[Package Request] - Update nerdctl to v2.3.4

[sanjay-gudala]

What package needs to be updated in Amazon Linux 2023?
nerdctl — currently at version 2.2.2-1.amzn2023.0.2, requesting update to v2.3.4

Why is this update needed?
The current nerdctl 2.2.2 ships with Go modules affected by the following CVEs:

• CVE-2026-29181
• CVE-2026-34040
• CVE-2026-53488

nerdctl v2.3.3 (Jun 22, 2026) updates containered to v2.3.2 which fixes these CVEs.
nerdctl v2.3.4 (Jun 29, 2026) includes additional stability fixes and runc 1.5.0.

Upstream releases:

• https://github.com/containerd/nerdctl/releases/tag/v2.3.4
• https://github.com/containerd/nerdctl/releases/tag/v2.3.3

What is the impact?
EKS optimized AMIs (AL2023-based) consume nerdctl from the AL2023 repo.
Until this package is updated, EKS nodes will continue to show these CVEs in vulnerability scanners, blocking compliance requirements.