From 1176e7f90dc16473cab056895c7cd27a202cc177 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Fri, 17 Feb 2023 01:22:44 +0100 Subject: [20.10] update containerd binary to v1.6.18 update containerd binary to v1.6.18, which includes fixes for CVE-2023-25153 and CVE-2023-25173. 1.6.18 release notes: https://github.com/containerd/containerd/releases/tag/v1.6.18 > - Fix OCI image importer memory exhaustion (GHSA-259w-8hf6-59c2) > - Fix supplementary groups not being set up properly (GHSA-hmfx-3pcx-653p) > - Revert removal of /sbin/apparmor_parser check > - Update Go to 1.19.6 full diff: https://github.com/containerd/containerd/compare/v1.6.17...v1.6.18 1.6.17 release notes: https://github.com/containerd/containerd/releases/tag/v1.6.17 > - Add network plugin metrics > - Update mkdir permission on /etc/cni to 0755 instead of 0700 > - Export remote snapshotter label handler > - Add support for default hosts.toml configuration full diff: https://github.com/containerd/containerd/compare/v1.6.16...v1.6.17 Signed-off-by: Sebastiaan van Stijn (cherry picked from commit 52d667794fae15888285bc86029ae009f98d7d64) Signed-off-by: Sebastiaan van Stijn --- hack/dockerfile/install/containerd.installer | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'hack/dockerfile/install/containerd.installer') diff --git a/hack/dockerfile/install/containerd.installer b/hack/dockerfile/install/containerd.installer index 8bc635be81..73cb1806e6 100755 --- a/hack/dockerfile/install/containerd.installer +++ b/hack/dockerfile/install/containerd.installer @@ -15,7 +15,7 @@ set -e # the binary version you may also need to update the vendor version to pick up # bug fixes or new APIs, however, usually the Go packages are built from a # commit from the master branch. -: "${CONTAINERD_VERSION:=v1.6.16}" +: "${CONTAINERD_VERSION:=v1.6.18}" install_containerd() ( echo "Install containerd version $CONTAINERD_VERSION" -- cgit v1.2.1 From bb3ba157db5d072e09ccab97096d131e68879b7c Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Tue, 28 Feb 2023 22:56:02 +0100 Subject: [20.10] update containerd binary to v1.6.19 Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers - release notes: https://github.com/containerd/containerd/releases/tag/v1.6.19 - full diff: https://github.com/containerd/containerd/compare/v1.6.18...v1.6.19 Signed-off-by: Sebastiaan van Stijn (cherry picked from commit 3125aa0aefb3359d875798efb2655e51f0d0c4a8) Signed-off-by: Sebastiaan van Stijn --- hack/dockerfile/install/containerd.installer | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'hack/dockerfile/install/containerd.installer') diff --git a/hack/dockerfile/install/containerd.installer b/hack/dockerfile/install/containerd.installer index 73cb1806e6..d3c5acda7c 100755 --- a/hack/dockerfile/install/containerd.installer +++ b/hack/dockerfile/install/containerd.installer @@ -15,7 +15,7 @@ set -e # the binary version you may also need to update the vendor version to pick up # bug fixes or new APIs, however, usually the Go packages are built from a # commit from the master branch. -: "${CONTAINERD_VERSION:=v1.6.18}" +: "${CONTAINERD_VERSION:=v1.6.19}" install_containerd() ( echo "Install containerd version $CONTAINERD_VERSION" -- cgit v1.2.1 From 4fc8f8b4d8394e1c054255fba449a1d168ecffde Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Fri, 31 Mar 2023 00:48:19 +0200 Subject: update containerd binary to v1.6.20 Notable Updates - Disable looking up usernames and groupnames on host - Add support for Windows ArgsEscaped images - Update hcsshim to v0.9.8 - Fix debug flag in shim - Add WithReadonlyTempMount to support readonly temporary mounts - Update ttrpc to fix file descriptor leak - Update runc binary to v1.1.5 = Update image config to support ArgsEscaped full diff: https://github.com/containerd/containerd/compare/v1.6.19...v1.6.20 Signed-off-by: Sebastiaan van Stijn (cherry picked from commit 389e18081dacc6a88e7bb9086afb87ae9ccc62b3) Signed-off-by: Sebastiaan van Stijn --- hack/dockerfile/install/containerd.installer | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'hack/dockerfile/install/containerd.installer') diff --git a/hack/dockerfile/install/containerd.installer b/hack/dockerfile/install/containerd.installer index d3c5acda7c..141bb84276 100755 --- a/hack/dockerfile/install/containerd.installer +++ b/hack/dockerfile/install/containerd.installer @@ -15,7 +15,7 @@ set -e # the binary version you may also need to update the vendor version to pick up # bug fixes or new APIs, however, usually the Go packages are built from a # commit from the master branch. -: "${CONTAINERD_VERSION:=v1.6.19}" +: "${CONTAINERD_VERSION:=v1.6.20}" install_containerd() ( echo "Install containerd version $CONTAINERD_VERSION" -- cgit v1.2.1