CHANGES: Updated CHANGES document for 1.1.4 release

stefanberger · stefanberger · commit f5766549f0d7 · 2022-03-24T11:50:59.000-04:00
Signed-off-by: Stefan Berger &lt;stefanb@linux.vnet.ibm.com&gt;
diff --git a/CHANGES b/CHANGES
@@ -1,5 +1,13 @@
 CHANGES
 
+v1.1.4:
+  - Fixed issue in CheckAuthorization() callpath for images with a ManifestList
+    - CVE-2022-24778
+    - Fix: https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9
+    - Added test case covering this
+  - Updated to ocicrypt 1.1.3
+  - Updated to containerd 1.6.1
+
 v1.1.3:
   - Release v1.1.3 addresses issue #62 due to re-tagging of v1.1.2
   - docs: update referenced containerd project branch to main
