Merge pull request #74 from stefanberger/changes

CHANGES: Updated CHANGES document for 1.1.4 release
containerd · Mar 24, 2022 · 4b71208 · 4b71208
2 parents b47494c + f576654
commit 4b71208
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/CHANGES b/CHANGES
@@ -1,5 +1,13 @@
 CHANGES
 
+v1.1.4:
+  - Fixed issue in CheckAuthorization() callpath for images with a ManifestList
+    - CVE-2022-24778
+    - Fix: https://github.com/containerd/imgcrypt/commit/6fdd9818a4d8142107b7ecd767d839c9707700d9
+    - Added test case covering this
+  - Updated to ocicrypt 1.1.3
+  - Updated to containerd 1.6.1
+
 v1.1.3:
   - Release v1.1.3 addresses issue #62 due to re-tagging of v1.1.2
   - docs: update referenced containerd project branch to main