From e7b124613ee6099a5d2502edbc652af853151e99 Mon Sep 17 00:00:00 2001 From: unclejack Date: Mon, 1 Dec 2014 13:00:44 +0200 Subject: [PATCH] Bump version to v1.3.3 Conflicts: VERSION Signed-off-by: Cristian Staretu Signed-off-by: Tibor Vass Upstream-commit: 5b851982da2b4fc4c42a7ad0279c65f8d1de08de Component: engine --- components/engine/CHANGELOG.md | 14 ++++++++++++++ components/engine/VERSION | 2 +- 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/components/engine/CHANGELOG.md b/components/engine/CHANGELOG.md index 2d8f5cce8c..346fe4ce2f 100644 --- a/components/engine/CHANGELOG.md +++ b/components/engine/CHANGELOG.md @@ -1,5 +1,19 @@ # Changelog +## 1.3.3 (2014-12-11) + +#### Security +- Fix path traversal vulnerability in processing of absolute symbolic links (CVE-2014-9356) +- Fix decompression of xz image archives, preventing privilege escalation (CVE-2014-9357) +- Validate image IDs (CVE-2014-9358) + +#### Runtime +- Fix an issue when image archives are being read slowly + +#### Client +- Fix a regression related to stdin redirection +- Fix a regression with `docker cp` when destination is the current directory + ## 1.3.2 (2014-11-20) #### Security diff --git a/components/engine/VERSION b/components/engine/VERSION index 259bb263c9..31e5c84349 100644 --- a/components/engine/VERSION +++ b/components/engine/VERSION @@ -1 +1 @@ -1.3.2-dev +1.3.3