Welcome to the v2.3.7 release of containerd! The seventh patch release for containerd 2.3 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-95839 GHSA-5p7c-hggf-c748 GHSA-8647-2jxj-p2rc GHSA-hc94-p972-ch66 Highlights Container Runtime Interface (CRI) Apply hardening to not follow symlinks for container log files (#14301) Image Distribution Apply ha…
Welcome to the v2.2.10 release of containerd! The tenth patch release for containerd 2.2 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-95839 GHSA-5p7c-hggf-c748 GHSA-8647-2jxj-p2rc GHSA-hc94-p972-ch66 Highlights Container Runtime Interface (CRI) Apply hardening to not follow symlinks for container log files (#14300) Image Distribution Avoid han…
Welcome to the v2.4.2 release of containerd! The second patch release for containerd 2.4 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-95839 GHSA-8647-2jxj-p2rc GHSA-hc94-p972-ch66 Highlights Container Runtime Interface (CRI) Apply hardening to not follow symlinks for container log files (#14302) Image Distribution Fix excessive memory usage du…
Welcome to the v2.0.14 release of containerd! The fourteenth patch release for containerd 2.0 contains various fixes and updates including a security patch. Security Updates containerd GHSA-hc94-p972-ch66 Highlights Container Runtime Interface (CRI) Apply hardening to not follow symlinks for container log files (#14299) Runtime Apply hardening to allowlist socket domains in the default seccomp pro…
Welcome to the v1.7.36 release of containerd! The thirty-sixth patch release for containerd 1.7 contains various fixes and updates including a security patch. Security Updates containerd CVE-2026-53493 Highlights Image Storage Ensure all layers are fetched when multiple manifests in an index share a config descriptor (#14142) Runtime Mask /proc/interrupts and CPU thermal throttle sysfs paths in Li…
Welcome to the v2.4.1 release of containerd! The first patch release for containerd 2.4 contains various fixes and updates including a security patch. Security Updates containerd CVE-2026-53493 Highlights Container Runtime Interface (CRI) Fix bug where failed container start cleanup leaked tasks and prevented container removal (#14223) Fix bug where container creation failed when SELinux relabelin…
Welcome to the v2.2.9 release of containerd! The ninth patch release for containerd 2.2 contains various fixes and updates including a security patch. Security Updates containerd CVE-2026-53493 Highlights Container Runtime Interface (CRI) Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem (#14210) Enable mount manager for image mounts in CRI (#14148)…
Welcome to the v2.3.6 release of containerd! The sixth patch release for containerd 2.3 contains various fixes and updates including a security patch. Security Updates containerd CVE-2026-53493 Highlights Container Runtime Interface (CRI) Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem (#14211) Enable mount manager for image mounts in CRI (#14147)…
Welcome to the v2.0.13 release of containerd! The thirteenth patch release for containerd 2.0 contains various fixes and updates including a security patch. Security Updates containerd CVE-2026-53493 Highlights Image Storage Ensure all layers are fetched when multiple manifests in an index share a config descriptor (#14141) Runtime Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linu…
Welcome to the v2.4.0 release of containerd! containerd 2.4 is a regular (non-LTS) release with a shorter support window, intended for users who want to adopt new features sooner. As the release following the 2.3 LTS, it is the point in the release cycle where previously deprecated features may be removed, so this release may include breaking changes; check the notes below and clear any deprecatio…
Welcome to the api/v1.12.0 release of containerd! The 13th release for the containerd 1.x API aligns with the containerd 2.4 release. Highlights Image Storage Include media type in content create events (#13833) Runtime Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#14105) Allow specifying parent checkpoint directory when checkpointing with runc (#13699) Deprecations D…
Welcome to the v2.4.0-rc.0 release of containerd! This is a pre-release of containerd containerd 2.4 is a regular (non-LTS) release with a shorter support window, intended for users who want to adopt new features sooner. As the release following the 2.3 LTS, it is the point in the release cycle where previously deprecated features may be removed, so this release may include breaking changes; check…
Welcome to the api/v1.12.0-rc.1 release of containerd! This is a pre-release of containerd The 13th release for the containerd 1.x API aligns with the containerd 2.4 release. Highlights Image Storage Include media type in content create events (#13833) Runtime Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#14105) Allow specifying parent checkpoint directory when checkp…
Welcome to the v1.7.35 release of containerd! The thirty-fifth patch release for containerd 1.7 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-53495 GHSA-rp3h-jf77-q9p4 Highlights Image Distribution Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#14046) Runtime Enable log scrubbing by default on Windows…
