Are we affected by any application?

jfranco · November 30, 2025, 11:58am

mrmarkuz · November 30, 2025, 8:18pm

I don’t think so as we are not dependent on Google Cloud in any way.

jfranco · November 30, 2025, 10:14pm

Hi @mrmarkuz

I’m posting the breached that happened to Google, but this is related to runc, this is related to containers.

This is about a non-root user gaining access to the system:

Thanks,

mrmarkuz · November 30, 2025, 10:43pm

As far as I understand it, crun is used by podman in NS8.

If there’s a security issue, it should be fixed by updating the OS.

davidep · December 1, 2025, 9:37am

Yes NS8 has no runc at all and NS8 apps are typically rootless. From the above advisory:

Using rootless containers, as doing so will block most of the
inadvertent writes (runc would run with reduced privileges, making
attempts to write to procfs files ineffective).

Check the current Podman settings with:

podman system info | grep -A 3 ociRuntime