containerd
v2.2.9Kubernetes CoreSep 24, 2026
A maintenance release with a security fix, correctness fixes, and behavior changes for CRI image mounts and Linux container information masking. The release also includes fixes for image handling and relabeling behavior.
Action needed (3)
securitymediumCVE-2026-53493 security fix
The release includes a security fix for CVE-2026-53493, also tracked as GHSA-pg57-6jwg-q645.
breakingThermal interrupt information masking
pkg/ocinow masks thermal interrupt information in Linux container data.breakingCRI image mount manager
CRI image mounts now use the mount manager.
All 3 other recorded changesfixes 3
fixes (3)
- * cri: tolerate wrapped ENOTSUP during relabel ([#14210](https://github.com/containerd/containerd/pull/14210)) * [
39d0dd4b43](https://github.com/containerd/containerd/commit/39d0dd4b438524984290e17912c31dee90b29866) cri: tolerate wrapped ENOTSUP during relabel - * core/unpack: fetch layers of every config-sharing manifest ([#14140](https://github.com/containerd/containerd/pull/14140)) * [
9e1ae6a9e9](https://github.com/containerd/containerd/commit/9e1ae6a9e9363836d3a2856f47ed84f63f520eb9) core/unpack: fetch layers of every config-sharing manifest - cri: only unmount image volumes when mounting fails
Add containerd to your stack
A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.