|
@@ -4,6 +4,35 @@ page_keywords: docker, documentation, about, technology, understanding, release
|
|
|
|
|
|
#Release Notes
|
|
#Release Notes
|
|
|
|
|
|
|
|
+##Version 1.3.2
|
|
|
|
+(2014-11-24)
|
|
|
|
+
|
|
|
|
+This release fixes some bugs and addresses some security issues. We have also
|
|
|
|
+made improvements to aspects of `docker run`.
|
|
|
|
+
|
|
|
|
+*Security fixes*
|
|
|
|
+
|
|
|
|
+Patches and changes were made to address CVE-2014-6407 and CVE-2014-6408.
|
|
|
|
+Specifically, changes were made in order to:
|
|
|
|
+
|
|
|
|
+* Prevent host privilege escalation from an image extraction vulnerability (CVE-2014-6407).
|
|
|
|
+
|
|
|
|
+* Prevent container escalation from malicious security options applied to images (CVE-2014-6408).
|
|
|
|
+
|
|
|
|
+*Daemon fixes*
|
|
|
|
+
|
|
|
|
+The `--insecure-registry` flag of the `docker run` command has undergone
|
|
|
|
+several refinements and additions. For details, please see the
|
|
|
|
+[command-line reference](http://docs.docker.com/reference/commandline/cli/#run).
|
|
|
|
+
|
|
|
|
+* You can now specify a sub-net in order to set a range of registries which the Docker daemon will consider insecure.
|
|
|
|
+
|
|
|
|
+* By default, Docker now defines `localhost` as an insecure registry.
|
|
|
|
+
|
|
|
|
+* Registries can now be referenced using the Classless Inter-Domain Routing (CIDR) format.
|
|
|
|
+
|
|
|
|
+* When mirroring is enabled, the experimental registry v2 API is skipped.
|
|
|
|
+
|
|
##Version 1.3.1
|
|
##Version 1.3.1
|
|
(2014-10-28)
|
|
(2014-10-28)
|
|
|
|
|