CVE-2024-21626 - Runc container issue

Publication Date: 2024/01/31 1:30 PM PST
CVE Identifier: CVE-2024-21626

AWS is aware of a recently disclosed security issue affecting the runc component of several open source container management systems (CVE-2024-21626). With the exception of the AWS services listed below, no customer action is required to address this issue.

Amazon Linux
An updated version of runc is available for Amazon Linux 1 (runc-1.1.11-1.0.amzn1), Amazon Linux 2 (runc-1.1.11-1.amzn2) and for Amazon Linux 2023 (runc-1.1.11-1.amzn2023). AWS recommends that customers using runc or other …

action address amazon aware aws container customer cve issue linux management management systems open source runc security services systems version