Is the connector VM affected by runc vulnerability CVE-2024-21626
Applies to
- BlueXP Connector VM
- "Runc" vulnerability CVE-2024-21626
Answer
- BlueXP and Connectors running with Service Manager 2 do not ship with runc.
- If connector is running on Service Manager 1, to upgrade to SM2 deploy a new Connector or do an Uninstall/Reinstall of the Connector software.
- Non-disruptive approach to upgrade runc version to 1.1.12 is dependent on OS. If an action plan to upgrade runc is needed:
Additional Information
additionalInformation_text