Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

runc-1.4.1-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: runc Distribution: openSUSE Tumbleweed
Version: 1.4.1 Vendor: openSUSE
Release: 1.1 Build date: Fri Mar 13 13:34:11 2026
Group: System/Management Build host: reproducible
Size: 12156543 Source RPM: runc-1.4.1-1.1.src.rpm
Packager: https://bugs.opensuse.org
Url: https://github.com/opencontainers/runc
Summary: Tool for spawning and running OCI containers
 
runc is a CLI tool for spawning and running containers according to the OCI
specification. It is designed to be as minimal as possible, and is the workhorse
of Docker. It was originally designed to be a replacement for LXC within Docker,
and has grown to become a separate project entirely.

Provides

Requires

License

Apache-2.0

Changelog

* Fri Mar 13 2026 Aleksa Sarai <cyphar@cyphar.com>
  - Update to runc v1.4.1. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.4.1>.
  - runc.keyring has been updated to match the new version from upstream.
* Fri Nov 28 2025 Aleksa Sarai <asarai@suse.com>
  - Add libpathrs build option to allow builds to switch to libpathrs. In future
    we will switch to enabling this by default for Tumbleweed and Leap >= 16.
* Fri Nov 28 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.4.0. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.4.0>. bsc#1254362
* Wed Nov 05 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.3.3. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232
    * CVE-2025-31133
    * CVE-2025-52565
    * CVE-2025-52881
  - Remove upstreamed patches for bsc#1252232:
    - 2025-11-05-CVEs.patch
* Thu Oct 16 2025 Aleksa Sarai <asarai@suse.com>
  [ This update was only released for SLE 12 and 15. ]
  - Backport patches for three CVEs. All three vulnerabilities ultimately allow
    (through different methods) for full container breakouts by bypassing runc's
    restrictions for writing to arbitrary /proc files. bsc#1252232
    * CVE-2025-31133
    * CVE-2025-52565
    * CVE-2025-52881
    + 2025-11-05-CVEs.patch
* Fri Oct 10 2025 Aleksa Sarai <asarai@suse.com>
  [ This update was only released for SLE 12 and 15. ]
  - Update to runc v1.2.7. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.7>.
* Sat Oct 04 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.3.2. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.3.2> bsc#1252110
    - Includes an important fix for the CPUSet translation for cgroupv2.
* Thu Sep 04 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.3.1. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.3.1>
  - Fix runc 1.3.x builds on SLE-12 by enabling --std=gnu11.
* Tue Apr 29 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.3.0. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.3.0>
* Thu Apr 10 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.6. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.6>.
* Fri Feb 14 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.5. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.5>.
* Tue Jan 07 2025 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.4. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.4>.
  - Update runc.keyring to match upstream.
* Wed Dec 11 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.3. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.3>.
* Sat Nov 16 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.2. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.2>.
* Fri Nov 01 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.1. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.1>.
* Mon Oct 21 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.0. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.0>.
  - Remove upstreamed patches.
    - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
    - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
    - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
    - 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch
* Tue Sep 03 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.0~rc3. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3>.
    Includes the patch for CVE-2024-45310. bsc#1230092
* Tue Sep 03 2024 Aleksa Sarai <asarai@suse.com>
  [ This was only ever released for SLES and Leap. ]
  - Update to runc v1.1.14. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.14>.
    Includes the patch for CVE-2024-45310. bsc#1230092
  - Rebase patches:
    * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
    * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
    * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
    * 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch
* Mon Jul 22 2024 Aleksa Sarai <asarai@suse.com>
  [ This was only ever released for SLES and Leap. ]
  - Update to runc v1.1.13. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.13>.
  - Rebase patches:
    * 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
    * 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
    * 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
  - Backport <https://github.com/opencontainers/runc/pull/3931> to fix a
    performance issue when running lots of containers, caused by systemd getting
    too many mount notifications. bsc#1214960
    + 0004-bsc1214960-nsenter-cloned_binary-remove-bindfd-logic.patch
* Fri Jul 12 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.0~rc2. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.2>.
  - Re-allow Go 1.22 builds for >= 1.22.4.
* Thu Apr 25 2024 Aleksa Sarai <asarai@suse.com>
  - Build with Go 1.21 until the upstream Go 1.22 compatibility issue gets fixed.
    <https://github.com/opencontainers/runc/issues/4233>
* Thu Apr 04 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.2.0~rc1. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.0-rc.1>.
  - Remove upstreamed patches.
    - 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
    - 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
    - 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
* Thu Mar 21 2024 Aleksa Sarai <asarai@suse.com>
  - Add upstream patch <https://github.com/opencontainers/runc/pull/4219> to
    properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
    + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
    + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
    + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch
* Wed Jan 31 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.12. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.12>. bsc#1218894
    * This release fixes a container breakout vulnerability (CVE-2024-21626). For
      more details, see the upstream security advisory:
      <https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv>
    * Remove upstreamed patches:
    - CVE-2024-21626.patch
    * Update runc.keyring to match upstream changes.
* Thu Jan 18 2024 Aleksa Sarai <asarai@suse.com>
  [ This was only ever released for SLES. ]
  - Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
    <https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv>
    + CVE-2024-21626.patch
* Tue Jan 02 2024 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.11. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.11>.
* Wed Nov 01 2023 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.10. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.10>.
* Wed Sep 06 2023 Danish Prakash <danish.prakash@suse.com>
  - Update to runc v1.1.9. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.9>.
* Wed Jul 19 2023 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.8. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.8>.
* Thu Apr 27 2023 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.7. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.7>.
  - Update runc.keyring to upstream version.
* Wed Apr 12 2023 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.6. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.6>.
* Wed Mar 29 2023 Aleksa Sarai <asarai@suse.com>
  - Update to runc v1.1.5. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.1.5>.
    Includes fixes for the following CVEs:
    - CVE-2023-25809 bsc#1209884
    - CVE-2023-27561 bsc#1208962
    - CVE-2023-28642 bsc#1209888
    * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
    * Fix changing the ownership of host's `/dev/null` caused by fd redirection
      (a regression in 1.1.1). bsc#1207004
    * Fix rare runc exec/enter unshare error on older kernels.
    * nsexec: Check for errors in `write_log()`.
  - Drop version-specific Go requirement.

Files

/usr/bin/runc
/usr/sbin/runc
/usr/share/doc/packages/runc
/usr/share/doc/packages/runc/README.md
/usr/share/licenses/runc
/usr/share/licenses/runc/LICENSE
/usr/share/man/man8/runc-checkpoint.8.gz
/usr/share/man/man8/runc-create.8.gz
/usr/share/man/man8/runc-delete.8.gz
/usr/share/man/man8/runc-events.8.gz
/usr/share/man/man8/runc-exec.8.gz
/usr/share/man/man8/runc-kill.8.gz
/usr/share/man/man8/runc-list.8.gz
/usr/share/man/man8/runc-pause.8.gz
/usr/share/man/man8/runc-ps.8.gz
/usr/share/man/man8/runc-restore.8.gz
/usr/share/man/man8/runc-resume.8.gz
/usr/share/man/man8/runc-run.8.gz
/usr/share/man/man8/runc-spec.8.gz
/usr/share/man/man8/runc-start.8.gz
/usr/share/man/man8/runc-state.8.gz
/usr/share/man/man8/runc-update.8.gz
/usr/share/man/man8/runc.8.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Jul 24 15:27:28 2026