[20.10 backport] update containerd binary to v1.4.4#42124
Conversation
full diff: containerd/containerd@v1.4.3...v1.4.4 Release notes: The fourth patch release for `containerd` 1.4 contains a fix for CVE-2021-21334 along with various other minor issues. See [GHSA-36xw-fx78-c5r4](GHSA-36xw-fx78-c5r4) for more details related to CVE-2021-21334. Notable Updates - Fix container create in CRI to prevent possible environment variable leak between containers - Update shim server to return grpc NotFound error - Add bounds on max `oom_score_adj` value for shim's AdjustOOMScore - Update task manager to use fresh context when calling shim shutdown - Update Docker resolver to avoid possible concurrent map access panic - Update shim's log file open flags to avoid containerd hang on syscall open - Fix incorrect usage calculation Signed-off-by: Sebastiaan van Stijn <[email protected]> (cherry picked from commit 1a49393) Signed-off-by: Sebastiaan van Stijn <[email protected]>
|
@thaJeztah Is 19.03 still maintained? Do we want to backport this to 19.03? |
|
@AkihiroSuda with 20.10 having stabilised for some time (there's some remaining issues, and we should look at shipping those soon). we want to EOL 19.03, so unless there's a critical issue, we likely won't do further patch releases (this change also only affects the static packages; I'll include this in #42015 though, just in case there would be a patch release |
|
Thanks, it would be great if the EOL can be documented officially 👍 |
|
Yes, we need to get better at that again; the large gap in time between 19.03 and 20.10 made it a bit different than usual; we want to get back to more frequent (time-scoped) releases |
containerd.io package on apt/yum repos already had this update out of band. Includes a fix for CVE-2021-21334. moby/moby#42124 https://docs.docker.com/engine/release-notes/
https://docs.docker.com/engine/release-notes/ Update containerd to v1.4.4 for static binaries. The containerd.io package on apt/yum repos already had this update out of band. Includes a fix for CVE-2021-21334. moby/moby#42124
4 participants
backport of #42121
full diff: containerd/containerd@v1.4.3...v1.4.4
Release notes:
The fourth patch release for
containerd1.4 contains a fix for CVE-2021-21334along with various other minor issues.
See GHSA-6g2q-w5j3-fwh4
for more details related to CVE-2021-21334.
Notable Updates
oom_score_adjvalue for shim's AdjustOOMScore- Description for the changelog
- A picture of a cute animal (not mandatory but encouraged)