search

scientist-softserv / adventist_knapsack

Apache License 2.0
1 stars 0 forks source link

Check AWS Docker config #675

Open KatharineV opened 1 week ago

KatharineV commented 1 week ago

We got the following message from AWS today (6/10/24). If any action is required, can you help us find out and take care of it? Thank you.

Hello,

We are contacting you about an upcoming change to the Docker version 20.10 used in Amazon Linux 2 (AL2). This version of Docker reached its end-of-life in December 2023, and will not receive any further security updates. If your service does not depend on the Docker package on AL2, you can disregard this message.

On June 12, 2024, we will update the current version of Docker to 25.0.3 from 20.10.25. A security advisory will not be applied to this initial release of Docker 25.0.3. This means running 'yum update —security' at first boot will not automatically update your EC2 instance. Newly launched EC2 instances that install Docker from the Amazon Linux RPM repositories will get Docker 25.0.3. If you cannot update the AMI you use for your EC2 instances, you can run 'sudo yum update docker' to update to Docker 25.0.3.

On August 28, 2024, we will be adding a security advisory to Docker 25.0.3. This means that existing EC2 instances that run 'yum update —security' will install Docker 25.0.3.

If you do not want to upgrade to Docker 25.0.3, we recommend locking your Docker package to the version you are currently using prior to August 28, 2024.

If you have questions, or need assistance with the upgrade, please contact AWS Support [1].

[1] https://aws.amazon.com/support

Sincerely, Amazon Web Services

Amazon Web Services, Inc. is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of Amazon.com, Inc. This message was produced and distributed by Amazon Web Services Inc., 410 Terry Ave. North, Seattle, WA 98109-5210

aprilrieger commented 1 week ago

Internal dev notes for wayfinding: https://us-east-1.console.aws.amazon.com/ec2/home?region=us-east-1#InstanceDetails:instanceId=i-023314db360cb09ff

This effects the Windows with SQL Server Web, INSIDE-ADL OCR EC2 Instance

It uses the AMI image which uses the soon-to-be deprecated Docker version.

KatharineV commented 21 hours ago

Hi folks, We got a follow-up email from AWS today (6/17/24):

Hello,

We are contacting you about an upcoming change to the Docker version 20.10 used in Amazon Linux 2 (AL2). This version of Docker reached its end-of-life in December 2023, and will not receive any further security updates. If your service does not depend on the Docker package on AL2, you can disregard this message.

Starting June 12, 2024, we will update the current version of Docker to 25.0.3 from 20.10.25. Key Docker 25 release dates: 2024-06-12 — Docker 25.0.3 available in Asia Pacific (Sydney) 2024-06-13 — Docker 25.0.3 available in US West (Oregon) 2024-06-17 — Docker 25.0.3 available in US East (N. Virginia) 2024-06-19 — Docker 25.0.3 available globally 2024-06-26 — Amazon Linux 2 External Docker 25 AMIs available globally 2024-08-28 — Docker 25 security advisories published

A security advisory will not be applied to this initial release of Docker 25.0.3. This means running 'yum update —security' at first boot will not automatically update your EC2 instance. Newly launched EC2 instances that install Docker from the Amazon Linux RPM repositories will get Docker 25.0.3. If you cannot update the AMI you use for your EC2 instances, you can run 'sudo yum update docker' to update to Docker 25.0.3.

On August 28, 2024, we will be adding a security advisory to Docker 25.0.3. After this date, existing EC2 instances that run 'yum update —security' will install Docker 25.0.3.

If you do not want to upgrade to Docker 25.0.3, we recommend locking your Docker package to the version you are currently using prior to August 28, 2024.

If you have questions, or need assistance with the upgrade, please contact AWS Support [1].

[1] https://aws.amazon.com/support

Sincerely, Amazon Web Services

Amazon Web Services, Inc. is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of Amazon.com, Inc. This message was produced and distributed by Amazon Web Services Inc., 410 Terry Ave. North, Seattle, WA 98109-5210

Reference: https://health.aws.amazon.com/health/home?region=us-east-1#/event-log?eventID=arn:aws:health:global::event/EC2/AWS_EC2_SECURITY_NOTIFICATION/AWS_EC2_SECURITY_NOTIFICATION_49d6b2872eb6de0948a47017a700a48f3e4dd53b6527cd702c91aa11021a8d2f&eventTab=details