Description:
This update for docker-distribution fixes the following issues:
- Enable build on %arm (which include armv6), not only on armv7
- Enable ppc64le
- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM
- Upgraded to 2.7.1
- Support for OCI images added
- Fix upgrade issues from 2.6.x
- Update Go version to 1.11
- Switch to multi-stage Dockerfile
- Validations enabled by default with new disabled config option
- Optimize health check performance
- Create separate permission for deleting objects in a repo
- Fix storage driver error propagation for manifest GETs
- Fix forwarded header resolution
- Add prometheus metrics
- Disable schema1 manifest by default
- Graceful shutdown
- TLS: remove ciphers that do not support perfect forward secrecy
- Fix registry stripping newlines from manifests
- Add bugsnag logrus hook
- Support ARM builds
This release is a special security release to address an issue allowing
an attacker to force arbitrarily-sized memory allocations in a registry
instance through the manifest endpoint. The problem has been mitigated
by limiting the size of reads for image manifest content.
Details for mitigation are in 29fa466
Fixes boo#1049850 (CVE-2017-11468)
Fixes boo#1033172