CRI-O v1.21.5
The release notes have been generated for the commit range
v1.21.4...af64931 on Sat, 05 Mar 2022 04:46:39 UTC.
This release has a fix for CVE-2022-0532
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
- cri-o.amd64.af6493181d9d32685678d5162f9462e70684ba86.tar.gz
- cri-o.arm64.af6493181d9d32685678d5162f9462e70684ba86.tar.gz
Changelog since v1.21.4
Changes by Kind
Feature
- Add functionality to use taskset to spawn new commands cri-o runs. Now, if InfraCtrCPUSet is called, all newly spawned commands will be placed in the InfraCtrCPUSet (as it's expected to be set to the reserved CPU set that system commands should run on). (#5557, @haircommander)
Bug or Regression
- Fix a bug where a pod given a host IPC or network namespace could configure sysctls on the host (#5686, @haircommander)
Uncategorized
- Fix a bug where situations of excessive load on nodes causes containers to never actually start (#5666, @openshift-cherrypick-robot)
- Fix a case where conmon children are sometimes leaked (#5510, @openshift-cherrypick-robot)
- Merge storage_option from drop-in files to sttorage_option from storage.conf (#5436, @openshift-cherrypick-robot)
- Move namespace cleanup from sandbox stop to sandbox remove. This allows veth entries in the network namespaces of pods to be cleaned up earlier (#5502, @openshift-cherrypick-robot)
Dependencies
Added
Nothing has changed.
Changed
Nothing has changed.
Removed
Nothing has changed.