Welcome to the v2.4.0 release of containerd! containerd 2.4 is a regular (non-LTS) release with a shorter support window, intended for users who want to adopt new features sooner. As the release following the 2.3 LTS, it is the point in the release cycle where previously deprecated features may be removed, so this release may include breaking changes; check the notes below and clear any deprecatio…
Updates the underlying libraries to fix CVE-2025-11395 .
Security This release addresses (CVE-2025-11395), where importing images containing crafted layer tarballs with the podman load command, or importing volumes containing crafted symlinks with podman volume import, allows overwriting files on the host. This release also addresses CVE-2026-79699 and CVE-2026-79705, though we do not believe these CVEs are exploitable through the Podman command line. M…
Welcome to the api/v1.12.0 release of containerd! The 13th release for the containerd 1.x API aligns with the containerd 2.4 release. Highlights Image Storage Include media type in content create events (#13833) Runtime Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#14105) Allow specifying parent checkpoint directory when checkpointing with runc (#13699) Deprecations D…
What's Changed Bump Skopeo to v1.24.1, common 0.69.2, image 5.41.2, storage 1.64.1 to fix CVE-2025-11395 by @mtrmac in #2983 Full Changelog: v1.24.0...v1.24.1
Security This release addresses (CVE-2025-11395), where importing images containing crafted layer tarballs with the podman load command, or importing volumes containing crafted symlinks with podman volume import, allows overwriting files on the host. This release also addresses CVE-2026-79699 and CVE-2026-79705, though we do not believe these CVEs are exploitable through the Podman command line. M…
What's Changed Notable changes [release-1.43] Bump Buildah to v1.43.3 by @TomSweeneyRedHat in #7019 [release-1.43] bump golang.org/x/crypto to v0.56.0 - CVE-2026-78662, CVE-2026-56855 by @lsm5 in #7100 Merge commit from fork to incorporate fixes from GHSA-3528-5p26-cf44. [release-1.43] tag v1.43.4 by @nalind in #7113 Full Changelog: v1.43.3...v1.43.4
What's Changed Notable changes [release-1.45] vendor: bump golang.org/x/crypto to v0.56.0 - CVE-2026-78662, CVE-2026-56855 by @lsm5 in #7110 Merge commit from fork to incorporate fixes from GHSA-3528-5p26-cf44. [release-1.45] tag v1.45.1 by @nalind in #7112 Full Changelog: v1.45.0...v1.45.1
29.8.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.1 milestone moby/moby, 29.8.1 milestone Bug fixes and enhancements containerd image store: Fix docker load leaving dangling images after loading an image that already exists. moby/moby#53595 Fix managed containerd logging a CRI pod-sandbox plugin dependency warning during…
What's Changed Notable changes [release-1.43] fix packit by @lsm5 in #6887 [release-1.43] rpm/buildah.spec tests: require xz and /usr/bin/selinuxenabled by @lsm5 in #6909 [release-1.43] Add new CI github actions CI to this branch by @Luap99 in #6921 [release-1.43] Bump golang.org/x/crypto to v0.53.0 for CVE-2026-39830 by @lsm5 in #6929 Full Changelog: v1.43.2...v1.43.3
v2.0.0-beta.24
Welcome to the v2.4.0-rc.0 release of containerd! This is a pre-release of containerd containerd 2.4 is a regular (non-LTS) release with a shorter support window, intended for users who want to adopt new features sooner. As the release following the 2.3 LTS, it is the point in the release cycle where previously deprecated features may be removed, so this release may include breaking changes; check…
CRI-O v1.37.0 The release notes have been generated for the commit range v1.36.0...v1.37.0 on Tue, 15 Sep 2026 12:48:48 UTC. Downloads Release Bundles Download one of our static release bundles via our Google Cloud Bucket. Each bundle includes a SHA-256 checksum, a cosign signature (.bundle), and a SPDX bill of materials (.spdx) with its own signature: cri-o.amd64.v1.37.0.tar.gz cri-o.amd64.v1.37.…
Survey Please take the Kata Containers survey: https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey This will help the Kata Containers community understand: how you use Kata Containers what features and improvements you would like to see in Kata Containers Libseccomp Notices The kata-agent binaries inside the Kata Containers images provided with this release are statically l…
