containerd
v2.0.13Kubernetes CoreSep 24, 2026
A maintenance release with an advisory-backed security fix and a changed container security default. It also corrects image layer fetching in `core/unpack` for every config-sharing manifest.
Action needed (2)
securitymediumCVE-2026-53493 security fix
containerd includes a security fix identified as CVE-2026-53493 and GHSA-pg57-6jwg-q645.
breakingDefault masking of Linux container paths
Linux containers mask
/proc/interruptsand CPU thermal throttle sysfs paths by default.
All 1 other recorded changesfixes 1
fixes (1)
- * core/unpack: fetch layers of every config-sharing manifest ([#14141](https://github.com/containerd/containerd/pull/14141)) * [
6850f41724](https://github.com/containerd/containerd/commit/6850f41724f983ac0bd0e96a0008686be294f4ad) core/unpack: fetch layers of every config-sharing manifest
Add containerd to your stack
A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.