runc-stable (1.3.3-0ubuntu1~25.10.3) questing-security; urgency=medium

   * SECURITY REGRESSION: Wrong default tmpfs permission handling
     (LP: #2130744)
     - d/p/lp-2130744.patch: rootfs: only set mode= for tmpfs
       mount if target already existed

 -- Nick Galanis <nick.galanis@canonical.com>  Wed, 19 Nov 2025 12:56:35 +0000

runc-stable (1.3.3-0ubuntu1~25.10.2) questing-security; urgency=medium

  * d/patches: Bug fix when starting containers with mounts that contain "..":
    - d/p/v1.3-0025-openat2-improve-resilience-on-busy-systems.patch:
      openat2: improve resilience on busy systems

 -- Nick Galanis <nick.galanis@canonical.com>  Mon, 03 Nov 2025 22:39:39 +0100

runc-stable (1.3.3-0ubuntu1~25.10.1)  questing-security; urgency=medium

  * New upstream release.
  * SECURITY UPDATE: Escaping a container via masked path abuse 
    - CVE-2025-31133
  * SECURITY UPDATE: Escaping a container due to wrong bind-mounts
    - CVE-2025-52565
  * SECURITY UPDATE: Escaping a container and denial of service
    due to arbitrary writes.
    - CVE-2025-52881

 -- Nick Galanis <nick.galanis@canonical.com>  Thu, 30 Oct 2025 12:06:01 +0000

runc-stable (1.3.0-0ubuntu1) questing; urgency=medium

  * Fork from runc-app (LP: #2120949)
    - Update package name
    - Add Conflics, Replaces, and Provides relations with runc
    - Update package description

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Tue, 26 Aug 2025 14:48:24 -0300
