Merge pull request #12227 from tiborvass/engine_release_notes

Add release notes for 20.10.3 and 19.03.15
This commit is contained in:
Tibor Vass 2021-02-01 16:32:02 -08:00 committed by GitHub
commit 5658dc1a83
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 27 additions and 0 deletions

View File

@ -5,6 +5,19 @@ toc_max: 2
skip_read_time: true skip_read_time: true
--- ---
## 19.03.15
2021-02-01
### Security
* [CVE-2021-21285](https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8) Prevent an invalid image from crashing docker daemon
* [CVE-2021-21284](https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc) Lock down file permissions to prevent remapped root from accessing docker state
* Ensure AppArmor and SELinux profiles are applied when building with BuildKit
### Client
* Check contexts before importing them to reduce risk of extracted files escaping context store
## 19.03.14 ## 19.03.14
2020-12-01 2020-12-01

View File

@ -22,6 +22,20 @@ for Docker Engine.
# Version 20.10 # Version 20.10
## 20.10.3
2021-02-01
### Security
* [CVE-2021-21285](https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8) Prevent an invalid image from crashing docker daemon
* [CVE-2021-21284](https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc) Lock down file permissions to prevent remapped root from accessing docker state
* Ensure AppArmor and SELinux profiles are applied when building with BuildKit
### Client
* Check contexts before importing them to reduce risk of extracted files escaping context store
* Windows: prevent executing certain binaries from current directory [docker/cli#2950](https://github.com/docker/cli/pull/2950)
## 20.10.2 ## 20.10.2
2021-01-04 2021-01-04