Skip to content

containerd 1.5.8

Compare
Choose a tag to compare
@github-actions github-actions released this 18 Nov 20:10
v1.5.8
1e5ef94

Welcome to the v1.5.8 release of containerd!

The eighth patch release for containerd 1.5 contains a mitigation for CVE-2021-41190
as well as several fixes and updates.

Notable Updates

  • Handle ambiguous OCI manifest parsing (GHSA-5j5w-g665-5m35)
  • Filter selinux xattr for image volumes in CRI plugin (#5104)
  • Use DeactiveLayer to unlock layers that cannot be renamed in Windows snapshotter (#5422)
  • Fix pull failure on unexpected EOF (#5921)
  • Close task IO before waiting on delete (#5974)
  • Log a warning for ignored invalid image labels rather than erroring (#6124)
  • Update pull to handle of non-https urls in descriptors (#6221)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

  • Phil Estes
  • Sebastiaan van Stijn
  • Derek McGowan
  • Kazuyoshi Kato
  • Wei Fu
  • Akihiro Suda
  • Daniel Canter
  • Kevin Parsons
  • Kohei Tokunaga
  • Samuel Karp
  • Claudiu Belu
  • Jacob Blain Christen
  • Maksym Pavlenko
  • Mike Brown
  • Paul "TBBle" Hampson
  • Sambhav Kothari
  • zounengren

Changes

29 commits

  • [release/1.5] Prepare release notes for v1.5.8 (#6260)
  • [release/1.5] mailmap: Add Kevin Parsons (#6261)
  • Merge Github Security Advisory GHSA-5j5w-g665-5m35
    • 15d8c03e3 schema1: reject ambiguous documents
    • 833407fbf images: validate document type before unmarshal
  • [release/1.5] Fix containerd fails to pull OCI image with non-http(s):// urls (#6238)
    • 01428ec40 Fix containerd fails to pull OCI image with non-http(s):// urls
  • [release/1.5] go.mod: Bump hcsshim to v0.8.23 (#6231)
    • 2bd3f18d9 [release/1.5] go.mod: Bump hcsshim to v0.8.23
  • [release/1.5] go.mod: Bump ttrpc to 1.1.0 (#6229)
    • 047ea15d2 [release/1.5] go.mod: Bump ttrpc to 1.1.0
  • [release/1.5] update Go to 1.16.10 (#6210)
    • 7b20299bc [release/1.5] update Go to 1.16.10
    • 641976bea [release/1.5] update Go to 1.16.9
  • [release/1.5] Output a warning for label image labels instead of erroring (#6187)
    • b988fc918 Output a warning for label image labels instead of erroring
  • [release/1.5] task delete: Closes task IO before waiting (#6129)
    • bf02a8330 task delete: Closes task IO before waiting
  • [release/1.5] Update test timeout based on recent cancellations (#6134)
    • 3109820f5 Update test timeout based on recent cancellations
  • [release/1.5] Use deactivatelayer to recover layers that we cannot rename (#6133)
    • 16762f3e5 Fix spelling mistake in Windows snapshotter
    • 6094bc770 Use DeactivateLayer to recover layers that we cannot rename
  • [release/1.5] Fix pull fails on unexpected EOF (#6117)
  • [release/1.5 backport] cri: filter selinux xattr for image volumes (#5104)
    • c0534c168 [release/1.5 backport] cri: filter selinux xattr for image volumes

Changes from containerd/ttrpc

34 commits

  • Add protoc-gen-go-ttrpc (#96)
  • client: Handle sending/receiving in separate goroutines (#94)
    • 4f0aeb5 client: Handle sending/receiving in separate goroutines
  • Run Protobuild in GitHub Actions (#95)
    • e621cd1 Run Protobuild in GitHub Actions
    • 35cd240 Re-generate example.pb.go
  • replace pkg/errors (#93)
    • 81faa3e replace pkg/errors from vendor
  • Rename branch from master to main (#86)
    • a143311 Rename branch from master to main
  • Make "go test" and "go build" work on macOS (#85)
    • 2368990 Make the example command buildable on macOS
    • 616d54c Run GitHub Actions on macOS
    • a4b18e0 Make "go test" work on macOS
  • Return Unimplemented when services or methods are not implemented (#83)
    • fede9db Return Unimplemented when services or methods are not implemented
  • Remove "Very new" and checked TODO items (#84)
    • dcc7d39 Remove "Very new" and checked TODO items
  • removing glide from ignore (#82)
    • 2776d3f removing glide from ignore
  • go.mod: update dependencies (#79)
    • 849845f go.mod: github.com/prometheus/procfs v0.6.0
    • 3ea5780 go.mod: google.golang.org/genproto v0.0.0-20200224152610-e50cd9704f63
    • 4640e27 go.mod: google.golang.org/grpc v1.27.1
    • 7c78be3 go.mod: github.com/gogo/protobuf v1.3.2
  • remove travis, add codecov badge (#78)
  • Use GitHub Actions for CI (#77)
    • 5bab91b Use GitHub Actions for CI
  • go.mod: sirupsen/logrus v1.7.0 (#76)

Dependency Changes

  • github.com/Microsoft/hcsshim v0.8.21 -> v0.8.23
  • github.com/containerd/ttrpc v1.0.2 -> v1.1.0

Previous release can be found at v1.5.7