Skip to content

vendor: github.com/containerd/containerd/v2 v2.3.5 - #4060

Merged
crazy-max merged 1 commit into
docker:masterfrom
thaJeztah:bump_containerd_2.3
Sep 11, 2026
Merged

crazy-max merged 1 commit into
docker:masterfrom
thaJeztah:bump_containerd_2.3

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

full diff: containerd/containerd@v2.3.4...v2.3.5

Security Updates

Image Distribution

  • Apply hardening to strip sensitive authentication headers when fetching descriptor URLs

Runtime

  • Avoid hangs and data races when streaming container standard I/O in CRI
  • Fix missing error messages in OpenTelemetry trace attributes
  • Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group
  • Fix configuration loading error when drop-in configuration files have a higher version than the root configuration
  • Avoid containerd startup hangs when loading shims
  • Add context to error when shim delete times out
  • Fix Windows Server 2022 container compatibility on host builds newer than the latest LTSC

Snapshotters

  • Fix unpack failure for EROFS images containing the erofs OS feature

full diff: containerd/containerd@v2.3.4...v2.3.5

Security Updates

- [**CVE-2026-53495**](GHSA-7jxh-36q5-gcqv)
- [**GHSA-rp3h-jf77-q9p4**](GHSA-rp3h-jf77-q9p4)

Image Distribution

- Apply hardening to strip sensitive authentication headers when fetching descriptor URLs

Runtime

- Avoid hangs and data races when streaming container standard I/O in CRI
- Fix missing error messages in OpenTelemetry trace attributes
- Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group
- Fix configuration loading error when drop-in configuration files have a higher version than the root configuration
- Avoid containerd startup hangs when loading shims
- Add context to error when shim delete times out
- Fix Windows Server 2022 container compatibility on host builds newer than the latest LTSC

Snapshotters

- Fix unpack failure for EROFS images containing the erofs OS feature

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@thaJeztah

Copy link
Copy Markdown
Member Author

@crazy-max ptal

@crazy-max
crazy-max merged commit bf5ccd4 into docker:master Sep 11, 2026
229 of 230 checks passed
@thaJeztah
thaJeztah deleted the bump_containerd_2.3 branch September 11, 2026 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants