diff options
| author | Sebastiaan van Stijn <github@gone.nl> | 2021-11-17 21:25:05 +0100 |
|---|---|---|
| committer | Sebastiaan van Stijn <github@gone.nl> | 2021-11-17 21:25:05 +0100 |
| commit | aef782f34844e70c79481cbecd35b01c9bb25ffa (patch) | |
| tree | d9bb2667ae78657689f2509fca67cc1f40b88d6e /hack/dockerfile | |
| parent | c09dcfc6931f5cc8b5e1b1fb3f19fb3ddd60b1c3 (diff) | |
| download | docker-aef782f34844e70c79481cbecd35b01c9bb25ffa.tar.gz | |
update containerd binary to v1.5.8
The eighth patch release for containerd 1.5 contains a mitigation for CVE-2021-41190
as well as several fixes and updates.
Notable Updates
* Handle ambiguous OCI manifest parsing
* Filter selinux xattr for image volumes in CRI plugin
* Use DeactiveLayer to unlock layers that cannot be renamed in Windows snapshotter
* Fix pull failure on unexpected EOF
* Close task IO before waiting on delete
* Log a warning for ignored invalid image labels rather than erroring
* Update pull to handle of non-https urls in descriptors
See the changelog for complete list of changes
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Diffstat (limited to 'hack/dockerfile')
| -rwxr-xr-x | hack/dockerfile/install/containerd.installer | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hack/dockerfile/install/containerd.installer b/hack/dockerfile/install/containerd.installer index 94e82cfdc1..ca5cc7cce0 100755 --- a/hack/dockerfile/install/containerd.installer +++ b/hack/dockerfile/install/containerd.installer @@ -15,7 +15,7 @@ set -e # the binary version you may also need to update the vendor version to pick up # bug fixes or new APIs, however, usually the Go packages are built from a # commit from the master branch. -: "${CONTAINERD_VERSION:=v1.5.7}" +: "${CONTAINERD_VERSION:=v1.5.8}" install_containerd() ( echo "Install containerd version $CONTAINERD_VERSION" |