最新のセキュリティ情報
6月14日(日)
runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."
This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…
runc 1.5.0-rc.3 -- "The best way to get a drink out of a Vogon is to stick your finger down his throat."
This is the third release candidate for the 1.5.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. We plan to release 1.5.0 in the next two weeks. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in…
runc 1.4.3 -- "The best way to irritate him is to feed his grandmother to the Ravenous Bugblatter Beast of Traal."
This is the third patch release of the 1.4.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…
4月3日(金)
runc v1.5.0-rc.2 -- "いざやいざや、見に行かん"
This is the second release candidate of the runc 1.5.0 release. It mostly contains build fixes and improvements, but also includes a new minor feature and some deprecations. runc v1.5.0-rc.2 includes all of the patches backported to runc v1.4.2 . Users are strongly encouraged to test our release candidates over the next few weeks so we can fix issues before the general release. You should expect runc 1.5.0 to be released at the end of April 2026 (at which point, runc 1.3.z will only receive high-severity security fixes for 6 months and runc 1.2.z will become unmaintained -- users are thus ver…