<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#0563C1;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:#954F72;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri",sans-serif;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi Kata folks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">We published two stable releases end of last week - 1.11.1 and 1.10.5.  Among other bug fixes, these releases include security fixes for
<a href="https://nvd.nist.gov/vuln/detail/CVE-2020-2023">CVE-2020-2023</a> and <a href="https://nvd.nist.gov/vuln/detail/CVE-2020-2026">
CVE-2020-2026</a>. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Kata Security Advisory for the above CVEs describing impact and mitigation has been published here
<a href="https://github.com/kata-containers/community/pull/158">https://github.com/kata-containers/community/pull/158</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">All Kata versions prior to 1.11.1 and 1.10.5 are impacted. It is recommended to upgrade to the latest stable releases.  The security fixes have been pushed to master as well.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">In addition, we tagged Kata Containers 2.0.0-alpha1 release last week. This release uses the rust agent as default and makes the switch to ttrpc from grpc as the communication protocol. We have also consolidated
 the agent and runtime repositories and moved them to <a href="https://github.com/kata-containers/kata-containers">
kata-containers/kata-containers</a> repository for better maintenance and release management.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">You can find the release information for 2.0.0-alpha1 here:
<a href="https://github.com/kata-containers/kata-containers/releases/tag/2.0.0-alpha1">
https://github.com/kata-containers/kata-containers/releases/tag/2.0.0-alpha1</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Features that we are planning for 2.0 are tracked here:
<a href="https://github.com/kata-containers/kata-containers/projects/2">https://github.com/kata-containers/kata-containers/projects/2</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Archana Shinde<o:p></o:p></span></p>
</div>
</body>
</html>