Hi Reinhard, * Reinhard Tartler <[email protected]> [2025-12-03 06:51]:
I lack bandwidth for this (day job + other packages). As far as I can tell, all the issues are addressed in experimental/unstable/testing with 1.3.3+ds1-2.Options for Debian: - Full backport to 1.1.15 (expensive, no distro precedent). - Bump Trixie to 1.2.8/1.3.3 (i.e., introduce new source "runc-app that produces the `runc` binary", like Ubuntu). - Declare 1.1.x unsupported in Trixie; recommend podman/crun (which is a re-implementation of runc in C) Salvatore, Gianfranco, Jochen, Shengjing Zhu: Please do share your opinions and chime in on the best way forward here.
Thanks for asking, currently I don't have capacity to work on it but I added a reference to your mail to the (E)LTS security tracker.
Cheers Jochen
signature.asc
Description: PGP signature
