20.10.21

(2023-11-20)

Components

Component	Version
Mirantis Container Runtime	20.10.21
Moby	20.10.27
containerd	1.6.25-rc.1
runc	1.1.9
cri-dockerd	0.3.7
buildx	0.12.0-rc1
Golang runtime	go1.20.10m1
buildkit	0.8.4-0.20221020190723-eeb7b65ab7d6
rootlesskit	0.14.4

Daemon

• moby/moby#46704 Atomically

  fixed an issue wherein images failed to pull when interrupted by a power cut.

• Fixed an issue that pertained to the enablement of FIPS for swarm.

Security

• Resolved CVE-2023-39325

• Resolved CVE-2023-44487

• Deny containers access to /sys/devices/virtual/powercap by default, a change that hardens against CVE-2020-8694, CVE-2020-8695, CVE-2020-12912, and an attack known as the PLATYPUS attack.

  For more detail, refer to https://github.com/moby/moby/commit/81ebe71275768629689a23bc3bca34b3b374a6a6.

Networking

• moby/moby#46693 Fixed the deadlock between getSvcRecords and processEndpointDelete.

Packaging

• Updated Golang to version 1.20.10m1