diff --git a/UPSTREAM_PROJECTS.yaml b/UPSTREAM_PROJECTS.yaml
index bf70e5ece3..ecf149b81e 100644
--- a/UPSTREAM_PROJECTS.yaml
+++ b/UPSTREAM_PROJECTS.yaml
@@ -221,7 +221,7 @@ projects:
     repos:
       - name: runc
         versions:
-          - tag: v1.1.10
+          - tag: v1.1.12
             go_version: "1.20"
   - org: prometheus
     repos:
diff --git a/projects/opencontainers/runc/ATTRIBUTION.txt b/projects/opencontainers/runc/ATTRIBUTION.txt
index df76c8b235..a2b8ad1971 100644
--- a/projects/opencontainers/runc/ATTRIBUTION.txt
+++ b/projects/opencontainers/runc/ATTRIBUTION.txt
@@ -17,7 +17,7 @@ https://github.com/moby/sys/mountinfo
 ** github.com/mrunalp/fileutils; version v0.5.1 --
 https://github.com/mrunalp/fileutils
 
-** github.com/opencontainers/runc; version v1.1.10 --
+** github.com/opencontainers/runc; version v1.1.12 --
 https://github.com/opencontainers/runc
 
 ** github.com/opencontainers/runtime-spec/specs-go; version v1.0.3-0.20210326190908-1c3f411f0417 --
@@ -361,7 +361,7 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 ------
 
-** github.com/cyphar/filepath-securejoin; version v0.2.3 --
+** github.com/cyphar/filepath-securejoin; version v0.2.4 --
 https://github.com/cyphar/filepath-securejoin
 
 Copyright (C) 2014-2015 Docker Inc & Go Authors. All rights reserved.
diff --git a/projects/opencontainers/runc/CHECKSUMS b/projects/opencontainers/runc/CHECKSUMS
index 9f35c710d6..1f440f6678 100644
--- a/projects/opencontainers/runc/CHECKSUMS
+++ b/projects/opencontainers/runc/CHECKSUMS
@@ -1,2 +1,2 @@
-948fd205960db7c9ca9c3059bec2abbabe92fb1425fef4d186f14db6fc1974ce  _output/bin/runc/linux-amd64/runc
-bc5b316c92ab6489615c45408e05d4faed887dbbd44cdce77dd51a9584421594  _output/bin/runc/linux-arm64/runc
+3284210da97d68362b47cdc645fc4fb7f30f58c66999b969105ff27b32a20d58  _output/bin/runc/linux-amd64/runc
+94bba1a9c68a530cfc1920680929d5c5879700b18a55bb49aa3ccbe93ad8a010  _output/bin/runc/linux-arm64/runc
diff --git a/projects/opencontainers/runc/GIT_TAG b/projects/opencontainers/runc/GIT_TAG
index ac84f8c319..19f5e1b57e 100644
--- a/projects/opencontainers/runc/GIT_TAG
+++ b/projects/opencontainers/runc/GIT_TAG
@@ -1 +1 @@
-v1.1.10
+v1.1.12
diff --git a/projects/opencontainers/runc/README.md b/projects/opencontainers/runc/README.md
index 157df11b60..4a14d91357 100644
--- a/projects/opencontainers/runc/README.md
+++ b/projects/opencontainers/runc/README.md
@@ -1,5 +1,5 @@
 ## **runc**
-![Version](https://img.shields.io/badge/version-v1.1.10-blue)
+![Version](https://img.shields.io/badge/version-v1.1.12-blue)
 ![Build Status](https://codebuild.us-west-2.amazonaws.com/badges?uuid=eyJlbmNyeXB0ZWREYXRhIjoiQ3dHSU45Mnd3bGhzMCtlbGliWXFNcXIxbGx0VDAxVmZqaGtSQ0hXMFN2Rm1DWkNuMG5ibi9GTVRSOFVQK0ZZZW9sUEU4MGJwTzYyVUxEU0lBUG1zVlk4PSIsIml2UGFyYW1ldGVyU3BlYyI6Im5Td1JrV0NEOEh1akJWSXQiLCJtYXRlcmlhbFNldFNlcmlhbCI6MX0%3D&branch=main)
 
 [runc](https://github.com/opencontainers/runc) is a CLI tool for spawning and running containers on Linux according to the OCI specification.
@@ -10,7 +10,7 @@
 [repo](https://github.com/opencontainers/runc) and decide on new version. 
 1. Update the `GIT_TAG` file to have the new desired version based on the upstream release tags.
 1. Compare the old tag to the new, looking specifically for Makefile changes. 
-ex: [1.1.6 compared to 1.1.7](https://github.com/opencontainers/runc/compare/v1.1.6...v1.1.10). Check the release [Makefile](https://github.com/opencontainers/runc/blob/main/Makefile)
+ex: [1.1.6 compared to 1.1.7](https://github.com/opencontainers/runc/compare/v1.1.6...v1.1.12). Check the release [Makefile](https://github.com/opencontainers/runc/blob/main/Makefile)
 for any build flag changes, tag changes, dependencies, etc.  The [GO_BUILD](https://github.com/opencontainers/runc/blob/main/Makefile#L27) definition should be looked at closely.
 1. Verify the golang version has not changed. The version specified in the [Dockerfile](https://github.com/opencontainers/runc/blob/main/Dockerfile#L1)
 should be considered the source of truth.