{"id":"runc-releases-451c7f030000","seq":233482,"kind":"release","title":"runc 1.3.6 -- \"On no account should you allow a Vogon to read poetry at you.\"","url":"https://github.com/opencontainers/runc/releases/tag/v1.3.6","permalink":"https://vulnpulse.app/items/runc-releases-451c7f030000","summary":"This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…","severity":null,"techs":["runc"],"cves":["CVE-2026-41579"],"tags":["security"],"source":{"id":"runc-releases","name":"runc Releases"},"published_at":"2026-06-14T06:48:25.000Z","fetched_at":"2026-10-22T13:27:27.445Z"}