Skip to content

vendor: github.com/containerd/containerd/v2 v2.3.5 - #4060

Open
thaJeztah wants to merge 1 commit into
docker:masterfrom
thaJeztah:bump_containerd_2.3
Open

vendor: github.com/containerd/containerd/v2 v2.3.5#4060
thaJeztah wants to merge 1 commit into
docker:masterfrom
thaJeztah:bump_containerd_2.3

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

full diff: containerd/containerd@v2.3.4...v2.3.5

Security Updates

Image Distribution

  • Apply hardening to strip sensitive authentication headers when fetching descriptor URLs

Runtime

  • Avoid hangs and data races when streaming container standard I/O in CRI
  • Fix missing error messages in OpenTelemetry trace attributes
  • Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group
  • Fix configuration loading error when drop-in configuration files have a higher version than the root configuration
  • Avoid containerd startup hangs when loading shims
  • Add context to error when shim delete times out
  • Fix Windows Server 2022 container compatibility on host builds newer than the latest LTSC

Snapshotters

  • Fix unpack failure for EROFS images containing the erofs OS feature

full diff: containerd/containerd@v2.3.4...v2.3.5

Security Updates

- [**CVE-2026-53495**](GHSA-7jxh-36q5-gcqv)
- [**GHSA-rp3h-jf77-q9p4**](GHSA-rp3h-jf77-q9p4)

Image Distribution

- Apply hardening to strip sensitive authentication headers when fetching descriptor URLs

Runtime

- Avoid hangs and data races when streaming container standard I/O in CRI
- Fix missing error messages in OpenTelemetry trace attributes
- Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group
- Fix configuration loading error when drop-in configuration files have a higher version than the root configuration
- Avoid containerd startup hangs when loading shims
- Add context to error when shim delete times out
- Fix Windows Server 2022 container compatibility on host builds newer than the latest LTSC

Snapshotters

- Fix unpack failure for EROFS images containing the erofs OS feature

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant