Re: Should singularity-container make it to next release?

2023-01-26 Thread Nilesh Patra
On Thu, Jan 26, 2023 at 09:51:21AM +0100, Paul Gevers wrote: > On 25-01-2023 20:14, Moritz Muehlenhoff wrote: > > On Sat, Jan 21, 2023 at 08:34:40PM +0100, Salvatore Bonaccorso wrote: > > > So in my understanding of the above the situation around > > > singularity-container, > > > which lead for b

Re: Should singularity-container make it to next release?

2023-01-26 Thread Nilesh Patra
On 26 January 2023 10:26:05 pm IST, Andreas Tille wrote: >Am Thu, Jan 26, 2023 at 08:22:15AM -0700 schrieb Sam Hartman: >> >> Well, if you and a group of people believe you can maintain it in stable >> given the additional discussions ith upstream, then explicitly say >> you're ready to sign u

Re: golang-github-disintegration-imaging: CVE-2023-36308

2024-04-24 Thread Nilesh Patra
Hi Security team, There's a third party patch for this CVE[2], and at least testing locally with the PoC in[1] seems to mitigate the issue. Do you think this is OK to pick and upload? Maytham Alsudany wrote: > Hi Anthony, > > As you are the uploader for golang-github-disintegration-imaging,