From 5b851982da2b4fc4c42a7ad0279c65f8d1de08de Mon Sep 17 00:00:00 2001 From: unclejack Date: Mon, 1 Dec 2014 13:00:44 +0200 Subject: [PATCH] Bump version to v1.3.3 Conflicts: VERSION Signed-off-by: Cristian Staretu Signed-off-by: Tibor Vass --- CHANGELOG.md | 14 ++++++++++++++ VERSION | 2 +- 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2d8f5cce8..346fe4ce2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,19 @@ # Changelog +## 1.3.3 (2014-12-11) + +#### Security +- Fix path traversal vulnerability in processing of absolute symbolic links (CVE-2014-9356) +- Fix decompression of xz image archives, preventing privilege escalation (CVE-2014-9357) +- Validate image IDs (CVE-2014-9358) + +#### Runtime +- Fix an issue when image archives are being read slowly + +#### Client +- Fix a regression related to stdin redirection +- Fix a regression with `docker cp` when destination is the current directory + ## 1.3.2 (2014-11-20) #### Security diff --git a/VERSION b/VERSION index 259bb263c..31e5c8434 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.3.2-dev +1.3.3