From 35b2f26163fdc4f75664b70c95625178376c5a8f Mon Sep 17 00:00:00 2001 From: Tibor Vass Date: Mon, 1 Feb 2021 23:29:31 +0000 Subject: [PATCH] Add release notes for 20.10.3 and 19.03.15 Signed-off-by: Tibor Vass --- engine/release-notes/19.03.md | 13 +++++++++++++ engine/release-notes/index.md | 14 ++++++++++++++ 2 files changed, 27 insertions(+) diff --git a/engine/release-notes/19.03.md b/engine/release-notes/19.03.md index 27e9f20c64..478de6a135 100644 --- a/engine/release-notes/19.03.md +++ b/engine/release-notes/19.03.md @@ -5,6 +5,19 @@ toc_max: 2 skip_read_time: true --- +## 19.03.15 +2021-02-01 + +### Security + +* [CVE-2021-21285](https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8) Prevent an invalid image from crashing docker daemon +* [CVE-2021-21284](https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc) Lock down file permissions to prevent remapped root from accessing docker state +* Ensure AppArmor and SELinux profiles are applied when building with BuildKit + +### Client + +* Check contexts before importing them to reduce risk of extracted files escaping context store + ## 19.03.14 2020-12-01 diff --git a/engine/release-notes/index.md b/engine/release-notes/index.md index 6227f149c9..653d659e63 100644 --- a/engine/release-notes/index.md +++ b/engine/release-notes/index.md @@ -22,6 +22,20 @@ for Docker Engine. # Version 20.10 +## 20.10.3 +2021-02-01 + +### Security + +* [CVE-2021-21285](https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8) Prevent an invalid image from crashing docker daemon +* [CVE-2021-21284](https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc) Lock down file permissions to prevent remapped root from accessing docker state +* Ensure AppArmor and SELinux profiles are applied when building with BuildKit + +### Client + +* Check contexts before importing them to reduce risk of extracted files escaping context store +* Windows: prevent executing certain binaries from current directory [docker/cli#2950](https://github.com/docker/cli/pull/2950) + ## 20.10.2 2021-01-04