瀏覽代碼

Merge pull request #16954 from jfrazelle/update-changelog-master

Update changelog master
Arnaud Porterie 9 年之前
父節點
當前提交
96965e2abd
共有 1 個文件被更改,包括 16 次插入8 次删除
  1. 16 8
      CHANGELOG.md

+ 16 - 8
CHANGELOG.md

@@ -1,8 +1,16 @@
 # Changelog
 # Changelog
 
 
+## 1.8.3 (2015-10-12)
+
+### Distribution
+
+- Fix layer IDs lead to local graph poisoning (CVE-2014-8178)
+- Fix manifest validation and parsing logic errors allow pull-by-digest validation bypass (CVE-2014-8179)
++ Add `--disable-legacy-registry` to prevent a daemon from using a v1 registry
+
 ## 1.8.2 (2015-09-10)
 ## 1.8.2 (2015-09-10)
 
 
-### Distribution:
+### Distribution
 
 
 - Fixes rare edge case of handling GNU LongLink and LongName entries.
 - Fixes rare edge case of handling GNU LongLink and LongName entries.
 - Fix ^C on docker pull.
 - Fix ^C on docker pull.
@@ -10,7 +18,7 @@
 - Fix issue that caused the daemon to panic when loggers weren't configured properly.
 - Fix issue that caused the daemon to panic when loggers weren't configured properly.
 - Fix goroutine leak pulling images from registry V2.
 - Fix goroutine leak pulling images from registry V2.
 
 
-### Runtime:
+### Runtime
 
 
 - Fix a bug mounting cgroups for docker daemons running inside docker containers.
 - Fix a bug mounting cgroups for docker daemons running inside docker containers.
 - Initialize log configuration properly.
 - Initialize log configuration properly.
@@ -19,11 +27,11 @@
 
 
 - Handle `-q` flag in `docker ps` properly when there is a default format.
 - Handle `-q` flag in `docker ps` properly when there is a default format.
 
 
-### Networking:
+### Networking
 
 
 - Fix several corner cases with netlink.
 - Fix several corner cases with netlink.
 
 
-### Contrib:
+### Contrib
 
 
 - Fix several issues with bash completion.
 - Fix several issues with bash completion.
 
 
@@ -268,7 +276,7 @@
 #### Notable Features since 1.3.0
 #### Notable Features since 1.3.0
 + Set key=value labels to the daemon (displayed in `docker info`), applied with
 + Set key=value labels to the daemon (displayed in `docker info`), applied with
   new `-label` daemon flag
   new `-label` daemon flag
-+ Add support for `ENV` in Dockerfile of the form: 
++ Add support for `ENV` in Dockerfile of the form:
   `ENV name=value name2=value2...`
   `ENV name=value name2=value2...`
 + New Overlayfs Storage Driver
 + New Overlayfs Storage Driver
 + `docker info` now returns an `ID` and `Name` field
 + `docker info` now returns an `ID` and `Name` field
@@ -730,7 +738,7 @@
 - Fix broken images API for version less than 1.7
 - Fix broken images API for version less than 1.7
 - Use the right encoding for all API endpoints which return JSON
 - Use the right encoding for all API endpoints which return JSON
 - Move remote api client to api/
 - Move remote api client to api/
-- Queue calls to the API using generic socket wait 
+- Queue calls to the API using generic socket wait
 
 
 #### Runtime
 #### Runtime
 
 
@@ -810,7 +818,7 @@ With the ongoing changes to the networking and execution subsystems of docker te
 - Do not add hostname when networking is disabled
 - Do not add hostname when networking is disabled
 * Return most recent image from the cache by date
 * Return most recent image from the cache by date
 - Return all errors from docker wait
 - Return all errors from docker wait
-* Add Content-Type Header "application/json" to GET /version and /info responses 
+* Add Content-Type Header "application/json" to GET /version and /info responses
 
 
 #### Other
 #### Other
 
 
@@ -838,7 +846,7 @@ With the ongoing changes to the networking and execution subsystems of docker te
 #### Runtime
 #### Runtime
 
 
 - Only get the image's rootfs when we need to calculate the image size
 - Only get the image's rootfs when we need to calculate the image size
-- Correctly handle unmapping UDP ports 
+- Correctly handle unmapping UDP ports
 * Make CopyFileWithTar use a pipe instead of a buffer to save memory on docker build
 * Make CopyFileWithTar use a pipe instead of a buffer to save memory on docker build
 - Fix login message to say pull instead of push
 - Fix login message to say pull instead of push
 - Fix "docker load" help by removing "SOURCE" prompt and mentioning STDIN
 - Fix "docker load" help by removing "SOURCE" prompt and mentioning STDIN