Skip to content

@dmcgowan dmcgowan released this Feb 14, 2019

Welcome to the v1.2.4 release of containerd!

The fourth patch release for containerd 1.2 re-vendors
runc which includes the patch for the critical CVE-2019-5736 escape
vulnerability. This release also includes a few fixes for the CRI plugin as
well as a change for Windows; all these changes are noted below.

Notable Updates

  • cri: Set /etc/hostname #1042
  • cri: Fix env performance issue #1045
  • runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve CVE-2019-5736
  • cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  • Windows: NewDirectIOFromFIFOSet #2934

Please try out the release binaries and report any issues at


  • Lantao Liu
  • Justin Terry
  • Sebastiaan van Stijn
  • Derek McGowan
  • Michael Crosby
  • Phil Estes
  • John Howard


  • e6b3f5632f Merge pull request #3002 from estesp/prepare-1.2.4-release
  • 5d1443dca7 Prepare v1.2.4 release
  • 2095626cff Merge pull request #3014 from thaJeztah/1.2_bump_cri
  • 78286104d0 Merge pull request #3013 from thaJeztah/1.2_backport_windows_changes
  • 3cbdf9e488 [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964
  • dfa19e5969 Windows:NewDirectIOFromFIFOSet
  • 84a14ae000 Update runhcs options to include CRI Sandbox support
  • 6a8198b07d Forward ctr.exe --debug as io.containerd.runhcs.v1 options
  • d40cc95fcf Implement io.containerd.runhcs.v1 shim log opts
  • 30ca1c5544 Add io.containerd.runhcs.v1 shim proto options
  • 7908802cb5 Fix Makefile to run protobuild on paths with spaces
  • 583472f67a Merge pull request #2998 from thaJeztah/1.2_backport_bump_runc_cve_2019-5736
  • b4bf3e340c Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736)
  • 74133fa4ea Merge pull request #2995 from thaJeztah/1.2_backport_remove_normalize_image_ref
  • ed756ffdd4 Use distribution's reference.ParseDockerRef
  • 2fb3823635 Bump to 0d3efadf0154c2b8a4e7b6621fff9809655cc580

Changes from containerd/cri

  • da0c016c Merge pull request #1049 from Random-Liu/cherrypick-#1045-release-1.2
  • fd12e919 Merge pull request #1046 from Random-Liu/cherrypick-#1042-release-1.2
  • ca6506b4 Include default envs from containerd.
  • 2add88c1 Add env cache.
  • 50fbeb6f Don't log config at info level.
  • 1a51d430 Set /etc/hostname.

Dependency Changes

Previous release can be found at v1.2.3

  • c3cf754321fc38c6af5dfd2552fdde0ad192b31d -> da0c016c830b2ea97fd1d737c49a568a816bf964
  • b38e5838b7b2f2ad48e06ec4b500011976080621 -> 0d3efadf0154c2b8a4e7b6621fff9809655cc580
  • 12f6a991201fdb8f82579582d5e00e28fba06d0a -> 6635b4f0c6af3810594d2770f662f34ddc15b40d
  • 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd
Assets 3