New
runc v1.3.4 -- "Take me to your heart, take me to your soul."
This is the fourth patch release of the 1.3.z release series of runc, and primarily contains a few fixes for some regressions introduced in 1.3.3.
Fixed
- libct: fix mips compilation. (#4962, #4966)
- When configuring a
tmpfsmount, only set themode=argument if the target path already existed. This fixes a regression introduced in our CVE-2025-52881 mitigation patches. (#4971, #4976) - Fix various file descriptor leaks and add additional tests to detect them as comprehensively as possible. (#5007, #5021, #5034)
Changed
- Downgrade
github.com/cyphar/filepath-securejoindependency tov0.5.2, which should make it easier for some downstreams to importruncwithout pulling in too many extra packages. (#5028)