Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41: runc Critical Update for LookPath Issue CVE-2025-47906

fedora
Calendar Grey October 18, 2025
Dist Fedora Esm H88
Critical security update for Fedora 41's runc addresses unexpected paths in LookPath. Install urgently!
Update to release v1.3.2

Summary

The runc command can be used to start containers which are packaged

in accordance with the Open Container Initiative's specifications,

and to manage containers running under runc.

Update Information:

Update to release v1.3.2

Topics%20covered

Topics Covered

security advisory security issue fedora critical DoS runc

Change Log

* Thu Oct 9 2025 Bradley G Smith - 2:1.3.2-1 - Update to release v1.3.2 - Resolves: rhbz#2399284, rhbz#2399563 - Upstream fixes

References


[ 1 ] Bug #2399284 - CVE-2025-47906 runc: Unexpected paths returned from LookPath in os/exec [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2399284 [ 2 ] Bug #2399563 - CVE-2025-47906 runc: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399563

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-c2fa2eb17c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: runc
Product: Fedora 41
Version: 1.3.2
Release: 1.fc41
URL: https://github.com/opencontainers/runc
Summary: CLI for running Open Containers

Topics%20covered

Topics Covered

security advisory security issue fedora critical DoS runc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here