chore(deps): update module github.com/docker/docker to v20.10.10 (main) #128

2021-11-15T08:01:25Z

renovate-bot commented

2021-11-15 08:01:25 +00:00

This PR contains the following updates:

Package	Type	Update	Change
github.com/docker/docker	require	patch	`v20.10.8+incompatible` -> `v20.10.10`

Release Notes

docker/docker

`v20.10.10`

Compare Source

20.10.10

Important

Due to net/http changes in Go 1.16,
HTTP proxies configured through the $HTTP_PROXY environment variable are no
longer used for TLS (https://) connections. Make sure you also set an $HTTPS_PROXY
environment variable for handling requests to https:// URLs.

Refer to the HTTP/HTTPS proxy section
to learn how to configure the Docker Daemon to use a proxy server.

Builder

Fix platform-matching logic to fix docker build using not finding images in
the local image cache on Arm machines when using BuildKit moby/moby#42954

Runtime

Add support for clone3 syscall in the default seccomp policy to support running
containers based on recent versions of Fedora and Ubuntu. moby/moby/#42836.
Windows: update hcsshim library to fix a bug in sparse file handling in container
layers, which was exposed by recent changes in Windows moby/moby#42944.
Fix some situations where docker stop could hang forever moby/moby#42956.

Swarm

Fix an issue where updating a service did not roll back on failure moby/moby#42875.

Packaging

Add packages for Ubuntu 21.10 "Impish Indri" and Fedora 35.
Update docker scan to v0.9.0
Update Golang runtime to Go 1.16.9.

`v20.10.9`

Compare Source

This release is a security release with security fixes in the CLI, runtime, as
well as updated versions of the containerd.io package and the Go runtime.

Client

CVE-2021-41092
Ensure default auth config has address field set, to prevent credentials being
sent to the default registry.

Runtime

CVE-2021-41089
Create parent directories inside a chroot during docker cp to prevent a specially
crafted container from changing permissions of existing files in the host’s filesystem.
CVE-2021-41091
Lock down file permissions to prevent unprivileged users from discovering and
executing programs in /var/lib/docker.

Packaging

Update Golang runtime to Go 1.16.8, which contains fixes for CVE-2021-36221
and CVE-2021-39293
Update static binaries and containerd.io rpm and deb packages to containerd
v1.4.11 and runc v1.0.2 to address CVE-2021-41103.
Update the bundled buildx version to v0.6.3 for rpm and deb packages.

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/docker/docker](https://github.com/docker/docker) | require | patch | `v20.10.8+incompatible` -> `v20.10.10` | --- ### Release Notes <details> <summary>docker/docker</summary> ### [`v20.10.10`](https://github.com/docker/docker/releases/v20.10.10) [Compare Source](https://github.com/docker/docker/compare/v20.10.9...v20.10.10) #### 20.10.10 > **IMPORTANT** > > Due to [net/http changes](https://github.com/golang/go/issues/40909) in [Go 1.16](https://golang.org/doc/go1.16#net/http), > HTTP proxies configured through the `$HTTP_PROXY` environment variable are no > longer used for TLS (`https://`) connections. Make sure you also set an `$HTTPS_PROXY` > environment variable for handling requests to `https://` URLs. > > Refer to the [HTTP/HTTPS proxy section](../../config/daemon/systemd.md#httphttps-proxy) > to learn how to configure the Docker Daemon to use a proxy server. ##### Builder - Fix platform-matching logic to fix `docker build` using not finding images in the local image cache on Arm machines when using BuildKit [moby/moby#42954](https://github.com/moby/moby/pull/42954) #### Runtime - Add support for `clone3` syscall in the default seccomp policy to support running containers based on recent versions of Fedora and Ubuntu. [moby/moby/#42836](https://github.com/moby/moby/pull/42836). - Windows: update hcsshim library to fix a bug in sparse file handling in container layers, which was exposed by recent changes in Windows [moby/moby#42944](https://github.com/moby/moby/pull/42944). - Fix some situations where `docker stop` could hang forever [moby/moby#42956](https://github.com/moby/moby/pull/42956). ##### Swarm - Fix an issue where updating a service did not roll back on failure [moby/moby#42875](https://github.com/moby/moby/pull/42875). #### Packaging - Add packages for Ubuntu 21.10 "Impish Indri" and Fedora 35. - Update `docker scan` to v0.9.0 - Update Golang runtime to Go 1.16.9. ### [`v20.10.9`](https://github.com/docker/docker/releases/v20.10.9) [Compare Source](https://github.com/docker/docker/compare/v20.10.8...v20.10.9) This release is a security release with security fixes in the CLI, runtime, as well as updated versions of the containerd.io package and the Go runtime. #### Client - [CVE-2021-41092](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41092) Ensure default auth config has address field set, to prevent credentials being sent to the default registry. #### Runtime - [CVE-2021-41089](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41089) Create parent directories inside a chroot during `docker cp` to prevent a specially crafted container from changing permissions of existing files in the host’s filesystem. - [CVE-2021-41091](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41091) Lock down file permissions to prevent unprivileged users from discovering and executing programs in `/var/lib/docker`. #### Packaging - Update Golang runtime to Go 1.16.8, which contains fixes for [CVE-2021-36221](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36221) and [CVE-2021-39293](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39293) - Update static binaries and containerd.io rpm and deb packages to containerd v1.4.11 and runc v1.0.2 to address [CVE-2021-41103](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41103). - Update the bundled buildx version to v0.6.3 for rpm and deb packages. </details> --- ### Configuration :date: **Schedule**: At any time (no schedule defined). :vertical_traffic_light: **Automerge**: Disabled by config. Please merge this manually once you are satisfied. :recycle: **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. :no_bell: **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, click this checkbox. --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2021-11-15 08:01:29 +00:00

chore(deps): update module github.com/docker/docker to v20.10.10

renovate/artifacts Artifact file update failure

continuous-integration/drone/pr Build is failing

Details

continuous-integration/drone/push Build is failing

Details

2439643895

coop-cloud manually merged commit 4e76d49c80 into main

2021-11-15 08:20:18 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: toolshed/abra#128