Home / mailings

PDF

[USN-7983-1] containerd vulnerabilities

Posted on 29 January 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-7983-1
January 29, 2026

containerd, containerd-app vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in containerd.

Software Description:
- containerd: open and reliable container runtime library
- containerd-app: open and reliable container runtime

Details:

David Leadbeater discovered that containerd incorrectly set certain
directory path permissions. An attacker could possibly use this issue to
achieve unauthorised access to the files. (CVE-2024-25621)

It was discovered that containerd did not properly handle the execution
of the goroutine of container attach. An attacker could possibly use this
issue to cause a denial of service. (CVE-2025-64329)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
containerd 2.1.3-0ubuntu3.1
golang-github-containerd-containerd-dev 1.7.24~ds1-8ubuntu1.1

Ubuntu 24.04 LTS
containerd 1.7.28-0ubuntu1~24.04.2
golang-github-containerd-containerd-dev 1.6.24~ds1-1ubuntu1.3+esm2
Available with Ubuntu Pro

Ubuntu 22.04 LTS
containerd 1.7.28-0ubuntu1~22.04.1+esm1
Available with Ubuntu Pro
golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~22.04.10

Ubuntu 20.04 LTS
containerd 1.7.24-0ubuntu1~20.04.2+esm1
Available with Ubuntu Pro
golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~20.04.8+esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
containerd 1.6.12-0ubuntu1~18.04.1+esm3
Available with Ubuntu Pro
golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~18.04.1+esm3
Available with Ubuntu Pro

Ubuntu 16.04 LTS
containerd 1.2.6-0ubuntu1~16.04.6+esm6
Available with Ubuntu Pro
golang-github-docker-containerd-dev 1.2.6-0ubuntu1~16.04.6+esm6
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7983-1
CVE-2024-25621, CVE-2025-64329

Package Information:
https://launchpad.net/ubuntu/+source/containerd/1.7.24~ds1-8ubuntu1.1
https://launchpad.net/ubuntu/+source/containerd-app/2.1.3-0ubuntu3.1

--===============8032276510873265177==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP