On Tuesday, 27 July 2021 18:07:53 CEST Gareth Evans wrote: > Given that these are all fixed in Bullseye (and at least the grave > apt-listbugs issue has been fixed in eg Ubuntu since March 2020 [1]) why > not also Buster?
According to runc security tracker, a fixed runc is available for buster, albeit in buster's security repository. I guess that security repo is missing from your /etc/apt/sources.list See https://www.debian.org/security/#keeping-secure for instructions. HTH Dod