aws / amazon-ecs-ami

Packer recipes for building the official ECS-optimized Amazon Linux AMIs
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html
Apache License 2.0
205 stars 47 forks source link

Update SSM Agent version to 3.2.2303.0 for ECS exec #223

Closed danehlim closed 8 months ago

danehlim commented 8 months ago

Summary

Update Amazon SSM Agent version to 3.2.2303.0 to address CVEs listed below:

  1. https://alas.aws.amazon.com/ALAS-2024-1920.html
  2. https://alas.aws.amazon.com/ALAS-2023-1866.html
  3. https://alas.aws.amazon.com/ALAS-2023-1825.html
  4. https://alas.aws.amazon.com/AL2/ALAS-2024-2458.html
  5. https://alas.aws.amazon.com/AL2/ALAS-2023-2303.html
  6. https://alas.aws.amazon.com/AL2/ALAS-2023-2238.html
  7. https://alas.aws.amazon.com/AL2/ALAS-2022-1807.html
  8. https://alas.aws.amazon.com/AL2/ALAS-2024-2458.html
  9. https://alas.aws.amazon.com/AL2023/ALAS-2024-526.html
  10. https://alas.aws.amazon.com/AL2023/ALAS-2023-388.html
  11. https://alas.aws.amazon.com/AL2023/ALAS-2023-373.html
  12. https://alas.aws.amazon.com/AL2023/ALAS-2023-339.html
  13. https://alas.aws.amazon.com/AL2023/ALAS-2024-526.html

Implementation details

See "Summary" section above.

Testing

Build and run end-to-end functional tests against Alpha ECS-Optimized AMIs (one from each AL generation, with a variety of architecture types) using the updated SSM Agent version.

New tests cover the changes: N/A

Description for the changelog

Update SSM Agent version to 3.2.2303.0 for ECS exec

Licensing

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.