A maintenance release focused on runtime correctness and security, including fixes across snapshotter, storage, and server components. It also contains compatibility changes and updates to the API and Go toolchain.
Action needed (1)
securityhighCVE-2026-46680 correction
The fix for CVE-2026-46680 ships in this release.
Check if affected (1)
breakingThe
overlayfs"rebase" capability, disabled in user namespacesApplies if you use
overlayfsand run in a user namespace.The
overlayfs"rebase" capability is disabled when running in a user namespace.
Plan ahead (1)
deprecatedTask fields in Runc options, deprecated
Applies if you configure task fields in Runc options.
Task fields in Runc options are deprecated in this release.