containerd 1.4.12

Welcome to the v1.4.12 release of containerd!

The twelfth patch release for containerd 1.4 contains a few minor bug fixes
and an update to mitigate CVE-2021-41190.

Notable Updates

• Handle ambiguous OCI manifest parsing (GHSA-5j5w-g665-5m35)
• Update pull to try next mirror for non-404 errors (#5275)
• Update pull to handle of non-https urls in descriptors (#6221)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Maksym Pavlenko
• Samuel Karp
• Sebastiaan van Stijn
• Kohei Tokunaga
• Phil Estes
• Sebastian Hasler

Changes

13 commits

• [release/1.4] Prepare release notes for v1.4.12 (#6259)
  • 540b70454 Prepare release notes for v1.4.12
• Merge Github Security Advisory GHSA-5j5w-g665-5m35
  • eb875416e schema1: reject ambiguous documents
  • 53e0c8c35 images: validate document type before unmarshal
• [release/1.4] Try next mirror in case of non-404 errors, too (#6244)
  • 9b538c7c7 Try next mirror in case of non-404 errors, too
• [release/1.4] Fix containerd fails to pull OCI image with non-http(s):// urls (#6239)
  • e9f59a95e Fix containerd fails to pull OCI image with non-http(s):// urls
• [release/1.4] update Go to 1.16.10 (#6212)
  • 16921116b [release/1.4] update Go to 1.16.10
• [release/1.4] update Go to 1.16.9 (#6103)
  • b742b36fb [release/1.4] update Go to 1.16.9

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.4.11