Merge pull request #4783 from oasisprotocol/kostko/stable/21.3.x/chan…

…gelog-21.3.14 changelog: Assemble changes for 21.3.14 release
oasisprotocol · Jun 6, 2022 · 990bb1e · 990bb1e
2 parents c48dbec + ac956f3
commit 990bb1e
Show file tree

Hide file tree

Showing 6 changed files with 34 additions and 16 deletions.
diff --git a/.changelog/4687.bugfix.md b/.changelog/4687.bugfix.md
diff --git a/.changelog/4754.internal.md b/.changelog/4754.internal.md
diff --git a/.changelog/4762.trivial.md b/.changelog/4762.trivial.md
diff --git a/.changelog/4776.bugfix.md b/.changelog/4776.bugfix.md
diff --git a/.punch_version.py b/.punch_version.py
@@ -1,3 +1,3 @@
 year = '21'
 minor = 3
-micro = 13
+micro = 14
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -12,6 +12,39 @@ The format is inspired by [Keep a Changelog].
 
 <!-- TOWNCRIER -->
 
+## 21.3.14 (2022-06-06)
+
+| Protocol          | Version   |
+|:------------------|:---------:|
+| Consensus         | 4.0.0     |
+| Runtime Host      | 4.0.0     |
+| Runtime Committee | 3.0.0     |
+
+### Bug Fixes
+
+- go/runtime/host/sandbox: Properly handle clone3 in seccomp policy
+  ([#4687](https://github.com/oasisprotocol/oasis-core/issues/4687))
+
+  We need to handle the clone3 syscall in a special manner as there are
+  several complications to its handling:
+
+  - Newer glibc versions will try clone3 first and if they see EPERM they
+    will instantly fail making the program unable to spawn threads.
+
+  - The clone3 syscall is much more complex than clone and so we can't
+    simply inspect its flags as we do for clone.
+
+  Therefore we need to reject the syscall with ENOSYS, causing fallback to
+  clone.
+
+- Disable storage sync for archive nodes
+  ([#4776](https://github.com/oasisprotocol/oasis-core/issues/4776))
+
+### Internal Changes
+
+- docker/oasis-core-dev: Fix golangci-lint install
+  ([#4754](https://github.com/oasisprotocol/oasis-core/issues/4754))
+
 ## 21.3.13 (2022-04-19)
 
 | Protocol          | Version   |