Hi Kata folks,

We published two stable releases end of last week - 1.11.1 and 1.10.5.  Among other bug fixes, these releases include security fixes for CVE-2020-2023 and CVE-2020-2026.

Kata Security Advisory for the above CVEs describing impact and mitigation has been published here https://github.com/kata-containers/community/pull/158

All Kata versions prior to 1.11.1 and 1.10.5 are impacted. It is recommended to upgrade to the latest stable releases.  The security fixes have been pushed to master as well.

In addition, we tagged Kata Containers 2.0.0-alpha1 release last week. This release uses the rust agent as default and makes the switch to ttrpc from grpc as the communication protocol. We have also consolidated the agent and runtime repositories and moved them to kata-containers/kata-containers repository for better maintenance and release management.

You can find the release information for 2.0.0-alpha1 here: https://github.com/kata-containers/kata-containers/releases/tag/2.0.0-alpha1

Features that we are planning for 2.0 are tracked here: https://github.com/kata-containers/kata-containers/projects/2

Thanks,

Archana Shinde