Containers

runc: what changed

In the last 90 days, 3 summarized changes: 1 security advisories, 1 releases, 1 fixes. Stackdiff reads runc's own feeds (github.com) and writes two sentences per change with a link to the source; it never republishes release notes. Sources last checked .

Needs attention

Breaking changes, security advisories, end-of-life and license changes from the last 90 days, worst first.

1.3.6Securitymedium
GHSA-xjvp-4fhw-gc47: runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

Latest changes

Newest first, every type. Releases and fixes sit below anything that can hurt you in the weekly brief; here they are in order.

News
Show HN: Godot and Rust based multiplexer (terminal panes and more)
News
Rune is now open source
News
NTSB issues investigative update on B-767 runway excursion accident in Miami
News
Investing in mothers? The long-run impact of a universal child care
News
Desert Ant Labs: local, fast models that run on device
News
Performance of WebAssembly Runtimes in 2026
News
How GPT‑5.6 Sol helps run quantum computing experiments
News
Keep Our Servers Running
News
Show HN: TERMy – A fast terminal assistant that does not use LLMs
News
Which tools do Claude, Codex and Cursor choose? We measured 17k runs to find out
News
Porting my 1993 Amiga game to Godot, with an LLM reading the 68000 assembly
News
Music Theory for Programmers
News
Paint.net 5.2 alpha now runs on Linux
News
Show HN: Weedout – Safari extension that hides YouTube AI-labeled videos
News
Show HN: OwnTime – a chess clock for your day's priorities
News
Launch HN: Nori Robotics (YC S26) – A low-cost humanoid robot for development
News
Show HN: Running 104GB Qwen3.8-Flash-Next on 48GB Mac with at ~12 tok/s
News
2004 RuneScape fit a multiplayer RPG into 56k dial-up
News
Run macOS Software on Linux
1.5.1Fix
runc v1.5.1 -- "El lujo es vulgaridad, dijo, y me conquistó."
1.3.6Securitymedium
GHSA-xjvp-4fhw-gc47: runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations
1.5.0Release
runc v1.5.0 -- "Why do we even have that lever?!"
1.3.6Securitymedium
runc 1.3.6 -- "On no account should you allow a Vogon to read poetry at you."
1.5.0-rc.3Securitymedium
runc 1.5.0-rc.3 -- "The best way to get a drink out of a Vogon is to stick your finger down his throat."
1.4.3Securitymedium
runc 1.4.3 -- "The best way to irritate him is to feed his grandmother to the Ravenous Bugblatter Beast of Traal."
1.5.0-rc.2Securityhigh
runc v1.5.0-rc.2 -- "いざやいざや、見に行かん"
1.4.2Fix
runc v1.4.2 -- "Я — Земля! Я своих провожаю питомцев"
1.3.5Fix
runc v1.3.5 -- "Lo viejo funciona!"
1.5.0-rc.1Securityhigh
runc v1.5.0-rc.1 -- "憎しみを束ねてもそれは脆い!"
1.4.1Deprecatedmedium
runc v1.4.1 -- "La guerre n'est pas une aventure. La guerre est une maladie. Comme le typhus."

Where Stackdiff reads runc

Only what the vendor publishes for machines. Excerpts are capped, summaries are our own two sentences, and every line links back.

Get runc changes in your Monday brief

Add runc and the rest of your stack; breaking changes and CVEs go out the moment they're seen, everything else on Monday.

Get your first brief

Other containers tools