This is the second patch release in the 1.5.z release series of runc, which primarily includes a workaround for a Linux kernel bug causing random runc crashes when using cgroup v2, and other fixes. Fixed runc exec -p with a process.json lacking env now sets HOME again (a regression in runc 1.3.0). (#5265, #5266, #5459) Worked around a Linux kernel bug (present since kernel v6.17, fixed in v7.2) wh…
This is the first patch release in the 1.5.z release series of runc, and primarily includes a fix for a serious regression on Ubuntu 20.04 kernels. Fixed There was a regression reported in with the maskPaths optimisation added in 1.5.0-rc.3 (#5275). On Ubuntu Focal (20.04), attempts to mount tmpfs with the nr_inodes=1 option will fail due to a downstream kernel patch (ironically originating from A…
This is the somewhat-delayed^Wlong-awaited first stable release of the 1.5.z release branch of runc. It contains a handful of fixes for issues found in 1.5.0-rc.3 and an important dependency bump for libpathrs. This is the third release of runc following our new release and support policy (see RELEASES.md for more details). This means that, as of this release: The runc 1.2.z (and earlier) release…
This is the sixth patch release of the 1.3.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability (CVE-2026-41579) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following…
This is the third release candidate for the 1.5.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability (CVE-2026-41579) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. We plan to release 1.5.0 in the next two weeks. Se…
This is the third patch release of the 1.4.z series of runc. Among some performance improvements and bugfixes, it includes a fix for a low-severity vulnerability (CVE-2026-41579) and users are encouraged to update. As it was a low-severity vulnerability and it was reported by multiple people, we decided to release it publicly with NO EMBARGO. Security This release includes a fix for the following…
This is the second release candidate of the runc 1.5.0 release. It mostly contains build fixes and improvements, but also includes a new minor feature and some deprecations. runc v1.5.0-rc.2 includes all of the patches backported to runc v1.4.2. Users are strongly encouraged to test our release candidates over the next few weeks so we can fix issues before the general release. You should expect ru…
This is the second patch release of the 1.4.z release series of runc. Fixed A regression in runc v1.3.0 which can result in a stuck runc exec or runc run when the container process runs for a short time. (#5208, #5210, #5216) Mount sources that need to be open on the host are now closed earlier during container start, reducing the total amount of used file descriptors and helping to avoid hitting…
This is the fifth patch release of the 1.3.z release series of runc, and primarily contains a few fixes for issues found in 1.3.4. Fixed Recursive atime-related mount flags (rrelatime et al.) are now applied properly. (#5115, #5098) PR #4757 caused a regression that resulted in spurious cannot start a container that has stopped errors when running runc create and has thus been reverted. (#5158, #5…
This is the first release candidate of the runc 1.5.0 release. It contains a couple of new features, but is mostly made up of various cleanups (such as the removal of many deprecated APIs) and improvements. runc v1.5.0-rc.1 includes all of the patches backported to runc v1.4.1. Users are strongly encouraged to test our release candidates over the next two months so we can fix issues before the gen…
This is the first patch release of the 1.4.z release series of runc. It primarily includes some fixes for issues found in 1.4.0. Deprecated libcontainer/configs.MPOL_* constants added in runc 1.4.0. (#5110, #5055) Added Preliminary loong64 support. (#5062, #4938) Fixed libct: fix panic in initSystemdProps when processing certain systemd properties in the OCI spec. (#5161, #5133) libct: fix several…
This is the first release of the 1.4.z release branch of runc. It contains a few fixes for issues found in 1.4.0-rc.3. This version of runc supports runtime-spec v1.3 (see docs/spec-conformance.md for the few features that are still missing). This is the second release of runc following our new release and support policy (see RELEASES.md for more details). This means that, as of this release: The…