Welcome to the v1.1.8 release of containerd!

This is the eighth patch release for the containerd 1.1 release. This is the
first 1.1 release during the extended security release period. Included is
a runc fix for CVE-2019-16884
as well as fixes to close inherited sockets and cleanup on context cancellation
in CRI.

Go version has also been updated to 1.12 in this release.

Please see the changelog for full details.

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Lantao Liu
• Derek McGowan
• Sebastiaan van Stijn
• Michael Crosby
• Mike Brown
• Phil Estes
• Shukui Yang
• Wei Fu

Changes

• 2a82a9d2f4 Merge pull request #3699 from dmcgowan/fix-release-notes-1.1.8
• c828c5d082 Fix typo in release notes
• 28ec992407 Merge pull request #3698 from dmcgowan/release-1.1.8
• 07741b3e41 Add 1.1.8 release notes
• b852a4d01e Update go to 1.12 in Travis
• 05a30d22dd Merge pull request #3693 from Random-Liu/update-cri-release-1.1
• 36ebf628f3 Update cri to 6cdb2faa1f30b5203c015dfc7abad44515dd8ccd.
• 5b7f3ab2f4 Merge pull request #3691 from crosbymichael/waitgroup
• d74e8a9081 Add timeout for I/O waitgroups
• ed1b4ef982 Merge pull request #3688 from crosbymichael/runc-cve
• 735cdbf454 Update runc for CVE-2019-16884
• e9e200bf17 Merge pull request #3539 from thaJeztah/1.1_revert_bump_libseccomp
• a17c0d2b6a Revert "bump libseccomp-golang v0.9.1"
• 43278be18c Merge pull request #3375 from thaJeztah/1.1_backport_bump_libseccomp
• f2d1981758 bump libseccomp-golang v0.9.1
• 8c64d394b0 Merge pull request #3363 from keloyang/close-socket-fd-1.1
• 37828134dd Close the inherited socket fd
• dde4c10719 Merge pull request #3265 from Random-Liu/cherry-pick-#3244-#3263-release-1.1
• 74176450ef Return NotFound error for kill and delete in deleted state.
• b72eee4904 Merge pull request #3248 from thaJeztah/1.1_backport_bump_runc_1.0.0rc8
• 5994218757 bump opencontainers/selinux v1.2.2
• 61a64309c3 bump runc v1.0.0-rc8

Changes from containerd/cri

• f213a05f Merge pull request #1303 from Random-Liu/sync-vendor-release-1.0
• 2162941f Sync vendors with containerd before release.
• 6cdb2faa Merge pull request #1301 from Random-Liu/cherrypick-#1156-release-1.1
• d76dcfd3 Make sure exec process is killed when context is canceled.
• 87beada3 Merge pull request #1192 from thaJeztah/1.0_backport_bump_libseccomp
• 736fed18 bump libseccomp-golang v0.9.1
• 3ef3d896 Merge pull request #1122 from Random-Liu/update-containerd-release-1.0
• b09cad68 Update containerd to v1.1.7.
• 5b93010f Merge pull request #1119 from Random-Liu/cherrypick-#1118-release-1.0
• 92c1be72 Cherrypick #1118 to release/1.0

Dependency Changes

Previous release can be found at v1.1.7

• github.com/containerd/cri f8171b4530bed8992973cc4a2f24efe53b821d53 -> f213a05fa6700e49f77468fcfd5af10788565eee
• github.com/opencontainers/runc 029124da7af7360afa781a0234d1b083550f797c -> 3e425f80a8c931f88e6d94a8c831b9d5aa481657
• github.com/opencontainers/selinux v1.2.1 -> v1.2.2