Skip to content

engine: add 23.0.3 release notes #17035

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thaJeztah merged 2 commits into from
Apr 5, 2023
Merged

engine: add 23.0.3 release notes #17035

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c1ad2eb
engine: add 23.0.3 release notes
thaJeztah Apr 4, 2023
1194dfa
engine: add note about missing packages for CentOS 9 for 23.0.3
thaJeztah Apr 4, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 31 additions & 0 deletions engine/release-notes/23.0.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,37 @@ Changing the version format is a stepping-stone towards Go module compatibility,
but the repository doesn't yet use Go modules, and still requires using a "+incompatible" version.
Work continues towards Go module compatibility in a future release.

## 23.0.3

{% include release-date.html date="2023-04-04" %}

> **Note**
>
> Due to an issue with CentOS 9 Stream's package repositories, packages for
> CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later,
> or as part of the next (23.0.4) patch release.
Comment on lines +48 to +52
Copy link
Member Author

@thaJeztah thaJeztah Apr 4, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added a note about the missing packages for CentOS 9

Copy link
Member

@crazy-max crazy-max Apr 5, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah got the same in docker/packaging related to CRB repo: https://github.com/docker/packaging/actions/runs/4611502790/jobs/8155093285#step:7:392

Copy link
Member Author

@thaJeztah thaJeztah Apr 5, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yup, and runc as well; I pasted both errors in a PR there; opencontainers/runc#3813 (comment)


### Bug fixes and enhancements

- Fixed a number of issues that can cause Swarm encrypted overlay networks
to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841),
[CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and
[CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842).
- A lack of kernel support for encrypted overlay networks now reports
as an error.
- Encrypted overlay networks are eagerly set up, rather than waiting for
multiple nodes to attach.
- Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9
through the use of the `xt_bpf` kernel module.
- Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw)
to ensure that unintentional exposure has not occurred.

### Packaging Updates

- Upgrade `containerd` to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20).
- Upgrade `runc` to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5).


## 23.0.2

{% include release-date.html date="2023-03-28" %}
Expand Down