containerd

v2.3.6Kubernetes Core

Sep 24, 2026

A maintenance release with a disclosed security fix and several correctness updates. It also changes default container behavior and updates the Go toolchain.

Action needed (1)

securitymediumCVE-2026-53493 security fix
The release includes a fix for CVE-2026-53493, tracked as GHSA-pg57-6jwg-q645.
**CVE-2026-53493**

All 5 other recorded changesdefaults 2 · fixes 2 · value changes 1

defaults (2)

* Enable mount manager for image mounts in CRI ([#14147](https://github.com/containerd/containerd/pull/14147))
* Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linux containers by default ([#14144](https://github.com/containerd/containerd/pull/14144))

fixes (2)

* Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem ([#14211](https://github.com/containerd/containerd/pull/14211))
* Fix input mutation in mount option helpers ([#14192](https://github.com/containerd/containerd/pull/14192))

value changes (1)

* Update to go1.26.8 ([#14088](https://github.com/containerd/containerd/pull/14088))

Add containerd to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →

Official release note ↗All containerd releases →