containerd

v2.4.1Kubernetes Core

2026年9月24日

保守的な更新で、セキュリティ修正に加えて、CRIやctrの正確性、アンパック処理、依存関係が見直されています。オペレーターが対応すべき設定変更は案内されていません。

要対応 (1)

securitymediumCVE-2026-53493 の修正
セキュリティ修正として CVE-2026-53493 が挙げられています。関連アドバイザリは GHSA-pg57-6jwg-q645 です。
**CVE-2026-53493**

その他の記録済み変更 8 件すべてfixes 6 · value changes 2

* Fix bug where failed container start cleanup leaked tasks and prevented container removal ([#14223](https://github.com/containerd/containerd/pull/14223))
* Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem ([#14212](https://github.com/containerd/containerd/pull/14212))
* Fix content upload failures when retrying fetch content after reaching EOF ([#14197](https://github.com/containerd/containerd/pull/14197))
* Fix bug where arguments following "-" were dropped in "ctr images export" ([#14219](https://github.com/containerd/containerd/pull/14219))
* Fix bug where container command arguments were parsed as flags in "ctr run", "ctr containers create", "ctr tasks exec", and "containerd oci-hook" ([#14215](https://github.com/containerd/containerd/pull/14215))
* Fix bug where comma-separated flag values were incorrectly split in ctr subcommands ([#14188](https://github.com/containerd/containerd/pull/14188))

* Apply hardening to filter ID-mapping labels from image annotations during unpack ([#14200](https://github.com/containerd/containerd/pull/14200))
* vendor: github.com/fxamacker/cbor/v2 v2.9.4 ([#14179](https://github.com/containerd/containerd/pull/14179)) * [f00dd7552e](https://github.com/containerd/containerd/commit/f00dd7552e957c7909df861586180b2a35868357) vendor: github.com/fxamacker/cbor/v2 v2.9.4

containerdをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。今回のセキュリティパッチも、その一例です。