Release notes for containerd - Container Service for Kubernetes

containerd is an industry-standard container runtime that manages the entire lifecycle of containers on a host. containerd provides a simple and stable runtime for your containers. This topic describes the release notes for containerd.

Background information

For more information about a comparison between containerd and other runtimes, see Comparison of Docker, containerd, and Sandboxed-Container.

November 2024

Version	Release date	Description	Impact
1.6.36	2024-11-08	Go is updated to version 1.22.7. runC is updated to version 1.1.14. The issue that containers occasionally fail to stop is fixed. For more information, see #10651.	No impact on workloads.

September 2024

Version	Release date	Description	Impact
1.6.34	2024-09-09	Go is updated to version 1.21.12. runC is updated to version 1.1.13. The `drain_exec_sync_io_timeout` parameter is added. For more information, see #9768.	No impact on workloads.

February 2024

Version	Release date	Description	Impact
1.6.28	2024-02-04	The CVE-2024-21626 vulnerability is patched. runC is updated to version 1.1.12 (GHSA-xr7r-f8xq-vfvv).	No impact on workloads.

January 2024

Version	Release date	Description	Impact
1.6.21	2024-01-31	runC is updated to version 1.1.7. The CVE-2024-21626 vulnerability is patched.	No impact on workloads.

May 2023

Version	Release date	Description	Impact
1.6.20	2023-05-17	containerd is updated to the latest minor version of the first long-term stable (LTS) version. For more information, see Release Notes. Go is updated to version 1.18.8. The following vulnerabilities are patched: CVE-2022-41717 CVE-2022-41720 CVE-2022-41716 CVE-2022-27191 Custom registries are supported. By default, you can specify registry hosts by creating a directory under cert.d. runC is updated to version 1.1.5.	No impact on workloads.

September 2022

Version	Release date	Description	Impact
1.5.13	2022-09-08	The following vulnerabilities are patched: CVE-2022-24769 CVE-2022-31030 The issue that file descriptors are leaked when you delete cgroups is fixed. The MaxConcurrentDownloads parameter must be effective when you unpack a container. A temp mount specified in a Dockerfile is set to ready-only in the container.	No impact on workloads.

March 2022

Version	Release date	Description	Impact
1.5.10	2022-03-22	The following CVE vulnerabilities are patched: CVE-2022-23648 CVE-2021-43816 CVE-2021-41190 runC is updated to version 1.0.3. The issue that a node enters the NotReady state when a process ID (PID) is leaked and the runC pipe is blocked is fixed.	No impact on workloads.

August 2021

Version	Release date	Description	Impact
1.4.8	2021-08-03	The following issue is fixed: Sandbox creation times out due to system overloading, which further causes an IP leak. The CVE-2021-32760 vulnerability is patched.	No impact on workloads.

June 2021

Version	Release date	Description	Impact
1.4.6	2021-06-03	The CVE-2021-30465 vulnerability is patched.	No impact on workloads.

March 2021

Version	Release date	Description	Impact
1.4.4	2021-03-16	containerd can be selected as the container runtime when you create a cluster. Note The containerd runtime is in public preview.	No impact on workloads.