containerd
v2.4.1Kubernetes CoreSep 24, 2026
A maintenance release with a security fix, correctness fixes across CRI and `ctr`, unpack hardening, and a dependency update. No operator configuration changes are announced.
Action needed (1)
securitymediumCVE-2026-53493 security fix
This release includes a security fix associated with CVE-2026-53493 and GHSA-pg57-6jwg-q645.
All 8 other recorded changesfixes 6 · value changes 2
fixes (6)
- * Fix bug where failed container start cleanup leaked tasks and prevented container removal ([#14223](https://github.com/containerd/containerd/pull/14223))
- * Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem ([#14212](https://github.com/containerd/containerd/pull/14212))
- * Fix content upload failures when retrying fetch content after reaching EOF ([#14197](https://github.com/containerd/containerd/pull/14197))
- * Fix bug where arguments following "-" were dropped in "ctr images export" ([#14219](https://github.com/containerd/containerd/pull/14219))
- * Fix bug where container command arguments were parsed as flags in "ctr run", "ctr containers create", "ctr tasks exec", and "containerd oci-hook" ([#14215](https://github.com/containerd/containerd/pull/14215))
- * Fix bug where comma-separated flag values were incorrectly split in ctr subcommands ([#14188](https://github.com/containerd/containerd/pull/14188))
value changes (2)
- * Apply hardening to filter ID-mapping labels from image annotations during unpack ([#14200](https://github.com/containerd/containerd/pull/14200))
- * vendor: github.com/fxamacker/cbor/v2 v2.9.4 ([#14179](https://github.com/containerd/containerd/pull/14179)) * [
f00dd7552e](https://github.com/containerd/containerd/commit/f00dd7552e957c7909df861586180b2a35868357) vendor: github.com/fxamacker/cbor/v2 v2.9.4
Add containerd to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.