Re: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622)
On Mon, Feb 21, 2022 at 12:34 AM Andreas Tille <tille@debian.org> wrote:
>
> Hi,
>
> Am Mon, Feb 21, 2022 at 12:05:48AM +0800 schrieb Shengjing Zhu:
> > OK, I'll try to work on updating it and all reverse deps next week.
> > The new version has breaking changes by removing old interfaces.
> > The two main consumers(containerd and podman) have new
> > versions(containerd 1.6, podman 4.0) which work with it.
> > Though you may notice I have a patch by keeping the old interface in
> > app-cni repo, I think it just makes the rev-deps building... The logic
> > in the code may have serious bugs. So it may just cheat the release
> > team's britney and let it go to testing. But if containerd and podman
> > is about to update, then I'd like to take the risk to "cheat". (that's
> > why I wrote that patch at that time...)
>
> From my naive perspective we most probably want last versions of
> containerd and podman anyway and we are early in the release cycle. So
> breaking unstable for a limited time span might be tolerable, IMHO.
>
We only know they will be updated recently since the new versions were
just released a few days ago.
--
Shengjing Zhu
Reply to: