# changelog

author: Eli Uriegas <eli.uriegas@docker.com> - 1.2.0-1.2.beta.2.2
changelog:
  - Hardcoded paths for libexec and var lib considering the macros are different on SUSE based distributions
  - Removed offline installer for runc, package as a binary instead


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.5-3.1
changelog:
  - containerd 1.2.5 release
  - update runc to 2b18fe1d885ee5083ef9f0838fee39b62d653e30
  - build with Go 1.11.5


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.6-3.1
changelog:
  - containerd 1.2.6 release
  - update runc to 029124da7af7360afa781a0234d1b083550f797c
  - build with Go 1.11.8


author: Eli Uriegas <eli.uriegas@docker.com> - 1.2.9-3.1
changelog:
  - containerd 1.2.9 release
  - Addresses CVE-2019-9512 (Ping Flood), CVE-2019-9514 (Reset Flood), and CVE-2019-9515 (Settings Flood).


author: Eli Uriegas <eli.uriegas@docker.com> - 1.2.10-3.1
changelog:
  - containerd 1.2.10 release
  - Addresses CVE-2019-16884 (AppArmor bypass)
  - Bump runc to 3e425f80a8c931f88e6d94a8c831b9d5aa481657 (1.0.0-rc8 + CVE-2019-16884)


author: Evan Hazlett <evan@docker.com> - 1.2.11-3.1
changelog:
  - Update the runc vendor to v1.0.0-rc9 which includes an additional
    mitigation for CVE-2019-16884
  - Add local-fs.target to service file to fix corrupt image after unexpected
    host reboot
  - Update Golang runtime to 1.12.13, which includes security fixes to the
    crypto/dsa package made in Go 1.12.11 (CVE-2019-17596), and fixes to the
    go command, runtime, syscall and net packages (Go 1.12.12)
  - CRI: Fix shim delete error code to avoid unnecessary retries in the CRI plugin


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.11-3.2
changelog:
  - Update Golang runtime to 1.12.15, which includes fixes in the net/http package
    and the runtime on ARM64


author: Derek McGowan <derek@docker.com> - 1.2.12-3.1
changelog:
  - Update the runc vendor to v1.0.0-rc10 which includes a mitigation for
    CVE-2019-19921.
  - Update the opencontainers/selinux which includes a mitigation for
    CVE-2019-16884.
  - Update Golang runtime to 1.12.16, mitigating the CVE-2020-0601
    certificate verification bypass on Windows, and CVE-2020-7919,
    which only affects 32-bit architectures.
  - A fix to prevent SIGSEGV when starting containerd-shim
  - Fix to prevent high system load/CPU utilization with liveness and readiness
    probes
  - Fix to prevent docker exec hanging if an earlier docker exec left a zombie
    process
  - CRI: Update the gopkg.in/yaml.v2 vendor to v2.2.8 with a mitigation for
    CVE-2019-11253


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.13-3.1
changelog:
  - Update to containerd 1.2.13, which fixes a regression introduced in v1.2.12
    that caused container/shim to hang on single core machines, and fixes an issue
    with blkio.
  - Update Golang runtime to 1.12.17.


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.13-3.2
changelog:
  - Build packages for RHEL-7 on s390x, CentOS 8, and Fedora 32
  - Add libseccomp as required dependency


author: Eli Uriegas <eli.uriegas@docker.com> - 1.2.2-3.3
changelog:
  - [runc -> 09c8266] nsenter: clone /proc/self/exe to avoid exposing
    host binary to container (CVE-2019-5736)


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.4.13-3.1
changelog:
  - Update containerd to v1.4.13 to address CVE-2022-23648
  - Update runc to v1.0.3
  - Update Golang runtime to 1.16.15


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.6.7-3.1
changelog:
  - Update containerd to v1.6.7
  - Update runc to v1.1.3
  - Update Golang runtime to 1.17.13 to address CVE-2022-32189


