Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update runc dependency #156

Closed
jdolitsky opened this issue Apr 22, 2020 · 4 comments
Closed

Update runc dependency #156

jdolitsky opened this issue Apr 22, 2020 · 4 comments

Comments

@jdolitsky
Copy link
Contributor

See issue here: helm/helm#7846

@killwing
Copy link

any updates? we meet security issues dep on runc & docker.

@bacongobbler
Copy link

bacongobbler commented Aug 20, 2020

runc is working towards a v1.0.0 release, so it may be worth holding off until it's been released. As described upstream, the security issues related to runc and docker are irrelevant for oras as at no point are container runtimes executed.

@bacongobbler
Copy link

bacongobbler commented Jul 20, 2021

pinging here again as another ticket was opened at helm/helm#9956. runc v1.0.1 is now available if someone wants to tackle this.

@shizhMSFT
Copy link
Contributor

Closing as runc has already upgraded to v1.1.1. Once we upgrade to oras-go v2. The runc dependency should go away.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants