VersionDrift
Product

containerd

Containers · products/containerd.yaml · RSS

Latest 2.4.2 Oct 13, 2026

Lifecycle

BranchLatestReleasedEnd of life
2.42.4.2Sep 16, 2026May 16, 2027 · maintained
2.3 LTS2.3.7Apr 30, 2026Apr 30, 2028 · maintained
2.22.2.10Nov 5, 2025Nov 6, 2026 · maintained
2.12.1.9May 7, 2025Jul 3, 2026 · ended
2.0 LTS2.0.14Nov 5, 2024Mar 1, 2027 · maintained
1.7 LTS1.7.36Mar 10, 2023Sep 30, 2026 · ended
1.6 LTS1.6.39Feb 15, 2022Aug 23, 2025 · ended
1.51.5.18May 3, 2021Feb 28, 2023 · ended
1.41.4.13Aug 17, 2020Mar 3, 2022 · ended
1.31.3.10Sep 26, 2019Mar 4, 2021 · ended
1.21.2.14Oct 24, 2018Oct 15, 2020 · ended
1.11.1.8Apr 23, 2018Oct 23, 2019 · ended
1.01.0.3Dec 5, 2017Dec 5, 2018 · ended

Recent releases

2.4.2 Oct 13, 2026 Release notes ↗ 4security6feature1breaking
securityCVE-2026-95839
securityGHSA-8647-2jxj-p2rc
securityGHSA-hc94-p972-ch66
2.4.1 Sep 24, 2026 → 2.4.2 Release notes ↗ 1security7feature2fix
securityCVE-2026-53493
2.4.0 Sep 16, 2026 → 2.4.2 Release notes ↗ 37breaking3security
breakingRemove deprecated CRI and tracing configuration options:
breakingRemove enable_cdi in CRI runtime configuration (CDI is now always enabled)
breakingRemove bin_dir in CRI CNI configuration (use bin_dirs)
2.3.7 Oct 13, 2026 → 2.4.2 Release notes ↗ 4security6feature2fix1breaking
securityCVE-2026-95839
securityGHSA-5p7c-hggf-c748
securityGHSA-8647-2jxj-p2rc
2.3.6 Sep 24, 2026 → 2.4.2 Release notes ↗ 1security5feature3fix
securityCVE-2026-53493
2.3.5 Sep 4, 2026 → 2.4.2 Release notes ↗ 2security13feature3fix2breaking
securityCVE-2026-53495
securityGHSA-rp3h-jf77-q9p4
breakingplugins: remove some stray logrus imports ()
2.3.4 Aug 12, 2026 → 2.4.2 Release notes ↗ 1security17feature4deprecated3fix
securityFixes CVE-2026-95837: containerd CRI plugin: Checkpoint restore bypasses destination security context
2.3.3 Jul 10, 2026 → 2.4.2 Release notes ↗ 8feature2fix
2.3.2 Jun 18, 2026 → 2.4.2 Release notes ↗ 5security3feature2fix
securityCVE-2026-50195
securityCVE-2026-53488
securityCVE-2026-53492
2.3.1 May 20, 2026 → 2.4.2 Release notes ↗ 1security7feature3fix
securityCVE-2026-46680
2.3.0 Apr 30, 2026 → 2.4.2 Release notes ↗ 39feature1deprecated
2.2.10 Oct 13, 2026 → 2.4.2 Release notes ↗ 4security7feature2fix1breaking
securityCVE-2026-95839
securityGHSA-5p7c-hggf-c748
securityGHSA-8647-2jxj-p2rc
2.2.9 Sep 24, 2026 → 2.4.2 Release notes ↗ 1security4feature
securityCVE-2026-53493
2.2.8 Sep 4, 2026 → 2.4.2 Release notes ↗ 2security4feature
securityCVE-2026-53495
securityGHSA-rp3h-jf77-q9p4
2.2.7 Aug 12, 2026 → 2.4.2 Release notes ↗ 1security9feature2deprecated3fix
securityFixes CVE-2026-95837: containerd CRI plugin: Checkpoint restore bypasses destination security context

Security advisories

medium GHSA-8647-2jxj-p2rc containerd: daemon crash when pulling an image with a crafted Content-Length header
medium CVE-2026-95839 containerd: daemon crash when processing an image manifest with a malformed digest
medium GHSA-hc94-p972-ch66 containerd: host disk exhaustion when pulling an image with an unbounded layer stream
medium GHSA-5p7c-hggf-c748 containerd CRI plugin: mount and snapshot leak when container checkpoint restore fails
medium CVE-2026-53493 Image-pull DoS via crafted OCI index graph amplification
medium CVE-2026-95838 Unpack DoS via repeated opaque whiteouts
medium CVE-2026-53495 containerd CRI plugin: Unbounded I/O draining in ExecSync causes node-level denial of service
critical CVE-2026-95837 containerd CRI plugin: Checkpoint restore bypasses destination security context
medium CVE-2026-47262 containerd image-triggered runtime DoS via unbounded group parsing
5.6 CVE-2026-50195 CRI checkpoint import allows local image tag poisoning
high CVE-2026-53489 Arbitrary host file read via symlink following in CRI checkpoint restore
critical CVE-2026-53488 containerd CRI — image-config LABEL flows to host-root command execution from an image pull
critical CVE-2026-53492 CDI annotation smuggling during CRI checkpoint restore
7.3 CVE-2026-46680 containerd user ID handling bypass allows runAsNonRoot evasion
medium CVE-2025-64329 Host memory exhaustion through goroutine leaks of Attach functionality in CRI server
medium CVE-2024-25621 Local privilege escalation via wide permissions on several directories
medium CVE-2025-47291 containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.
critical CVE-2025-47290 Host filesystem access during image unpack
4.6 CVE-2024-40635 Integer overflow in User ID handling
medium GHSA-7ww5-4wqc-m92c RAPL accessible to a container

Sources

See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status