containerd 1.2.10 Welcome to the v1.2.10 release of containerd! The tenth patch release for `containerd` 1.2 includes only one main bug fix in the CRI plugin, but includes updated vendors/build runtimes that fix 2 reported CVEs in runc and the Golang 1.12 runtime respectively. ### Notable Updates * Update the runc vendor to capture the fix for [CVE-2019-16884](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16884). Fixed by [PR #3685](https://github.com/containerd/containerd/pull/3685) - More details on the runc CVE in [opencontainers/runc#2128](https://github.com/opencontainers/runc/issues/2128), fixed by [opencontainers/runc#2129](https://github.com/opencontainers/runc/pull/2129) * Update Golang runtime to 1.12.10 to handle CVE-2019-16276. More detail on the Golang CVE available in [golang/go#34540](https://github.com/golang/go/issues/34540) * CRI fixes: - Fix a bug that the default UNIX path is not in the default OCI config via the CRI plugin. Reported in [containerd/cri#1279](https://github.com/containerd/cri/issues/1279) and fixed by [containerd/cri#1283](https://github.com/containerd/cri/pull/1283) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Michael Crosby * Phil Estes * Derek McGowan * Lantao Liu * Ace-Tang * Akihiro Suda * Sebastiaan van Stijn * Tõnis Tiigi * Wei Fu ### Changes * [`b34a5c8af5`](https://github.com/containerd/containerd/commit/b34a5c8af56e510852c35414db4c1f4fa6172339) Merge pull request [#3690](https://github.com/containerd/containerd/pull/3690) from estesp/prep-v1.2.10 * [`9e6b7bb9f5`](https://github.com/containerd/containerd/commit/9e6b7bb9f57afa15acdccff64c504c009a78e85b) Prepare v1.2.10 release * [`61f763ffef`](https://github.com/containerd/containerd/commit/61f763ffef3ca621c5b2a130b8c0b225cfec136f) Merge pull request [#3687](https://github.com/containerd/containerd/pull/3687) from thaJeztah/1.2_backport_bump_golang_1.12.10 * [`8d33d03519`](https://github.com/containerd/containerd/commit/8d33d03519a7b87b5ef8a5d973228826cde7d759) AppVeyor: bump golang 1.12.10 (CVE-2019-16276) * [`00427181b5`](https://github.com/containerd/containerd/commit/00427181b576db3b572f81cb9b70182363a2b339) Merge pull request [#3685](https://github.com/containerd/containerd/pull/3685) from crosbymichael/runc-release1.2 * [`0c961b1867`](https://github.com/containerd/containerd/commit/0c961b1867e851cd14ac8d63dd9a4a8ee5708b04) Bump runc for CVE-2019-16884 * [`8628ebfbaa`](https://github.com/containerd/containerd/commit/8628ebfbaa416449a6d888b5cfc6763f8ee67ea3) Merge pull request [#3674](https://github.com/containerd/containerd/pull/3674) from Random-Liu/update-cri-release-1.2 * [`4be2ad78fd`](https://github.com/containerd/containerd/commit/4be2ad78fdcec87b6c169d0971b440fe0ba20ef4) Update cri to 40affe7c7402d41618b9791a8cf105ac74ce56d0. * [`710fca10d9`](https://github.com/containerd/containerd/commit/710fca10d943112afab28e6f2931bd2f9947965b) Merge pull request [#3640](https://github.com/containerd/containerd/pull/3640) from crosbymichael/1.2-go-runc * [`5d464752c3`](https://github.com/containerd/containerd/commit/5d464752c335bb1519087b902503956786a23859) Update go-runc to e029b79d8cda8374981c64eba71f28e ### Changes from containerd/cri * [`40affe7c`](https://github.com/containerd/cri/commit/40affe7c7402d41618b9791a8cf105ac74ce56d0) Merge pull request [#1283](https://github.com/containerd/cri/pull/1283) from estesp/bp-1280 * [`6d433c50`](https://github.com/containerd/cri/commit/6d433c506a3808fbd0a37079924b62b2cd256fa5) Backport fix for default UNIX environment in OCI container config ### Changes from containerd/go-runc * [`e029b79`](https://github.com/containerd/go-runc/commit/e029b79d8cda8374981c64eba71f28ec38e5526f) Merge pull request [#54](https://github.com/containerd/go-runc/pull/54) from tonistiigi/notify-socket * [`c0c55f3`](https://github.com/containerd/go-runc/commit/c0c55f3e2906bcb5f0c5261f2949c797425a32c8) avoid setting NOTIFY_SOCKET from calling process * [`b4bc25a`](https://github.com/containerd/go-runc/commit/b4bc25aab3c0d50711b7bc91893e5784a5700005) Merge pull request [#55](https://github.com/containerd/go-runc/pull/55) from containerd/travis * [`6b4a1ca`](https://github.com/containerd/go-runc/commit/6b4a1ca7c77a86b76f7b3afd259d9ee91fcb94f9) Update travis to 1.12 and 1.13 * [`9007c24`](https://github.com/containerd/go-runc/commit/9007c2405372fe28918845901a3276c0915689a1) Merge pull request [#52](https://github.com/containerd/go-runc/pull/52) from Ace-Tang/fix-error-return * [`4e99c72`](https://github.com/containerd/go-runc/commit/4e99c72acdb052ba374135c009bbc8ac9dd68249) Fix Method of judging command execution failure * [`7d11b49`](https://github.com/containerd/go-runc/commit/7d11b49dc0769f6dbb0d1b19f3d48524d1bad9ad) Merge pull request [#51](https://github.com/containerd/go-runc/pull/51) from fuweid/add-content-check * [`8e51df4`](https://github.com/containerd/go-runc/commit/8e51df421218b765f393e1fdf97fac668913a8f4) Add common project content/checks ### Dependency Changes Previous release can be found at [v1.2.9](https://github.com/containerd/containerd/releases/tag/v1.2.9) * **github.com/containerd/cri** ad5dcc6cba067488d017540d06ebc08b21bb82bc -> 40affe7c7402d41618b9791a8cf105ac74ce56d0 * **github.com/containerd/go-runc** 5a6d9f37cfa36b15efba46dc7ea349fa9b7143c3 -> e029b79d8cda8374981c64eba71f28ec38e5526f * **github.com/opencontainers/runc** v1.0.0-rc8 -> 3e425f80a8c931f88e6d94a8c831b9d5aa481657