GO-2023-1988 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, kubernetes-csi-livenessprobe, aws-load-balancer-controller, oauth2-proxy, pulumi, vault-k8s, hey, metacontroller, timoni, bank-vaults, k3s, runc, src, kubeflow, kubevela, bom, kube-logging-operator, trust-manager, metrics-server,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: flux, containerd, aactl, kubo, pulumi-language-yaml, kyverno, snyk-cli, loki, external-dns, minio, kaf, k3s, runc, kube-fluentd-operator, cilium, fuse-overlayfs-snapshotter, kubernetes, hubble, cert-manager, telegraf, helm, kine, kubernetes-dashboard,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: buildah, tetragon, vault-secrets-webhook, cloud-sql-proxy, trino, cloud-provider-azure, delve, zarf, kubo, argo-cd, fluent-bit-plugin-loki, kyverno, falco-no-driver, step-ca, vault-benchmark, minio-object-browser, authservice, incert, terraform-provider-tls,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: flux, containerd, aactl, trino, zarf, kubo, argo-cd, fluent-bit-plugin-loki, kyverno, falco-no-driver, cilium-cli, prometheus, k8s-device-plugin, zot, aws-flb-firehose, aws-flb-kinesis, aws-flb-cloudwatch, istio, grafana, k3s, kaf, minio, karpenter, go, redka, runc,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: flux, spire-server, aactl, gitaly, ingress-nginx-controller, argo-cd, kyverno, falco-no-driver, cilium-cli, snyk-cli, prometheus, k8s-device-plugin, kubescape, zot, aws-flb-firehose, external-dns, aws-flb-kinesis, gitlab-kas, aws-flb-cloudwatch, istio, k3s, kaf, runc...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: buildah, tetragon, vault-secrets-webhook, cloud-sql-proxy, trino, cloud-provider-azure, delve, zarf, kubo, argo-cd, fluent-bit-plugin-loki, kyverno, falco-no-driver, step-ca, vault-benchmark, minio-object-browser, authservice, incert, terraform-provider-tls,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitleaks, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, spire-server, tetragon, vault-secrets-webhook, rancher-telemetry, ingress-nginx-controller, actions-runner-controller, mongodb-kubernetes-operator, kubo, kubernetes-csi-livenessprobe,...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: buildah, envoy-ratelimit, nfs-subdir-external-provisioner, spire-server, kubernetes-csi-livenessprobe, step-ca, crossplane-provider-family-aws, aws-load-balancer-controller, nri-mysql, authservice, vault-k8s, kube-metrics-adapter, nats, docker-cli, addon-resizer,...

RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...

MiracleLinux 9 : runc-1.4.2-2.el9_8 (AXSA:2026-1427:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1427:03 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

SUSE-SU-2026:3433-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

SUSE-SU-2026:3428-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

CLEANSTART-2026-PE23465 Security fixes in runc 1.4.2-r1

Package runc version 1.4.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-RY09164 Security fixes in runc 1.4.2-r0

Package runc version 1.4.2-r0 fixes 14 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

CLEANSTART-2026-CX82241 Security fixes in runc 1.1.14-r0

Package runc version 1.1.14-r0 fixes 40 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2026-25679, CVE-2025-22873, CVE-2025-22872, CVE-2025-22871...

SUSE SLES16 Security Update : runc (SUSE-SU-2026:22942-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22942-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations...

CVE-2026-41579

A flaw was found in runc, a tool used to run containers. A malicious container image, crafted with a specific type of symbolic link in its /dev directory, can deceive runc. This deception could lead to the deletion of certain files or the creation of predefined symbolic links on the host system...

openSUSE 16 Security Update : runc (openSUSE-SU-2026:21431-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21431-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Othe...