containerd 1.6.28
Welcome to the v1.6.28 release of containerd!
The twenty-eighth patch release for containerd 1.6 updates the runc binary
in the release builds to address CVE-2024-21626
Notable Updates
- Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
- Update seccomp profile for new syscalls added since Linux 5.16 (#9694)
See the changelog for complete list of changes
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Andrey Epifanov
- Derek McGowan
- Akihiro Suda
- Maksym Pavlenko
- Phil Estes
- Shengjing Zhu
- Wei Fu
Changes
13 commits
- Prepare v1.6.28 and update runc to v1.1.12 (#9723)
570c7c637
Prepare release notes for v1.6.28b20b9f86b
Update runc binary to v1.1.12- [release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. (#9707)
- [release/1.6] seccomp: kernel 6.7 (#9694)
f44628305
seccomp: kernel 6.7
- [release/1.6] carry #9557 - enable ARM CI (#9636)
Dependency Changes
- github.com/go-logr/logr v1.2.2 -> v1.3.0
- github.com/google/go-cmp v0.5.9 -> v0.6.0
- github.com/google/uuid v1.3.0 -> v1.3.1
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.28.0 -> v0.46.0
- go.opentelemetry.io/otel v1.3.0 -> v1.21.0
- go.opentelemetry.io/otel/metric v1.21.0 new
- go.opentelemetry.io/otel/sdk v1.3.0 -> v1.21.0
- go.opentelemetry.io/otel/trace v1.3.0 -> v1.21.0
- golang.org/x/crypto v0.14.0 -> v0.18.0
- golang.org/x/net v0.17.0 -> v0.18.0
- golang.org/x/oauth2 v0.10.0 -> v0.11.0
- golang.org/x/sys v0.13.0 -> v0.16.0
- golang.org/x/term v0.13.0 -> v0.16.0
- golang.org/x/text v0.13.0 -> v0.14.0
- google.golang.org/grpc v1.58.3 -> v1.59.0
Previous release can be found at v1.6.27