"No packages marked for update" - Yet ALAS-2017-901 bulletin exists

Question

Seeing an issue w/ 2017.07 AMI missing this package.  Any idea where to locate it??  
  
Advisory: https://alas.aws.amazon.com/ALAS-2017-901.html  
kernel-4.9.51-10.52.amzn1.x86_64  
  
\[ec2-user@ip-172-31-xxx-xxx ~]$ rpm -qa | grep -i kernel  
kernel-tools-4.9.43-17.39.amzn1.x86_64  
kernel-4.9.38-16.35.amzn1.x86_64  
kernel-4.9.43-17.39.amzn1.x86_64  
  
\[ec2-user@ip-172-31-xxx-xxx ~]$ sudo yum update  
Loaded plugins: priorities, update-motd, upgrade-helper   
amzn-main              | 2.1 kB  00:00:00   
amzn-updates          | 2.3 kB  00:00:00  
**No packages marked for update**

Answer

The root cause is the /etc/yum.conf file.  you need to manually update "releasever=2017.03" with "releasever=latest"  
& yum update.  I was able to obtain a newer version of the kernel but it is still behind and vulnerable...  
  
Remote package installed : kernel-4.9.51-10.52.amzn1  
Should be                : kernel-4.9.58-18.51.amzn1

Answer

anyone from AWS browsing these threads?

"No packages marked for update" -> Yet ALAS-2017-901 bulletin exists

Relevanter Inhalt