Merge pull request #3912 from distribution/2.8.2-beta.2-release-notes

Add 2.8.2 beta.2 release notes
pull/3783/head v2.8.2-beta.2
Milos Gajdos 2023-05-10 00:16:38 +01:00 committed by GitHub
commit 320d6a141f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 5 deletions

View File

@ -10,13 +10,17 @@ previous = "v2.8.1"
pre_release = false pre_release = false
preface = """\ preface = """\
Welcome to the 2.8.2-beta.1 release of registry! Welcome to the 2.8.2-beta.2 release of registry!
The 2.8.2-beta.1 registry release fixes several security vulnerabilities. The 2.8.2-beta.2 registry release fixes several security vulnerabilities.
The Go runtime has been bumped to 1.19. The Go runtime has been bumped to 1.19.
See the changelog below for full list of changes. See the changelog below for full list of changes.
### CI
* Dockerfile: fix filenames of artifacts ([#3911](https://github.com/distribution/distribution/pull/3911))
### Bugfixes ### Bugfixes
* Fix panic in inmemory driver ([#3815](https://github.com/distribution/distribution/pull/3815)) * Fix panic in inmemory driver ([#3815](https://github.com/distribution/distribution/pull/3815))
@ -29,8 +33,8 @@ See the changelog below for full list of changes.
### Security ### Security
* Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650)) * Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
* Fix runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54) * Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
### Dependency Changes ### Dependency Changes

View File

@ -8,7 +8,7 @@ var Package = "github.com/docker/distribution"
// the latest release tag by hand, always suffixed by "+unknown". During // the latest release tag by hand, always suffixed by "+unknown". During
// build, it will be replaced by the actual version. The value here will be // build, it will be replaced by the actual version. The value here will be
// used if the registry is run after a go get based install. // used if the registry is run after a go get based install.
var Version = "v2.8.2-beta.1+unknown" var Version = "v2.8.2-beta.2+unknown"
// Revision is filled with the VCS (e.g. git) revision being used to build // Revision is filled with the VCS (e.g. git) revision being used to build
// the program at linking time. // the program at linking time.