Does crio release-1.27 needs go module update of runc to 1.1.12 ? #7760
-
|
The following security issue is fixed in runc 1.1.12 : crio main branch updated its go module dependency of runc to 1.1.12 but I am wondering if a similar change is needed for 1.27 release too. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
nope! the vulnerability is in the runc binary, not the libcontainer library, so cri-o is not affected. |
Beta Was this translation helpful? Give feedback.
nope! the vulnerability is in the runc binary, not the libcontainer library, so cri-o is not affected.