containerd 1.4.12 Welcome to the v1.4.12 release of containerd! The twelfth patch release for containerd 1.4 contains a few minor bug fixes and an update to mitigate [CVE-2021-41190](https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m). ### Notable Updates * **Handle ambiguous OCI manifest parsing** ([GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35)) * **Update pull to try next mirror for non-404 errors** ([#5275](https://github.com/containerd/containerd/pull/5275)) * **Update pull to handle of non-https urls in descriptors** ([#6221](https://github.com/containerd/containerd/pull/6221)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Derek McGowan * Maksym Pavlenko * Samuel Karp * Sebastiaan van Stijn * Kohei Tokunaga * Phil Estes * Sebastian Hasler ### Changes <details><summary>13 commits</summary> <p> * [release/1.4] Prepare release notes for v1.4.12 ([#6259](https://github.com/containerd/containerd/pull/6259)) * [`540b70454`](https://github.com/containerd/containerd/commit/540b7045470a9fc89a40de2014d4770cd3b64c85) Prepare release notes for v1.4.12 * Merge Github Security Advisory [GHSA-5j5w-g665-5m35](https://github.com/containerd/containerd/security/advisories/GHSA-5j5w-g665-5m35) * [`eb875416e`](https://github.com/containerd/containerd/commit/eb875416e4ef2ddc3635203c7dca9f134bb91210) schema1: reject ambiguous documents * [`53e0c8c35`](https://github.com/containerd/containerd/commit/53e0c8c35ac4fe00f565465a7820f7e8404db23d) images: validate document type before unmarshal * [release/1.4] Try next mirror in case of non-404 errors, too ([#6244](https://github.com/containerd/containerd/pull/6244)) * [`9b538c7c7`](https://github.com/containerd/containerd/commit/9b538c7c7744a1aeb64de1b9c0b38e35b10b4885) Try next mirror in case of non-404 errors, too * [release/1.4] Fix containerd fails to pull OCI image with non-`http(s)://` urls ([#6239](https://github.com/containerd/containerd/pull/6239)) * [`e9f59a95e`](https://github.com/containerd/containerd/commit/e9f59a95ed5131d2a907fb26d4be2841e1787d28) Fix containerd fails to pull OCI image with non-`http(s)://` urls * [release/1.4] update Go to 1.16.10 ([#6212](https://github.com/containerd/containerd/pull/6212)) * [`16921116b`](https://github.com/containerd/containerd/commit/16921116b0571a29a10b5a1a01250cde77bc81a6) [release/1.4] update Go to 1.16.10 * [release/1.4] update Go to 1.16.9 ([#6103](https://github.com/containerd/containerd/pull/6103)) * [`b742b36fb`](https://github.com/containerd/containerd/commit/b742b36fb766ef6179a72ba9807fe27f2592f2af) [release/1.4] update Go to 1.16.9 </p> </details> ### Dependency Changes This release has no dependency changes Previous release can be found at [v1.4.11](https://github.com/containerd/containerd/releases/tag/v1.4.11)