These release notes cover new developer and user-facing incompatibilities, important issues, features, and major improvements.
CVE-2017-7669 / YARN’s Docker support did not do enough input validation. This allowed a root level escalation from an ordinary user account.