CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CLSA-2026-1784034091 runc: Fix of CVE-2026-41579

CVE-2026-41579: fix /dev symlink path traversal in rootfs /dev setup...

SUSE-SU-2026:22247-1 Security update for crun

This update for crun fixes the following issue - CVE-2026-47766: crun follows rootfs /dev symlink while creating default devices bsc1268302...