CRI-O - v1.22.5
Security
CRI-O v1.22.5
This release fixes CVE-2022-1708
The release notes have been generated for the commit range
v1.22.4...bd7ea64 on Mon, 06 Jun 2022 14:44:18 EDT.
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
- cri-o.amd64.bd7ea645cd7436edd6a5a07b11559906032f124f.tar.gz
- cri-o.arm64.bd7ea645cd7436edd6a5a07b11559906032f124f.tar.gz
Changelog since v1.22.4
Changes by Kind
Bug or Regression
- Fix a bug where ExecSync requests (exec probes) could use an arbitrary amount of memory and disk. Output from ExecSync requests is now limited to 16MB (the amount that exec output was limited to in the dockershim). Disk limiting requires conmon 2.1.2 to work. See https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j and CVE-2022-1708 for more information. (#5936, @haircommander)
Uncategorized
- Fix a bug where CRI-O would leak a log file if a container failed to be created and the pod hadn't yet been cleaned up. (#5825, @openshift-cherrypick-robot)
Dependencies
Added
Nothing has changed.
Changed
Nothing has changed.
Removed
Nothing has changed.
Security
Details
date
June 6, 2022, 6:48 p.m.
name
v1.22.5
type
Patch
official page
👇
Register or login to:
- 🔍View and search all CRI-O releases.
- 🛠️Create and share lists to track your tools.
- 🚨Setup notifications for major, security, feature or patch updates.
- 🚀Much more coming soon!