Welcome to the api/v1.12.0-rc.1 release of containerd! This is a pre-release of containerd The 13th release for the containerd 1.x API aligns with the containerd 2.4 release. Highlights Image Storage Include media type in content create events (#13833) Runtime Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#14105) Allow specifying parent checkpoint directory when checkp…
What's Changed wslc: add --size to inspect for docker parity by ggarzia-MSFT in #41489 Add wslc container restart command by beena352 in #41435 init: fix dhcpcd option name in bridged-mode config by DesertRatUa in #41538 Host plugin Plan9 shares as the session user by Ben Hillis (@benhillis) in #41548 Fix virtiofs bind mounts exposing files as root-owned (#40719) by Stephen Halter (@halter73) in #…
2026-09-14 Download Docker DesktopWindows (checksum)Windows ARM Early Access (checksum)Mac with Apple chip (checksum)Mac with Intel chip (checksum)Debian - RPM - Arch (checksum)
What's Changed [release/2.7] Make sure that message structures are correctly zero-initialized by Ben Hillis (@benhillis) in #41524 [release/2.7] Backport additional fixes by Ben Hillis (@benhillis) in #41540 [release/2.7] Host plugin Plan9 shares as the session user by Ben Hillis (@benhillis) in #41557 [release/2.7] Validate guest capability strings by Ben Hillis (@benhillis) in #41569 Full Change…
Welcome to the v0.37.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. Contributors CrazyMax Tomas Perez Molina Tõnis Tiigi Notable Changes Fix failed multi-node image pushes leaving the requested tag pointing to a partial image. #4058 Fix newly started container builders not getting a full readiness timeout before first use.…
Client tools for OKD/SCOS These archives contain the client tooling for OKD on CentOS Stream CoreOS. To verify the contents of this directory, use the 'gpg' and 'shasum' tools to ensure the archives you have downloaded match those published from this location. The openshift-install binary has been preconfigured to install the following release: Name: 5.0.0-okd-scos.ec.10 Digest: sha256:7287353573c…
Added #5891: Added support for virtio device reset. #5983: Add two optional metrics fields, set via PUT /metrics or a config file: emit_id emits the microVM instance id under a top-level id field, and properties emits operator-defined key-value pairs under a top-level properties field. Each is opt-in and independent. See metrics documentation. #6003: Added a new option Transparent for the huge_pag…
Changed #6172: Gate CLIRD_EL1 override to only happen on host kernels equal or newer than 6.10 release. This aliviates the guest performance regression seen on host kernels in range [6.3..6.10) correlated to incorrect cpu cache topology presented to the guest. #6100: Bumped the snapshot format version. Snapshots created by this version cannot be loaded by 1.16.0 or 1.16.1, and snapshots created by…
Client tools for OKD/SCOS These archives contain the client tooling for OKD on CentOS Stream CoreOS. To verify the contents of this directory, use the 'gpg' and 'shasum' tools to ensure the archives you have downloaded match those published from this location. The openshift-install binary has been preconfigured to install the following release: Name: 5.0.0-okd-scos.ec.9 Digest: sha256:84f9826c44ab…
What's Changed Add container restart runtime support by beena352 in #41454 Fix p9 drvfs read only mount regression by Feng Wang (@chemwolf6922) in #41487 Fix WSLC Plan9 mount and image-build failures by Feng Wang (@chemwolf6922) in #41535 Full Changelog: 2.9.10...2.9.11
This Multipass 1.16.4 patch release fixes an issue related to expired certificates for client/daemon communication. Bug fixes [core] Regenerate expired certificates (#5202) Changes See also the full diff: v1.16.3...v1.16.4. Feedback Please file issues on the Multipass GitHub for problems and feature requests, or join the Multipass Discourse forum to chat. You can also find us in the Multipass room…