AWS eks: Add Windows EKS AMI versions patched for CVE-2026-76654
Summary
Adds new Windows AMI release rows (Kubernetes 1.31–1.36) across all Windows variant tables, each noting the AMI includes a patch for CVE-2026-76654.
Security assessment
The added rows explicitly state the new AMI builds include a patch for CVE-2026-76654, indicating a specific vulnerability is remediated in these Windows node AMIs; users must upgrade to the listed versions to obtain the fix.
Evidence
+`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654
Diff
diff --git a/eks/latest/userguide/eks-ami-versions-windows.md b/eks/latest/userguide/eks-ami-versions-windows.md index cd0f3837f..510c44315 100644 --- a//eks/latest/userguide/eks-ami-versions-windows.md +++ b//eks/latest/userguide/eks-ami-versions-windows.md @@ -43,0 +44 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -53,0 +55 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.35-2026.09.14` | `1.35.7` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -72,0 +75 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -82,0 +86 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.35-2026.09.14` | `1.35.7` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -101,0 +106 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -111,0 +117 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.35-2026.09.14` | `1.35.7` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -124,0 +131 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.34-2026.09.14` | `1.34.10` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -141,0 +149 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.33-2026.09.14` | `1.33.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -162,0 +171 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.32-2026.09.14` | `1.32.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -187,0 +197 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.31-2026.09.14` | `1.31.14` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -326,0 +337 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -336,0 +348 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.35-2026.09.14` | `1.35.7` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -349,0 +362 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.34-2026.09.14` | `1.34.10` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -366,0 +380 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.33-2026.09.14` | `1.33.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -387,0 +402 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.32-2026.09.14` | `1.32.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -412,0 +428 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.31-2026.09.14` | `1.31.14` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -551,0 +568 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -561,0 +579 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.35-2026.09.14` | `1.35.7` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -574,0 +593 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.34-2026.09.14` | `1.34.10` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -591,0 +611 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.33-2026.09.14` | `1.33.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -612,0 +633 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.32-2026.09.14` | `1.32.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -637,0 +659 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.31-2026.09.14` | `1.31.14` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -776,0 +799 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.36-2026.09.14` | `1.36.3` | `2.2.3` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -786,0 +810 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.35-2026.09.14` | `1.35.7` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -799,0 +824 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.34-2026.09.14` | `1.34.10` | `2.1.7` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -816,0 +842 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.33-2026.09.14` | `1.33.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -837,0 +864 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.32-2026.09.14` | `1.32.13` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654 @@ -862,0 +890 @@ AMI version | kubelet version | containerd version | csi-proxy version | Release +`1.31-2026.09.14` | `1.31.14` | `1.7.30` | `1.2.1` | Includes patch for CVE-2026-76654