TrueCloudLab
/
distribution
12
0
Fork 3
Code Issues 2 Pull Requests Packages Projects Releases 1 Wiki Activity

Add release notes for 2.8.2-beta.2 release 

Signed-off-by: Milos Gajdos <milosthegajdos@gmail.com>
pull/3912/head
Milos Gajdos 2023-05-09 23:51:24 +01:00
parent cb840f63b3
commit 5f3ca1b2fb
No known key found for this signature in database
GPG Key ID: 01300E5E6D417439
2 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
releases/v2.8.2-beta.toml
View File

@ -10,13 +10,17 @@ previous = "v2.8.1"
pre_release = false
preface = """\
Welcome to the 2.8.2-beta.1 release of registry!
Welcome to the 2.8.2-beta.2 release of registry!
The 2.8.2-beta.1 registry release fixes several security vulnerabilities.
The 2.8.2-beta.2 registry release fixes several security vulnerabilities.
The Go runtime has been bumped to 1.19.
See the changelog below for full list of changes.
### CI
* Dockerfile: fix filenames of artifacts ([#3911](https://github.com/distribution/distribution/pull/3911))
### Bugfixes
* Fix panic in inmemory driver ([#3815](https://github.com/distribution/distribution/pull/3815))
@ -29,8 +33,8 @@ See the changelog below for full list of changes.
### Security
* Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
* Fix runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
* Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 ([#3650](https://github.com/distribution/distribution/pull/3650))
* Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/_catalog [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
### Dependency Changes

2
version/version.go
View File

@ -8,7 +8,7 @@ var Package = "github.com/docker/distribution"
// the latest release tag by hand, always suffixed by "+unknown". During
// build, it will be replaced by the actual version. The value here will be
// used if the registry is run after a go get based install.
var Version = "v2.8.2-beta.1+unknown"
var Version = "v2.8.2-beta.2+unknown"
// Revision is filled with the VCS (e.g. git) revision being used to build
// the program at linking time.