Welcome to the v2.0.12 release of containerd! The twelfth patch release for containerd 2.0 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-53495 GHSA-rp3h-jf77-q9p4 Highlights Image Distribution Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#14045) Surface OCI error bodies in registry 403 responses by fa…
Welcome to the v2.3.5 release of containerd! The fifth patch release for containerd 2.3 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-53495 GHSA-rp3h-jf77-q9p4 Highlights Image Distribution Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#14030) Runtime Avoid hangs and data races when streaming container…
Welcome to the v2.2.8 release of containerd! The eighth patch release for containerd 2.2 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-53495 GHSA-rp3h-jf77-q9p4 Highlights Image Distribution Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#14044) Runtime Set SystemTemp environment variable on Windows so…
Welcome to the api/v1.12.0-rc.0 release of containerd! This is a pre-release of containerd The 13th release for the containerd 1.x API aligns with the containerd 2.4 release. Highlights Include media type in content create event (#13833) Add parent path to runc checkpoint options (#13699) Deprecations Deprecate "allow mount handlers" in shim info and replace with mount capability extension (#14002…
Welcome to the v2.2.7 release of containerd! The seventh patch release for containerd 2.2 contains various fixes and updates. Highlights Container Runtime Interface (CRI) Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13937) Deprecate checkpoint restore in CreateContainer (#13872) Support non-UTF-8 bin…
Welcome to the v2.3.4 release of containerd! The fourth patch release for containerd 2.3 contains various fixes and updates. Highlights Container Runtime Interface (CRI) Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913) Set default runtimeFeatures.UserNamespacesHostNetwork to true in CRI (#13914) D…
Welcome to the v2.4.0-beta.0 release of containerd! This is a pre-release of containerd containerd 2.4 is a regular (non-LTS) release with a shorter support window, intended for users who want to adopt new features sooner. As the release following the 2.3 LTS, it is the point in the release cycle where previously deprecated features may be removed, so this release may include breaking changes; che…
Welcome to the api/v1.12.0-beta.0 release of containerd! This is a pre-release of containerd The 13th release for the containerd 1.x API aligns with the containerd 2.4 release. Highlights Include media type in content create event (#13833) Add parent path to runc checkpoint options (#13699) Deprecations Fix sandbox task API endpoints for non-runc runtimes (#13360) Please try out the release binari…
Welcome to the v2.3.3 release of containerd! The third patch release for containerd 2.3 contains various fixes and updates. Highlights Set SystemTemp environment variable on Windows so temp directory overrides work for SYSTEM services (#13694) Container Runtime Interface (CRI) Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit (#13697) Reject CreateContainer ca…
Welcome to the v2.2.6 release of containerd! The sixth patch release for containerd 2.2 contains various fixes and updates. Highlights Container Runtime Interface (CRI) Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit (#13696) Reject CreateContainer calls when the target sandbox is not running (#13669) Ensure sandbox shutdown on RunPodSandbox hook failures to…
Welcome to the v2.0.11 release of containerd! The eleventh patch release for containerd 2.0 contains various fixes and updates. Highlights Image Distribution Limit fallback to /blobs endpoint during ref resolution to prevent content store pollution (#13622) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. Contributors Samuel Karp Chris H…
Welcome to the v1.7.34 release of containerd! The thirty-fourth patch release for containerd 1.7 contains various fixes and updates. Highlights Container Runtime Interface (CRI) Fix lost container exit events when events arrive before container info is cached (#11634) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. Contributors Chris He…
Welcome to the v2.1.9 release of containerd! The ninth patch release for containerd 2.1 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-50195 CVE-2026-53488 CVE-2026-53492 CVE-2026-53489 CVE-2026-47262 Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. Contributors Chris Henzie Samuel Kar…
Welcome to the v1.7.33 release of containerd! The thirty-third patch release for containerd 1.7 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-53488 CVE-2026-47262 go-jose CVE-2026-34986 Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. Contributors Samuel Karp Chris Henzie Akihiro Suda…
Welcome to the v2.0.10 release of containerd! The tenth patch release for containerd 2.0 includes various bug fixes and updates including security patches. Security Updates containerd CVE-2026-53488 CVE-2026-47262 Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. Contributors Samuel Karp Chris Henzie Akhil Mohan Akihiro Suda Ben Cressey D…
Welcome to the v2.3.2 release of containerd! The second patch release for containerd 2.3 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-50195 CVE-2026-53488 CVE-2026-53492 CVE-2026-53489 CVE-2026-47262 Highlights Fix a data race when reading shim logs on Windows (#13522) Image Distribution Allow the last host to retry on transient network errors…