runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."

This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability ( CVE-2026-41579 ) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following low-severity security issue: CVE-2026-41579 allowed a malicious image with a /dev symlink to have limited write access to the host filesystem in ways that our analysis indicates was too limited to…

在 runc Releases 阅读

2026/06/14 15:48，runc Releases 发布了“runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."”（类型：版本发布）。相关技术：runc。CVE：CVE-2026-41579。