Security fixes
- Linux - CVE-2020-28374, CVE-2020-36158
- go - CVE-2021-3114
- bsdiff - CVE-2020-14315
- curl - CVE-2020-8169, CVE-2020-8231, CVE-2020-8284, CVE-2020-8285, CVE-2020-8286
- dhcpcd - CVE-2019-11577, CVE-2019-11766
- mit-krb5 - CVE-2020-28196
- sudo - CVE-2021-3156, CVE-2021-23239
Bug fixes
/etc/iscsi/initiatorname.iscsiis generated by the iscsi-init service (#321)- Prevent iscsiadm buffer overflow (#318)
Changes
- Revert to building docker and containerd with go1.13 instead of go1.15. This reduces the SIGURG log spam (Issue #315 PR #774)
- The containerd socket is now available in the default location (
/run/containerd/containerd.sock) and also as a symlink in the previous location (/run/docker/libcontainerd/docker-containerd.sock) (#771) - AWS Pro: include scripts to facilitate setup of EKS workers (#794).
- Missed from earlier notes: with the previous open-iscsi update to 2.1.2, the service unit name changed from iscsid to iscsi (#682)
Updates
- linux (5.10.10)
- systemd (247.2)
- curl (7.74.0)
- dhcpcd (8.1.9)
- open-iscsi (2.1.3)
- go (1.15.7)
- mit-krb5 (1.18.2-r2)
- open-vm-tools (11.2.5)
- rust (1.49.0)
- sudo (1.9.5p2)
Note: This alpha release includes only AMD64 images.