TrueCloudLab/distribution
13
0
Fork 3
Code Issues 3 Pull requests Projects Releases 2 Packages Wiki Activity Actions

Merge pull request #3912 from distribution/2.8.2-beta.2-release-notes

Browse source 
Add 2.8.2 beta.2 release notes
This commit is contained in:
Milos Gajdos 2023-05-10 00:16:38 +01:00 committed by GitHub
commit 320d6a141f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
releases/v2.8.2-beta.toml
View file

@ -10,13 +10,17 @@ previous = "v2.8.1"
pre_release = false
preface = """\
Welcome to the 2.8.2-beta.1 release of registry!
Welcome to the 2.8.2-beta.2 release of registry!
The 2.8.2-beta.1 registry release fixes several security vulnerabilities.
The 2.8.2-beta.2 registry release fixes several security vulnerabilities.
The Go runtime has been bumped to 1.19.
See the changelog below for full list of changes.
### CI
* Dockerfile: fix filenames of artifacts ([#3911](https://github.com/distribution/distribution/pull/3911))
### Bugfixes
* Fix panic in inmemory driver ([#3815](https://github.com/distribution/distribution/pull/3815))
@ -29,8 +33,8 @@ See the changelog below for full list of changes.
### Security
* Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
* Fix runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
* Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
* Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
### Dependency Changes

2
version/version.go
View file

@ -8,7 +8,7 @@ var Package = "github.com/docker/distribution"
// the latest release tag by hand, always suffixed by "+unknown". During
// build, it will be replaced by the actual version. The value here will be
// used if the registry is run after a go get based install.
var Version = "v2.8.2-beta.1+unknown"
var Version = "v2.8.2-beta.2+unknown"
// Revision is filled with the VCS (e.g. git) revision being used to build
// the program at linking time.