## runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."

- 種別: release
- 関連技術: runc
- CVE: CVE-2026-41579
- 公開日時: 2026-06-14T06:48:25.000Z
- 情報源: runc Releases (https://github.com/opencontainers/runc/releases/tag/v1.3.6)
- パーマリンク: https://vulnpulse.app/items/runc-releases-451c7f030000

This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…