The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container's bounding set. This bug has been fixed in runc 1.1.2. This fix changes `runc exec --cap` behavior such that the additional capabilities granted to the process being executed (as specified via `--cap` arguments) do not include inheritable capabilities. In addition, `runc spec` is changed to not set any inheritable capabilities in the created example OCI spec (`config.json`) file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade crunUpgrade udicaUpgrade podmanUpgrade critUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade criu-develUpgrade toolbox-testsUpgrade criuUpgrade podman-dockerUpgrade container-selinuxUpgrade python3-criuUpgrade podman-remoteUpgrade runcUpgrade podman-gvproxyUpgrade criu-libsUpgrade buildah-testsUpgrade buildahUpgrade conmonUpgrade slirp4netnsUpgrade netavarkUpgrade containers-commonUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade podman-testsUpgrade aardvark-dnsUpgrade toolboxUpgrade libslirpUpgrade skopeo | Nov 15, 2022 | May 17, 2022 |
| Alpine Linux | — | Upgrade runc | Aug 22, 2024 | May 17, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Apr 25, 2025 | May 17, 2022 |
| Amazon_linux_2023 | — | Upgrade runc-debuginfoUpgrade runc-debugsourceUpgrade runc | Feb 17, 2025 | May 13, 2022 |
| Centos_linux | — | Upgrade libslirpUpgrade podman-gvproxyUpgrade crunUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-testsUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade udicaUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade python3-podmanUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade podmanUpgrade netavarkUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade buildah-debugsourceUpgrade conmonUpgrade criuUpgrade critUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade container-selinuxUpgrade aardvark-dnsUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade buildahUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade python3-criuUpgrade criu-libs | Nov 9, 2022 | May 17, 2022 |
| Debian | — | Upgrade runc | Mar 29, 2023 | May 17, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade app-containers/runc. | Aug 12, 2024 | May 17, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Aug 18, 2022 | May 17, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade docker-engine | Nov 4, 2022 | May 17, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-runc | Sep 14, 2022 | May 17, 2022 |
| Oracle_linux | — | Upgrade skopeoUpgrade crunUpgrade libslirpUpgrade python3-podmanUpgrade podman-testsUpgrade skopeo-testsUpgrade podman-pluginsUpgrade criu-develUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade conmonUpgrade podman-dockerUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade buildahUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade criuUpgrade critUpgrade python3-criuUpgrade podman-remoteUpgrade podman-catatonitUpgrade buildah-testsUpgrade aardvark-dnsUpgrade udicaUpgrade podmanUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade container-selinuxUpgrade runc | Nov 16, 2022 | May 13, 2022 |
| Redhat Openshift | — | Upgrade runc | Aug 11, 2022 | May 13, 2022 |
| Redhat_linux | — | Upgrade podman-catatonitUpgrade fuse-overlayfsNo solution existsUpgrade crunUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade criuUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade podmanUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade buildahUpgrade critUpgrade udicaUpgrade buildah-testsUpgrade podman-debuginfoUpgrade conmonUpgrade cockpit-podmanUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade runcUpgrade podman-gvproxyUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade container-selinuxUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade netavarkUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade criu-develUpgrade toolboxUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade runc-debugsource | Nov 9, 2022 | May 17, 2022 |
| Rocky_linux | — | Upgrade containers-commonUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade crunUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade slirp4netnsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debugsourceUpgrade netavarkUpgrade podman-gvproxyUpgrade skopeoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade criu-libsUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade podman-pluginsUpgrade skopeo-debugsourceUpgrade toolboxUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade criuUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade libslirp-debugsourceUpgrade criu-develUpgrade podman-debuginfoUpgrade critUpgrade buildah-testsUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade runcUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsource | Mar 12, 2024 | May 17, 2022 |
| Suse | — | Upgrade kubevirt-testsUpgrade dockerUpgrade docker-kubicUpgrade runcUpgrade containerdUpgrade kubevirt-virtctlUpgrade kubevirt-virt-controllerUpgrade kubevirt-container-diskUpgrade kubevirt-virt-operatorUpgrade docker-fish-completionUpgrade docker-bash-completionUpgrade obs-service-kubevirt_containers_metaUpgrade docker-kubic-fish-completionUpgrade kubevirt-manifestsUpgrade kubevirt-virt-apiUpgrade containerd-ctrUpgrade kubevirt-virt-handlerUpgrade docker-zsh-completionUpgrade docker-kubic-kubeadm-criconfigUpgrade kubevirt-virt-launcherUpgrade docker-kubic-zsh-completionUpgrade docker-kubic-bash-completion | Oct 26, 2022 | May 17, 2022 |
| Ubuntu | — | Upgrade runc (Ubuntu Pro) | May 24, 2023 | May 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub