Security update for runc
This update for runc rebuilds it against the current go security release.
- Update to 1.3.6-150000.105.1
Published Updated
PatchFirst · Latest vulnerabilities
runc vulnerabilities
Vulnerability published for runc in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 10
Security update for runc
This update for runc rebuilds it against the current go security release.
- Update to 1.3.6-150000.103.1
Published UpdatedSecurity update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking directories with `maskPaths`, runc will now re- use a single `tmpfs` instance (which is not writeable) to reduce the number `tmpfs` superblocks that need to be reaped when containers die (in particular, Kubernetes applies masks to per-CPU sysfs directories which get expensive quickly). - Version 1.3.5: * Recursive atime-related mount flags (rrelatime et al.) are now applied p
- Update to 1.3.6-150000.101.1
Published UpdatedSecurity update for runc
This update for runc rebuilds it against the current go security release.
- Update to 1.3.4-150000.98.1
Published UpdatedSecurity update for runc
This update for runc rebuilds it against the current go security release.
- Update to 1.3.4-150000.96.1
Published UpdatedSecurity update for runc
This update for runc rebuilds it against the current go 1.25 security release.
- Update to 1.3.4-150000.92.1
Published UpdatedSecurity update for runc
This update for runc rebuilds it against the current go 1.25 security release.
- Update to 1.3.4-150000.90.1
Published UpdatedSecurity update for runc
This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 Update to runc v1.3.2. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.2> bsc#1252110 - Includes an important fix for the CPUSet translation for cgroupv2. Update to runc v1.3.1. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.1> Update to runc v1.3.0. Upstream changelog is available from <https://gith
- Update to 1.3.3-150000.85.1
Published UpdatedSecurity update for runc
This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252232). - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252232). - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252232). Update to runc v1.2.7. - Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.7>
- Update to 1.2.7-150000.80.1
Published UpdatedSecurity update for runc
This update for runc fixes the following issues: - CVE-2024-45310: Fixed unintentional creation of empty files/directories on host (bsc#1230092) Other fixes: - Update to runc v1.2.6.
- Update to 1.2.6-150000.73.2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.