containerd: security advisories, deprecations and releases

containerd 2.0.14 patch release with security fixes

Fourteenth patch release for containerd 2.0. Adds symlink hardening for container logs, seccomp socket domain allow-list, and ID-mapping label filtering during unpack. Fixes GHSA-hc94-p972-ch66.

containerd 2.4.2 released with security patches

Patch release fixes three security issues including symlink following in logs, image reference validation, and seccomp profile hardening.

CVE-2026-95839

Also covered by containerd releases , containerd releases

Docker v29.8.2 fixes multiple security vulnerabilities

Docker Engine 29.8.2 patches several critical CVEs including unbounded CPU/memory use from malicious OCI images, DNS hijacking, overlay network attacks, and numerous BuildKit daemon crashes and cache poisoning issues.

CVE-2026-53493 CVE-2026-92542 CVE-2026-92543 CVE-2026-93315 CVE-2026-93316 CVE-2026-93317 CVE-2026-93318 CVE-2026-93319 CVE-2026-93320 CVE-2026-93321 CVE-2026-93322 CVE-2026-93323 CVE-2026-93326

containerd 2.0.13 security patch release

Patch release fixes CVE-2026-53493 and adds runtime hardening by masking /proc/interrupts and CPU thermal sysfs paths.

CVE-2026-53493

containerd 2.2 reaches end of life on 2026-11-06

containerd 2.2 reaches end of life on 2026-11-06, as listed by endoflife.date.

containerd 1.7 has reached end of life

containerd 1.7 reached end of life on 2026-09-30, as listed by endoflife.date.

containerd 2.0 reaches end of life on 2027-03-01

containerd 2.0 reaches end of life on 2027-03-01, as listed by endoflife.date.

containerd 2.2 reaches end of life on 2026-11-06

containerd 2.2 reaches end of life on 2026-11-06, as listed by endoflife.date.

Docker v29.9.1 released

Docker 29.9.1 updates containerd to v2.4.2, fixes several bugs, and resolves networking, rootless, and image-layer issues.

CVE-2026-95839

containerd 1.7.36

Patch release fixes a security issue, ensures all layers are fetched for shared config manifests, and masks thermal interrupt sysfs paths in containers.

CVE-2026-53493

containerd 2.2.9 released with security fix

Patch release fixes CVE-2026-53493 and adds SELinux, image mount, and proc masking fixes for CRI and runtime.

CVE-2026-53493

containerd 2.3.6 released with security fix

containerd 2.3.6 fixes CVE-2026-53493, CRI SELinux relabeling bug, image mount handling, and masks /proc/interrupts and thermal paths.

CVE-2026-53493

containerd 2.4.1 released with security fix

First patch release for containerd 2.4 fixes security issue CVE-2026-53493 plus bugs in CRI, image distribution, snapshotters, and ctr tool.

CVE-2026-53493