gpp_maybe Security update for runc

SUSE-SLE-Module-Basesystem-15-SP7-2025-3950

This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252232). - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races (bsc#1252232). - CVE-2025-52881: Fixed container escape and denial of service due to arbitrary write gadgets and procfs write redirects (bsc#1252232). Update to runc v1.2.7. - Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.7>

• Release Date
  Nov 5 2025
• References
  Bugzilla: 1252232
  CVEs: CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  runc
  Tool for spawning and running OCI containers

  1.2.7-150000.80.1 lock rpm lock src

Basesystem Module 15.7 ppc64le

• Packages
  runc
  Tool for spawning and running OCI containers

  1.2.7-150000.80.1 lock rpm lock src

Basesystem Module 15.7 aarch64

• Packages
  runc
  Tool for spawning and running OCI containers

  1.2.7-150000.80.1 lock rpm lock src

Basesystem Module 15.7 x86_64

• Packages
  runc
  Tool for spawning and running OCI containers

  1.2.7-150000.80.1 lock rpm lock src