| Release | Version |
|---|---|
| buster | 1.0.0~rc6+dfsg1-3 |
| buster (security) | 1.0.0~rc6+dfsg1-3+deb10u2 |
| bullseye | 1.0.0~rc93+ds1-5+deb11u2 |
| bookworm | 1.1.5+ds1-1 |
| trixie | 1.1.5+ds1-1 |
| sid | 1.1.5+ds1-1 |
| Bug | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2023-28642 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | runc is a CLI tool for spawning and running containers according to th ... |
| CVE-2023-27561 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | runc through 1.1.4 has Incorrect Access Control leading to Escalation ... |
| CVE-2023-25809 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | runc is a CLI tool for spawning and running containers according to th ... |
| CVE-2021-43784 | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | fixed | fixed | fixed | runc is a CLI tool for spawning and running containers on Linux accord ... |
| Bug | Description |
|---|---|
| CVE-2022-29162 | runc is a CLI tool for spawning and running containers on Linux accord ... |
| CVE-2021-30465 | runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Dire ... |
| CVE-2019-19921 | runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalat ... |
| CVE-2019-16884 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other ... |
| CVE-2019-5736 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other produ ... |
| CVE-2016-9962 | RunC allowed additional container processes via 'runc exec' to be ptra ... |
| CVE-2016-8867 | Docker Engine 1.12.2 enabled ambient capabilities with misconfigured c ... |
| CVE-2016-3697 | libcontainer/user/user.go in runC before 0.1.0, as used in Docker befo ... |
| DSA / DLA | Description |
|---|---|
| DLA-3369-1 | runc - security update |
| DLA-2841-1 | runc - security update |