CRI-O v1.24.3

The release notes have been generated for the commit range v1.24.2…ae53655 on Mon, 05 Dec 2022 20:04:48 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

Add an option “add_inheritable_capabilities” which adds added capabilities to the inheritable list as well. As of CRI-O 1.25.1, CRI-O drops the inheritable capabilities to fix CVE-2022-27652 . However, this can cause regressions in workloads that attempt to pass capabilities to non-root users through inheritable capabilities. It defaults to true. (#6260, @haircommander)
CRI-O now logs the stage of container or pod creation under system load. This allows users to find why their creation requests are stalling. (#6263, @haircommander)

Fix a bug by re-adding the inheritable capabilities when adding capabilities. While it fixes an atypical unix environment, it causes a regression with non-root users using capabilities. (#6240, @haircommander)
Fixed bug to restore /var/lib/containers/storage/overlay/backingFsBlockDev on XFS file systems. (#6389, @saschagrunert)

Fix a bug where a container is stuck in INIT because CRI-O believes it to be paused, and never updates the state (#6129, @openshift-cherrypick-robot)
Fix a bug where exit files were never cleaned up from /run/crio/exits (#6149, @openshift-cherrypick-robot)

Nothing has changed.

Nothing has changed.