containerd 1.5.10

release-notes.md

containerd 1.5.10

Welcome to the v1.5.10 release of containerd!

The tenth patch release for containerd 1.5 includes a fix for CVE-2022-23648 and other issues.

Notable Updates

• Use fs.RootPath when mounting volumes (GHSA-crp2-qrr5-8pq7)
• Return init pid when clean dead shim in runc.v1/v2 shims (#6570)
• Handle sigint/sigterm in shimv2 (#6509)
• Use readonly mount to read user/group info (#6503)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Wei Fu
• Derek McGowan
• Sebastiaan van Stijn
• Phil Estes
• Alexander Minbaev
• Brian Goff
• Daniel Canter
• David Porter
• Kazuyoshi Kato
• Maksym Pavlenko

Changes

19 commits

• Prepare release notes for v1.5.10
• [release/1.5] runc.v1/v2: return init pid when clean dead shim (#6570)
  • runc.v1/v2: return init pid when clean dead shim
• [release/1.5] Update Go to 1.16.14 (#6556)
  • [release/1.5] Update Go to 1.16.14
• Wait for containerd installation in GCE scripts [1.5 backport] (#6552)
  • Wait for containerd installation in GCE scripts
• [release/1.5] shimv2: handle sigint/sigterm (#6509)
  • shimv2: handle sigint/sigterm
• [release/1.5] Update Go to 1.16.13 (#6526)
  • [release/1.5] Update Go to 1.16.13
• [release/1.5 backport] GHA fixes, update GolangCI-Lint v1.42.0, and go-mdman v2.0.1 (#6511)
  • script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
  • Fix Linux CI Linter using go 1.15.14
  • Update cpuguy83/go-md2man binary to v2.0.1
• [release/1.5] oci: use readonly mount to read user/group info (#6503)
  • oci: use readonly mount to read user/group info
• [release/1.5] add-list-stat: return container list if filter is nil (#6466)
  • add-list-stat: return container list if filter is nil

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.5.9