containerd 1.5.8
Welcome to the v1.5.8 release of containerd!
The eighth patch release for containerd 1.5 contains a mitigation for CVE-2021-41190
as well as several fixes and updates.
Notable Updates
- Handle ambiguous OCI manifest parsing (GHSA-5j5w-g665-5m35)
- Filter selinux xattr for image volumes in CRI plugin (#5104)
- Use DeactiveLayer to unlock layers that cannot be renamed in Windows snapshotter (#5422)
- Fix pull failure on unexpected EOF (#5921)
- Close task IO before waiting on delete (#5974)
- Log a warning for ignored invalid image labels rather than erroring (#6124)
- Update pull to handle of non-https urls in descriptors (#6221)
See the changelog for complete list of changes
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Phil Estes
- Sebastiaan van Stijn
- Derek McGowan
- Kazuyoshi Kato
- Wei Fu
- Akihiro Suda
- Daniel Canter
- Kevin Parsons
- Kohei Tokunaga
- Samuel Karp
- Claudiu Belu
- Jacob Blain Christen
- Maksym Pavlenko
- Mike Brown
- Paul "TBBle" Hampson
- Sambhav Kothari
- zounengren
Changes
29 commits
- [release/1.5] Prepare release notes for v1.5.8 (#6260)
2385fd14d
Prepare release notes for v1.5.8
- [release/1.5] mailmap: Add Kevin Parsons (#6261)
ef071b07b
mailmap: Add Kevin Parsons
- Merge Github Security Advisory GHSA-5j5w-g665-5m35
- [release/1.5] Fix containerd fails to pull OCI image with non-
http(s)://
urls (#6238)01428ec40
Fix containerd fails to pull OCI image with non-http(s)://
urls
- [release/1.5] go.mod: Bump hcsshim to v0.8.23 (#6231)
2bd3f18d9
[release/1.5] go.mod: Bump hcsshim to v0.8.23
- [release/1.5] go.mod: Bump ttrpc to 1.1.0 (#6229)
047ea15d2
[release/1.5] go.mod: Bump ttrpc to 1.1.0
- [release/1.5] update Go to 1.16.10 (#6210)
- [release/1.5] Output a warning for label image labels instead of erroring (#6187)
b988fc918
Output a warning for label image labels instead of erroring
- [release/1.5] task delete: Closes task IO before waiting (#6129)
bf02a8330
task delete: Closes task IO before waiting
- [release/1.5] Update test timeout based on recent cancellations (#6134)
3109820f5
Update test timeout based on recent cancellations
- [release/1.5] Use deactivatelayer to recover layers that we cannot rename (#6133)
- [release/1.5] Fix pull fails on unexpected EOF (#6117)
aa7c9d9da
Fix pull fails on unexpected EOF
- [release/1.5 backport] cri: filter selinux xattr for image volumes (#5104)
c0534c168
[release/1.5 backport] cri: filter selinux xattr for image volumes
Changes from containerd/ttrpc
34 commits
- Add protoc-gen-go-ttrpc (#96)
6eabacc
Add protoc-gen-go-ttrpc
- client: Handle sending/receiving in separate goroutines (#94)
4f0aeb5
client: Handle sending/receiving in separate goroutines
- Run Protobuild in GitHub Actions (#95)
- replace pkg/errors (#93)
81faa3e
replace pkg/errors from vendor
- Rename branch from master to main (#86)
a143311
Rename branch from master to main
- Make "go test" and "go build" work on macOS (#85)
- Return Unimplemented when services or methods are not implemented (#83)
fede9db
Return Unimplemented when services or methods are not implemented
- Remove "Very new" and checked TODO items (#84)
dcc7d39
Remove "Very new" and checked TODO items
- removing glide from ignore (#82)
2776d3f
removing glide from ignore
- go.mod: update dependencies (#79)
- remove travis, add codecov badge (#78)
- Use GitHub Actions for CI (#77)
5bab91b
Use GitHub Actions for CI
- go.mod: sirupsen/logrus v1.7.0 (#76)
Dependency Changes
- github.com/Microsoft/hcsshim v0.8.21 -> v0.8.23
- github.com/containerd/ttrpc v1.0.2 -> v1.1.0
Previous release can be found at v1.5.7