Changelog

The EC2 scope AMIs null-runtime-94 (x86) and null-runtime-arm-24 (arm64) stop trusting the compromised eMudhra intermediate CA.

The EC2 scope AMIs null-runtime-92 (x86) and null-runtime-arm-22 (arm64) move the nginx sidecar to nginx 1.30.4, which fixes six known vulnerabilities.

The EC2 scope AMIs null-runtime-91 (x86) and null-runtime-arm-21 (arm64) let a scope skip the nginx sidecar so the balancer reaches your application directly.

The EC2 scope AMIs null-runtime-89 (x86) and null-runtime-arm-20 (arm64) let the nginx sidecar handle many more concurrent connections, such as WebSockets, and patch libssh2.

The EC2 scope AMIs null-runtime-88 (x86) and null-runtime-arm-19 (arm64) bring back SSM Session Manager access to your instances.

The EC2 scope AMIs null-runtime-85 (x86) and null-runtime-arm-16 (arm64) move the nginx sidecar to nginx 1.30.1.

The EC2 scope AMIs null-runtime-84 (x86) and null-runtime-arm-15 (arm64) mitigate CVE-2026-31431, a Linux kernel flaw that lets any local user gain root.

The EC2 scope AMIs null-runtime-83 (x86) and null-runtime-arm-14 (arm64) patch snapd and the Prometheus exporter, and remove the vulnerable SSM agent from running instances.

The EC2 scope AMIs null-runtime-82 (x86) and null-runtime-arm-13 (arm64) patch critical and high vulnerabilities in the container runtime and in nginx.