runc v1.3.6 (fixed)
GitHub release tag: v1.3.6
Resolved commit: 491b69bab9fa206b984fb26ba07d3110d62e671f
CVE-2026-41579 fix merge commit in release-1.3: d934454b2eb966118137b85a35518bbfb43bc4c1
/dev fd-based fix commit in release-1.3: a8e53f2c6d6d25cb3dd643cc514f118aab44b097 (cherry-pick of 864db8042dbb191028676f80addf8c35f348aee2)
cgroupv1 symlink fd-based fix commit in release-1.3: 9432ad3a96f5fe99e5d2805f9b6807d43af639a1 (cherry-pick of 66acd48f9d423e1a5551aa4cc6a8fab91ddec945)
Source: official GitHub release binary (runc.amd64) downloaded from
https://github.com/opencontainers/runc/releases/download/v1.3.6/runc.amd64

Tested via: bundle/vuln_variant/reproduction_steps.sh
Binary cached at: /data/pruva/project-cache/517c163c-d303-4c5e-8999-e2db5251d636/runc-repro/runc-v1.3.6.amd64