Skip to main content
All updates

AWS AMI 2026-05-14

The EC2 scope AMIs null-runtime-85 (x86) and null-runtime-arm-16 (arm64) move the nginx sidecar to nginx 1.30.1.

Action required

The nginx in the previous AMIs is affected by CVE-2026-42945. Move your EC2 scopes to the new AMIs and redeploy them.

Fixes​

  • nginx. The nginx image baked into the AMI (np-nginx 1.3.3) is now built on nginx 1.30.1, which fixes CVE-2026-42945.

Upgrade​

The AMIs are shared with your AWS account. Find them by name (null-runtime-85 and null-runtime-arm-16), set their IDs in ami.id of your EC2 provider, and redeploy your scopes. Each scope keeps running the previous AMI until it's redeployed. To track that rollout, see AMI drift detection.