[Git][security-tracker-team/security-tracker][master] Add note to runc

Jochen Sprickerhof (@jspricke) jspricke at debian.org
Wed Dec 3 14:27:48 GMT 2025



Jochen Sprickerhof pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc1dd68f by Jochen Sprickerhof at 2025-12-03T15:27:30+01:00
Add note to runc

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -320,6 +320,11 @@ runc
   NOTE: 20251105: 3 high-severity container breakouts. Used by docker.io.
   NOTE: 20251105: This could be hard to backport so maybe check with the security team
   NOTE: 20251105: and maintainers if a version bump can be considered. (Beuc/front-desk)
+  NOTE: 20251203: the maintainer is looking for help:
+  NOTE: 20251203: https://lists.debian.org/debian-go/2025/12/msg00005.html
+  NOTE: 20251203: but also noted that other distros imported a new upstream version.
+  NOTE: 20251203: Not sure if we should do that as it often has interface changes.
+  NOTE: 20251203: The other option is to drop support as it is on limited support (written in Go) already. (jspricke)
 --
 rust-openssl
   NOTE: 20250209: Added by Front-Desk (apo)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc1dd68f38a3a8116a21196438dfa1f00d359017

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc1dd68f38a3a8116a21196438dfa1f00d359017
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251203/8d06f8a1/attachment.htm>


More information about the debian-security-tracker-commits mailing list