containerd 1.2.4 Welcome to the v1.2.4 release of containerd! The fourth patch release for `containerd` 1.2 re-vendors `runc` which includes the patch for the critical CVE-2019-5736 escape vulnerability. This release also includes a few fixes for the CRI plugin as well as a change for Windows; all these changes are noted below. ### Notable Updates * cri: Set /etc/hostname [#1042](https://github.com/containerd/cri/pull/1042) * cri: Fix env performance issue [#1045](https://github.com/containerd/cri/pull/1045) * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve CVE-2019-5736 * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964 * Windows: NewDirectIOFromFIFOSet [#2934](https://github.com/containerd/containerd/pull/2934) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Lantao Liu * Justin Terry * Sebastiaan van Stijn * Derek McGowan * Michael Crosby * Phil Estes * John Howard ### Changes * [`e6b3f5632f`](https://github.com/containerd/containerd/commit/e6b3f5632f50dbc4e9cb6288d911bf4f5e95b18e) Merge pull request [#3002](https://github.com/containerd/containerd/pull/3002) from estesp/prepare-1.2.4-release * [`5d1443dca7`](https://github.com/containerd/containerd/commit/5d1443dca7a5f49e77710caff399b7e7ffe84ef8) Prepare v1.2.4 release * [`2095626cff`](https://github.com/containerd/containerd/commit/2095626cffb279ee7938586f7b33b72109de9a29) Merge pull request [#3014](https://github.com/containerd/containerd/pull/3014) from thaJeztah/1.2_bump_cri * [`78286104d0`](https://github.com/containerd/containerd/commit/78286104d0267e28640edf6f3145e6d87419db51) Merge pull request [#3013](https://github.com/containerd/containerd/pull/3013) from thaJeztah/1.2_backport_windows_changes * [`3cbdf9e488`](https://github.com/containerd/containerd/commit/3cbdf9e488d20de341f9f6cad76859a81320a6ba) [release/1.2] update containerd/cri to da0c016c830b2ea97fd1d737c49a568a816bf964 * [`dfa19e5969`](https://github.com/containerd/containerd/commit/dfa19e59693c0ee1c358b8446224e0d2f0c9258b) Windows:NewDirectIOFromFIFOSet * [`84a14ae000`](https://github.com/containerd/containerd/commit/84a14ae000e6114d60a307f0abf6df7036a7c745) Update runhcs options to include CRI Sandbox support * [`6a8198b07d`](https://github.com/containerd/containerd/commit/6a8198b07d9788cf8c43952b46d2c7d7ef5a56a7) Forward ctr.exe --debug as io.containerd.runhcs.v1 options * [`d40cc95fcf`](https://github.com/containerd/containerd/commit/d40cc95fcf371b908164f935b29e19b99d7c16d7) Implement io.containerd.runhcs.v1 shim log opts * [`30ca1c5544`](https://github.com/containerd/containerd/commit/30ca1c554434e82deca3df420968d7dd435e32da) Add io.containerd.runhcs.v1 shim proto options * [`7908802cb5`](https://github.com/containerd/containerd/commit/7908802cb558fa6d3cbc4351f623357db120b3bb) Fix Makefile to run protobuild on paths with spaces * [`583472f67a`](https://github.com/containerd/containerd/commit/583472f67a3d7c258f874347339688de05802790) Merge pull request [#2998](https://github.com/containerd/containerd/pull/2998) from thaJeztah/1.2_backport_bump_runc_cve_2019-5736 * [`b4bf3e340c`](https://github.com/containerd/containerd/commit/b4bf3e340c17d06160687752a0947fc06a208522) Update runc to 6635b4f0c6af3810594d2770f662f34ddc15b40d (CVE-2019-5736) * [`74133fa4ea`](https://github.com/containerd/containerd/commit/74133fa4eab830248ff01662f97aceef82598fe6) Merge pull request [#2995](https://github.com/containerd/containerd/pull/2995) from thaJeztah/1.2_backport_remove_normalize_image_ref * [`ed756ffdd4`](https://github.com/containerd/containerd/commit/ed756ffdd47729d90fc414286a5cc906160705f1) Use distribution's reference.ParseDockerRef * [`2fb3823635`](https://github.com/containerd/containerd/commit/2fb3823635c1c121c8749f8eb4f20f1d51e2bcdb) Bump github.com/docker/distribution to 0d3efadf0154c2b8a4e7b6621fff9809655cc580 ### Changes from containerd/cri * [`da0c016c`](https://github.com/containerd/cri/commit/da0c016c830b2ea97fd1d737c49a568a816bf964) Merge pull request [#1049](https://github.com/containerd/cri/pull/1049) from Random-Liu/cherrypick-#1045-release-1.2 * [`fd12e919`](https://github.com/containerd/cri/commit/fd12e919725790868b5a78a401dee3ac97b5c8f6) Merge pull request [#1046](https://github.com/containerd/cri/pull/1046) from Random-Liu/cherrypick-#1042-release-1.2 * [`ca6506b4`](https://github.com/containerd/cri/commit/ca6506b4e160371fea10e6b99b39c5db510fa52b) Include default envs from containerd. * [`2add88c1`](https://github.com/containerd/cri/commit/2add88c1ed8a177aaab6408c8a62a32836f28bc1) Add env cache. * [`50fbeb6f`](https://github.com/containerd/cri/commit/50fbeb6f49a466c0b3772242aa946238617d2d6b) Don't log config at info level. * [`1a51d430`](https://github.com/containerd/cri/commit/1a51d430b30862bb6b30f639931e725381d89efa) Set /etc/hostname. ### Dependency Changes Previous release can be found at [v1.2.3](https://github.com/containerd/containerd/releases/tag/v1.2.3) * **github.com/containerd/cri** c3cf754321fc38c6af5dfd2552fdde0ad192b31d -> da0c016c830b2ea97fd1d737c49a568a816bf964 * **github.com/docker/distribution** b38e5838b7b2f2ad48e06ec4b500011976080621 -> 0d3efadf0154c2b8a4e7b6621fff9809655cc580 * **github.com/opencontainers/runc** 12f6a991201fdb8f82579582d5e00e28fba06d0a -> 6635b4f0c6af3810594d2770f662f34ddc15b40d * **golang.org/x/sys** 1b2967e3c290b7c545b3db0deeda16e9be4f98a2 -> 41f3e6584952bb034a481797859f6ab34b6803bd