containerd

v2.4.1Kubernetes Core

2026년 9월 24일

보안 취약점 수정과 함께 `CRI` 및 `ctr`의 동작 오류, 이미지 언팩 처리 보강, 의존성 업데이트가 포함된 유지보수 릴리스입니다. 운영자 설정 변경은 발표되지 않았습니다.

조치 필요 (1)

securitymedium보안 취약점 CVE-2026-53493 수정
보안 권고 CVE-2026-53493에 해당하는 취약점을 수정했습니다.
**CVE-2026-53493**

그 외 기록된 변경 8건 전체fixes 6 · value changes 2

* Fix bug where failed container start cleanup leaked tasks and prevented container removal ([#14223](https://github.com/containerd/containerd/pull/14223))
* Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem ([#14212](https://github.com/containerd/containerd/pull/14212))
* Fix content upload failures when retrying fetch content after reaching EOF ([#14197](https://github.com/containerd/containerd/pull/14197))
* Fix bug where arguments following "-" were dropped in "ctr images export" ([#14219](https://github.com/containerd/containerd/pull/14219))
* Fix bug where container command arguments were parsed as flags in "ctr run", "ctr containers create", "ctr tasks exec", and "containerd oci-hook" ([#14215](https://github.com/containerd/containerd/pull/14215))
* Fix bug where comma-separated flag values were incorrectly split in ctr subcommands ([#14188](https://github.com/containerd/containerd/pull/14188))

* Apply hardening to filter ID-mapping labels from image annotations during unpack ([#14200](https://github.com/containerd/containerd/pull/14200))
* vendor: github.com/fxamacker/cbor/v2 v2.9.4 ([#14179](https://github.com/containerd/containerd/pull/14179)) * [f00dd7552e](https://github.com/containerd/containerd/commit/f00dd7552e957c7909df861586180b2a35868357) vendor: github.com/fxamacker/cbor/v2 v2.9.4

containerd 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치 같은 것들입니다.