Marcel Stör
Marcel Stör
This is a tough one and I am also looking for a better solution. I currently have `/var/lib/docker/containers` in log2ram as well. However, I made the foolish mistake of not...
For now I configured log rotation only for the Docker logs using [their built-in mechanism for the JSON files](https://docs.docker.com/config/containers/logging/json-file/).
I just created https://github.com/moby/buildkit/issues/2957 which is similar if not the same.
Do you have kernel >=4.8?
Anything missing here? I'd like to wait with rebasing until it's its turn to get merged to avoid having to do that over and over again.
> **the** CPE There's as many CPEs as CVEs involved here. AFAIU suppressing one isn't better than the other but I'd happy to hear arguments that prove me wrong. With...
I am interested in finding out whether the maintainers @jeremylong and @aikebah are planning on eventually merging this or whether I should close it.
> creating a suppression file hosted on GitHub that will be able to be updated faster then the packaged release I can imagine this would certainly be very welcome by...
IMO we do not need to take any action as the CVE is now rejected: https://nvd.nist.gov/vuln/detail/CVE-2022-31569#VulnChangeHistorySection
> That may be true, but CVE-2022-31514 for instance is not. True, sorry. What a mess this guy created...sigh.