Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.rc > #403929

Bug#1120140: runc: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881

From Salvatore Bonaccorso <carnil@debian.org>
Newsgroups linux.debian.bugs.rc
Subject Bug#1120140: runc: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
Date 2025-11-05 22:40 +0100
Message-ID <LNTow-aLon-11@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


Source: runc
Version: 1.3.2+ds1-1
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Control: found -1 1.1.15+ds1-2

Hi,

The following vulnerabilities were published for runc.

CVE-2025-31133[0], CVE-2025-52565[1] and CVE-2025-52881[2].


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-31133
    https://www.cve.org/CVERecord?id=CVE-2025-31133
[1] https://security-tracker.debian.org/tracker/CVE-2025-52565
    https://www.cve.org/CVERecord?id=CVE-2025-52565
[2] https://security-tracker.debian.org/tracker/CVE-2025-52881
    https://www.cve.org/CVERecord?id=CVE-2025-52881

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Back to linux.debian.bugs.rc | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

Bug#1120140: runc: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Salvatore Bonaccorso <carnil@debian.org> - 2025-11-05 22:40 +0100
  Bug#1120140: marked as done (runc: CVE-2025-31133 CVE-2025-52565  CVE-2025-52881) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-11-16 12:30 +0100
  Bug#1120140: marked as done (runc: CVE-2025-31133 CVE-2025-52565  CVE-2025-52881) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-11-17 17:10 +0100
  Bug#1120140: runc: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Reinhard Tartler <siretart@tauware.de> - 2025-12-03 13:00 +0100
  Processed: Re: Bug#1120140: runc: CVE-2025-31133 CVE-2025-52565  CVE-2025-52881 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-12-03 13:00 +0100

csiph-web