Re: singularity-container: CVE-2021-33622

[Andreas Tille <andreas@an3as.eu>]

Hi Shengjing,

Am Fri, Feb 18, 2022 at 09:11:45PM +0530 schrieb Nilesh Patra:
> |	-o cmd/starter/c/starter /home/nilesh/packages/singularity/singularity-container/_build/src/github.com/sylabs/singularity/cmd/starter/main_linux.go
> | ../pkg/network/network_linux.go:22:2: cannot find package "github.com/containernetworking/cni/pkg/types/100" in any of:
> | 	/BUILDDIR/singularity-container/_build/src/github.com/sylabs/singularity/vendor/github.com/containernetworking/cni/pkg/types/100 (vendor tree)
> 
> Now this is because it needs version 1.0.1 of golang-github-appc-cni while we have 0.8.1-1 in unstable and the desired version
> is still in experimental[1].
> So you will need to transition it.

Do you see any reason not to upgrade golang-github-appc-cni?

Kind regards

      Andreas.
 
> [1]: https://tracker.debian.org/pkg/golang-github-appc-cni
> [2]: https://release.debian.org/britney/pseudo-excuses-experimental.html#golang-github-appc-cni

-- 
http://fam-tille.de