Public bug reported:
A new release of runc is available for merging from Debian.
Ubuntu: 1.3.5+ds1-1ubuntu1
Debian Experimental: 1.4.3+ds1-1
Debian Unstable: 1.3.6+ds1-1
### New Debian Changes ###
runc (1.4.3+ds1-1) experimental; urgency=medium
* Team upload
* New upstream release, tracking the 1.4 series
* Includes the CVE-2026-41579 fix also released in 1.3.6
* Notable upstream changes since 1.3.6:
- cgroup v1 support is deprecated
- pids.limit 0 is now treated as an actual limit
- preliminary loong64 support
* Build with dh-golang >= 1.66 in module mode; require runtime-spec
1.3 and opencontainers/cgroups 0.0.6-2 (build-depends tightened)
* Drop patches adopted upstream (go-criu v7, mips64el remap-rootfs,
systemd AddPid) and trim the loong64 patch
-- Reinhard Tartler <[email protected]> Sat, 08 Aug 2026 10:31:55
+0200
runc (1.3.6+ds1-1) unstable; urgency=medium
* New upstream release
* Fixes CVE-2026-41579: a malicious image with a /dev symlink could
cause limited host filesystem integrity violations (Closes: #1140000)
* Fix a regression in v1.3.0 that could result in a stuck `runc exec`
or `runc run` when the container process runs for a short time
* Reuse a single read-only tmpfs when masking directories, reducing
tmpfs superblock churn (relevant for Kubernetes per-CPU sysfs masks)
* debian/clean: clean up generated man pages so that the source
package can be built again after a successful build (Closes: #1046528)
* Bump Standards Version, drop Priority: optional
-- Reinhard Tartler <[email protected]> Thu, 06 Aug 2026 13:33:30
+0200
### Old Ubuntu Delta ###
runc (1.3.5+ds1-1ubuntu1) stonking; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/control: add non default pkg.runc.with-bin Build-Profiles to runc
binary package.
- d/golang-github-opencontainers-runc-dev.docs: install NOTICE file to be
compliant with the Apache 2 license
- d/tests/control: remove integration and checkpoint autopkgtest.
Since they depend on the runc binary package which is not provided by
this source package by default.
-- Gianfranco Costamagna <[email protected]> Mon, 04 May 2026
17:08:19 +0200
** Affects: runc (Ubuntu)
Importance: Wishlist
Status: New
** Tags: needs-merge upgrade-software-version
** Changed in: runc (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: runc (Ubuntu)
Milestone: None => ubuntu-26.05
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2163544
Title:
Merge runc 1.4.3+ds1-1 from Debian for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/runc/+bug/2163544/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
