.7 AL2 version 3.4.1

64bit Amazon Linux 2 v3.4.1 running Ruby 2.7

2.0.20211201

Ruby 2.7.5-p203

RubyGems 3.2.32

Puma 5.5.2

3.2.0

nginx 1.20.0

Ruby 2.6 AL2 version 3.4.1

64bit Amazon Linux 2 v3.4.1 running Ruby 2.6

2.0.20211201

Ruby 2.6.9-p207

RubyGems 3.2.32

Puma 5.5.2

3.2.0

nginx 1.20.0