From 6cb70de86c642fbdc8d93959adf9ab2deca73785 Mon Sep 17 00:00:00 2001 From: Fred Lifton Date: Fri, 31 Oct 2014 10:55:55 -0700 Subject: [PATCH 1/2] Edits and refinements to 1.3.1 release notes. Docker-DCO-1.1-Signed-off-by: Fred Lifton (github: fredlf) Upstream-commit: 1a1b0f223d5b877271d1484d6235c4a7b9e4cb32 Component: engine --- .../engine/docs/sources/release-notes.md | 23 ++++++++++--------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/components/engine/docs/sources/release-notes.md b/components/engine/docs/sources/release-notes.md index 6b2f0fd571..b4627e88b4 100644 --- a/components/engine/docs/sources/release-notes.md +++ b/components/engine/docs/sources/release-notes.md @@ -1,6 +1,6 @@ -page_title: Docker 1.x Series Release Notes page_description: Release Notes for -Docker 1.x. page_keywords: docker, documentation, about, technology, -understanding, release +page_title: Docker 1.x Series Release Notes +page_description: Release Notes for Docker 1.x. +page_keywords: docker, documentation, about, technology, understanding, release #Release Notes @@ -11,25 +11,26 @@ This release fixes some bugs and addresses some security issues. *Security fixes* -Patches and changes were made to address CVE-2014-5277 and CVE-2014-3566. Specifically, changes were made to: +Patches and changes were made to address [CVE-2014-5277 and CVE-2014-3566](https://groups.google.com/forum/#!topic/docker-user/oYm0i3xShJU). +Specifically, changes were made to: + * Prevent fallback to SSL protocols < TLS 1.0 for client, daemon and registry -* Secure HTTPS connection to registries with certificate verification and without HTTP fallback unless `--insecure-registry` is specified. +* Secure HTTPS connection to registries with certificate verification and without HTTP fallback unless [`--insecure-registry`](/reference/commandline/cli/#run) is specified. *Runtime fixes* -* Fixed issue where volumes would not be shared +* Fixed issue where volumes would not be shared. *Client fixes* * Fixed issue with `--iptables=false` not automatically setting -`--ip-masq=false` -* Fixed docker run output to non-TTY stdout +`--ip-masq=false`. +* Fixed docker run output to non-TTY stdout. *Builder fixes* -* Fixed escaping `$` for environment variables -* Fixed issue with lowercase `onbuild` Dockerfile instruction - +* Fixed escaping `$` for environment variables. +* Fixed issue with lowercase `onbuild` instruction in a `Dockerfile`. ##Version 1.3.0 From 78e3305d6cd3218dc3182a9a888caa4b299581a7 Mon Sep 17 00:00:00 2001 From: Fred Lifton Date: Mon, 3 Nov 2014 13:51:51 -0800 Subject: [PATCH 2/2] Added missing item from Changelog Docker-DCO-1.1-Signed-off-by: Fred Lifton (github: fredlf) Upstream-commit: 06f366bf0041a223ae848e6a8df0c8cc41f08001 Component: engine --- components/engine/docs/sources/release-notes.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/components/engine/docs/sources/release-notes.md b/components/engine/docs/sources/release-notes.md index b4627e88b4..a74eea43b5 100644 --- a/components/engine/docs/sources/release-notes.md +++ b/components/engine/docs/sources/release-notes.md @@ -31,6 +31,8 @@ Specifically, changes were made to: * Fixed escaping `$` for environment variables. * Fixed issue with lowercase `onbuild` instruction in a `Dockerfile`. +* Restricted environment variable expansion to `ENV`, `ADD`, `COPY`, `WORKDIR`, +`EXPOSE`, `VOLUME`, and `USER` ##Version 1.3.0