runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."
This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…
| CVE | CVE-2026-41579 |
|---|---|
| Source | runc Releases |
| Fetched | 10/22/2026, 10:27 PM |
| Data | Markdown JSON |
On 06/14/2026, 03:48 PM, runc Releases published "runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."" (type: Release). Related technologies: runc. CVE: CVE-2026-41579.