From e2ec7c76a4ed4a23a5b3276e0cb48511b6ccd2a4 Mon Sep 17 00:00:00 2001
From: Etienne Champetier <champetier.etienne@gmail.com>
Date: Wed, 11 Mar 2020 08:39:36 -0400
Subject: [PATCH] containerd: bump to 1.2.13 (#5727)
https://github.com/containerd/containerd/releases/tag/v1.2.11
CVE-2019-16884 / CVE-2019-17596
https://github.com/containerd/containerd/releases/tag/v1.2.12
CVE-2019-19921 / CVE-2019-16884 / CVE-2019-11253
https://github.com/containerd/containerd/releases/tag/v1.2.13
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
---
README.md | 1 +
roles/container-engine/containerd/defaults/main.yml | 2 +-
roles/container-engine/containerd/vars/debian.yml | 6 ++++--
roles/container-engine/containerd/vars/redhat.yml | 6 ++++--
roles/container-engine/containerd/vars/ubuntu-amd64.yml | 6 ++++--
5 files changed, 14 insertions(+), 7 deletions(-)
diff --git a/README.md b/README.md
index 4979a91fd..99abbf8cf 100644
--- a/README.md
+++ b/README.md
@@ -115,6 +115,7 @@ Note: Upstart/SysV init based OS types are not supported.
- [kubernetes](https://github.com/kubernetes/kubernetes) v1.16.6
- [etcd](https://github.com/coreos/etcd) v3.3.10
- [docker](https://www.docker.com/) v18.06 (see note)
+ - [containerd](https://containerd.io/) v1.2.13
- [cri-o](http://cri-o.io/) v1.14.0 (experimental: see [CRI-O Note](docs/cri-o.md). Only on centos based OS)
- Network Plugin
- [cni-plugins](https://github.com/containernetworking/plugins) v0.8.1
diff --git a/roles/container-engine/containerd/defaults/main.yml b/roles/container-engine/containerd/defaults/main.yml
index 5e39ac258..ac797ec37 100644
--- a/roles/container-engine/containerd/defaults/main.yml
+++ b/roles/container-engine/containerd/defaults/main.yml
@@ -11,7 +11,7 @@ containerd_config:
# containerd:
# snapshotter: native
-containerd_version: '1.2.10'
+containerd_version: '1.2.13'
containerd_package: 'containerd.io'
containerd_cfg_dir: /etc/containerd
diff --git a/roles/container-engine/containerd/vars/debian.yml b/roles/container-engine/containerd/vars/debian.yml
index 6ad455c57..11faad631 100644
--- a/roles/container-engine/containerd/vars/debian.yml
+++ b/roles/container-engine/containerd/vars/debian.yml
@@ -6,8 +6,10 @@ containerd_versioned_pkg:
'1.2.5': "{{ containerd_package }}=1.2.5-1"
'1.2.6': "{{ containerd_package }}=1.2.6-3"
'1.2.10': "{{ containerd_package }}=1.2.10-3"
- 'stable': "{{ containerd_package }}=1.2.10-3"
- 'edge': "{{ containerd_package }}=1.2.10-3"
+ '1.2.12': "{{ containerd_package }}=1.2.12-1"
+ '1.2.13': "{{ containerd_package }}=1.2.13-1"
+ 'stable': "{{ containerd_package }}=1.2.13-1"
+ 'edge': "{{ containerd_package }}=1.2.13-1"
containerd_package_info:
pkg_mgr: apt
diff --git a/roles/container-engine/containerd/vars/redhat.yml b/roles/container-engine/containerd/vars/redhat.yml
index ae6ab87d9..e95a48376 100644
--- a/roles/container-engine/containerd/vars/redhat.yml
+++ b/roles/container-engine/containerd/vars/redhat.yml
@@ -6,8 +6,10 @@ containerd_versioned_pkg:
'1.2.5': "{{ containerd_package }}-1.2.5-3.1.el7"
'1.2.6': "{{ containerd_package }}-1.2.6-3.3.el7"
'1.2.10': "{{ containerd_package }}-1.2.10-3.2.el7"
- 'stable': "{{ containerd_package }}-1.2.10-3.2.el7"
- 'edge': "{{ containerd_package }}-1.2.10-3.2.el7"
+ '1.2.12': "{{ containerd_package }}-1.2.12-3.1.el7"
+ '1.2.13': "{{ containerd_package }}-1.2.13-3.1.el7"
+ 'stable': "{{ containerd_package }}-1.2.13-3.1.el7"
+ 'edge': "{{ containerd_package }}-1.2.13-3.1.el7"
containerd_package_info:
pkg_mgr: yum
diff --git a/roles/container-engine/containerd/vars/ubuntu-amd64.yml b/roles/container-engine/containerd/vars/ubuntu-amd64.yml
index 6dce99cd9..a80bcd4df 100644
--- a/roles/container-engine/containerd/vars/ubuntu-amd64.yml
+++ b/roles/container-engine/containerd/vars/ubuntu-amd64.yml
@@ -6,8 +6,10 @@ containerd_versioned_pkg:
'1.2.5': "{{ containerd_package }}=1.2.5-1"
'1.2.6': "{{ containerd_package }}=1.2.6-3"
'1.2.10': "{{ containerd_package }}=1.2.10-3"
- 'stable': "{{ containerd_package }}=1.2.10-3"
- 'edge': "{{ containerd_package }}=1.2.10-3"
+ '1.2.12': "{{ containerd_package }}=1.2.12-1"
+ '1.2.13': "{{ containerd_package }}=1.2.13-1"
+ 'stable': "{{ containerd_package }}=1.2.13-1"
+ 'edge': "{{ containerd_package }}=1.2.13-1"
containerd_package_info:
pkg_mgr: apt
--
GitLab