• CRI-O v1.21.5
• Downloads
• Changelog since v1.21.4
  • Changes by Kind
  • Feature
  • Bug or Regression
  • Uncategorized
• Dependencies
  • Added
  • Changed
  • Removed

CRI-O v1.21.5

The release notes have been generated for the commit range
v1.21.4...af64931 on Sat, 05 Mar 2022 04:46:39 UTC.

This release has a fix for CVE-2022-0532

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.af6493181d9d32685678d5162f9462e70684ba86.tar.gz
• cri-o.arm64.af6493181d9d32685678d5162f9462e70684ba86.tar.gz

Changelog since v1.21.4

Changes by Kind

Feature

• Add functionality to use taskset to spawn new commands cri-o runs. Now, if InfraCtrCPUSet is called, all newly spawned commands will be placed in the InfraCtrCPUSet (as it's expected to be set to the reserved CPU set that system commands should run on). (#5557, @haircommander)

Bug or Regression

• Fix a bug where a pod given a host IPC or network namespace could configure sysctls on the host (#5686, @haircommander)

Uncategorized

• Fix a bug where situations of excessive load on nodes causes containers to never actually start (#5666, @openshift-cherrypick-robot)
• Fix a case where conmon children are sometimes leaked (#5510, @openshift-cherrypick-robot)
• Merge storage_option from drop-in files to sttorage_option from storage.conf (#5436, @openshift-cherrypick-robot)
• Move namespace cleanup from sandbox stop to sandbox remove. This allows veth entries in the network namespaces of pods to be cleaned up earlier (#5502, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.