Amazon Linux 2 version 2.0.20250818.2 release notes

Amazon Linux will end live patching for AL2 Kernel 4.14 on 2025-10-31. Customers are encouraged to use kernel 5.10 as the default kernel for AL2 or move to AL2023 with kernels 6.1 and 6.12.

Amazon Linux will provide live patches for AL2 Kernel 5.10 until the end of life of AL2 on 2026-06-30.

Following the mitigation of CVE-2025-23048 in Apache httpd, some websites may experience a "Misdirected Request" error, especially if a web server operates behind a load balancer. Currently, this issue is particularly noticeable with Application Load Balancers, which, at this time, do not relay SNI data to the target server. Apache httpd used to allow clients to send requests without setting a server name in the SNI because the check wasn't accurate. However, this behavior changed in version 2.4.64. There are several known solutions and/or workarounds depending on the load balancer and its configuration. These solutions can be found in the Apache bug tracker.

For information on the CVEs addressed in this release, see the Amazon Linux Security Center.

For visibility into the status of CVEs that haven't been addressed yet, see the Amazon Linux Security Center.