1
- # Changelog/
1
+ # Changelog
2
2
This file documents all notable changes made to this project since runc 1.0.
3
3
4
4
The format is based on [ Keep a Changelog] ( https://keepachangelog.com/en/1.0.0/ ) ,
5
5
and this project adheres to [ Semantic Versioning] ( https://semver.org/spec/v2.0.0.html ) .
6
6
7
7
## [ Unreleased]
8
8
9
+
10
+ ## [ 1.1.2] - 2022-05-06
11
+
12
+ > I should think I’m going to be a perpetual student.
13
+
14
+ ### Security
15
+ * A bug was found in runc where runc exec --cap executed processes with
16
+ non-empty inheritable Linux process capabilities, creating an atypical Linux
17
+ environment. For more information, see [ GHSA-f3fp -gc8g-vw66] [ ] and
18
+ CVE-2022 -29162.
19
+
20
+ ### Changed
21
+ * ` runc spec ` no longer sets any inheritable capabilities in the created
22
+ example OCI spec (` config.json ` ) file.
23
+
24
+ [ GHSA-f3fp-gc8g-vw66 ] : https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66
25
+
26
+
9
27
## [ 1.1.1] - 2022-03-28
10
28
11
29
> Violence is the last refuge of the incompetent.
@@ -25,6 +43,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
25
43
* libcontainer/cgroups no longer panics in cgroup v1 managers if ` stat `
26
44
of ` /sys/fs/cgroup/unified ` returns an error other than ENOENT. (#3435 )
27
45
46
+
28
47
## [ 1.1.0] - 2022-01-14
29
48
30
49
> A plan depends as much upon execution as it does upon concept.
@@ -35,6 +54,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
35
54
should avoid folks accidentally creating broken runc binaries (and
36
55
incorrectly importing our internal libraries into their projects). (#3331 )
37
56
57
+
38
58
## [ 1.1.0-rc.1] - 2021-12-14
39
59
40
60
> He who controls the spice controls the universe.
@@ -252,7 +272,8 @@ implementation (libcontainer) is *not* covered by this policy.
252
272
cgroups at all during ` runc update ` ). (#2994 )
253
273
254
274
<!-- minor releases -->
255
- [ Unreleased ] : https://github.com/opencontainers/runc/compare/v1.1.1...HEAD
275
+ [ Unreleased ] : https://github.com/opencontainers/runc/compare/v1.1.2...HEAD
276
+ [ 1.1.2 ] : https://github.com/opencontainers/runc/compare/v1.1.1...v1.1.2
256
277
[ 1.1.1 ] : https://github.com/opencontainers/runc/compare/v1.1.0...v1.1.1
257
278
[ 1.1.0 ] : https://github.com/opencontainers/runc/compare/v1.1.0-rc.1...v1.1.0
258
279
[ 1.0.0 ] : https://github.com/opencontainers/runc/releases/tag/v1.0.0
0 commit comments