The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version 1.1.5, by prohibiting symlinked `/proc`. See PR #3785 for details. users are advised to upgrade. Users unable to upgrade should avoid using an untrusted container image.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade buildahUpgrade buildah-testsUpgrade critUpgrade runcUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade container-selinuxUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade crunUpgrade netavarkUpgrade slirp4netnsUpgrade toolboxUpgrade toolbox-testsUpgrade podman-dockerUpgrade criuUpgrade skopeoUpgrade podman-gvproxyUpgrade udicaUpgrade conmonUpgrade criu-develUpgrade skopeo-testsUpgrade python3-podmanUpgrade libslirpUpgrade podman-tests | Nov 16, 2023 | Mar 29, 2023 |
| Alpine Linux | — | Upgrade runc | Aug 22, 2024 | Mar 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jun 7, 2023 | Mar 29, 2023 |
| Amazon_linux_2023 | — | Upgrade runcUpgrade runc-debuginfoUpgrade runc-debugsource | Feb 17, 2025 | Mar 29, 2023 |
| Centos_linux | — | Upgrade slirp4netns-debuginfoUpgrade cockpit-podmanUpgrade criu-libsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade runc-debugsourceUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade runcUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade podman-debugsourceUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade libslirp-develUpgrade udicaUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade buildahUpgrade podman-debuginfoUpgrade criu-develUpgrade skopeo-debuginfoUpgrade podmanUpgrade slirp4netnsUpgrade podman-dockerUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade skopeoUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade python3-podmanUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade criuUpgrade skopeo-testsUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsource | Nov 8, 2023 | Mar 29, 2023 |
| Debian | — | Upgrade runc | Mar 31, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade app-containers/runc. | Aug 12, 2024 | Mar 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-runc | Jan 10, 2024 | Mar 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-runc | Aug 9, 2023 | Mar 29, 2023 |
| Oracle_linux | — | Upgrade buildahUpgrade podmanUpgrade podman-gvproxyUpgrade conmonUpgrade podman-dockerUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade libslirpUpgrade cockpit-podmanUpgrade buildah-testsUpgrade skopeoUpgrade podman-catatonitUpgrade criuUpgrade netavarkUpgrade python3-podmanUpgrade aardvark-dnsUpgrade containers-commonUpgrade criu-develUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-pluginsUpgrade runcUpgrade udicaUpgrade crunUpgrade critUpgrade podman-testsUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade criu-libs | Jul 20, 2023 | Mar 29, 2023 |
| Redhat_linux | — | Upgrade crun-debuginfoUpgrade python3-podmanUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade crunUpgrade podman-gvproxyUpgrade skopeoUpgrade criuUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade podman-testsUpgrade conmonUpgrade criu-libsUpgrade skopeo-debuginfoUpgrade netavarkUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debuginfoUpgrade libslirpUpgrade containers-commonUpgrade toolboxUpgrade buildahUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-dockerUpgrade criu-develUpgrade runc-debugsourceUpgrade critUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoNo solution existsUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade conmon-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade container-selinuxUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade skopeo-tests | Nov 8, 2023 | Mar 29, 2023 |
| Rocky_linux | — | Upgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade podman-remoteUpgrade netavarkUpgrade crunUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade conmonUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade containernetworking-pluginsUpgrade runcUpgrade criu-libsUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade libslirpUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade criuUpgrade fuse-overlayfsUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade podman-catatonit | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade runc | Apr 4, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade runcUpgrade runc (Ubuntu Pro) | May 19, 2023 | Mar 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub