Skip to content

[Deepin Integration]~[v25-Release] Revert to b01dc82 baseline and backport CVE-2026-47766 fix by Zeno-sole@deepin-community/crun by deepin-community-ci-bot[bot] #13720

Description

@deepin-bot

Package information | 软件包信息

包名 版本
crun 1.14.4-1deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4388/testing/ ./

Changelog | 更新信息

crun (1.14.4-1deepin1) unstable; urgency=medium

  • Fix CVE-2026-47766: do not follow rootfs /dev symlinks,
    use safe_openat to prevent rootfs-controlled /dev symlinks from
    redirecting device setup outside the container rootfs
    (upstream commit c6f338ac2e26e216ab7820b91863a0b84e608097)

Metadata

Metadata

Assignees

Type

No type

Projects

Status
In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions