runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."

This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…

runc Releasesで読む

2026/06/14 15:48、runc Releasesが「runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."」を公開しました (種別: リリース・告知)。関連する技術: runc。CVE: CVE-2026-41579。