containerd v2.0.13

Welcome to the v2.0.13 release of containerd!

The thirteenth patch release for containerd 2.0 contains various fixes and updates including a security patch.

Security Updates

• containerd
  • CVE-2026-53493

Highlights

Image Storage

• Ensure all layers are fetched when multiple manifests in an index share a config descriptor (#14141)

Runtime

• Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linux containers by default (#14183)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Chris Henzie
• Maksym Pavlenko

Changes

8 commits

• 87c035016f Prepare release notes for v2.0.13
• 9bb64e7024 Merge commit from fork
• 2dbcee240e Bound Walk references
• a2e7a37e0c Bound Dispatch concurrency and references
• pkg/oci: mask thermal interrupt info (#14183)
  • 16ba4910fe pkg/oci: mask thermal interrupt info
• core/unpack: fetch layers of every config-sharing manifest (#14141)
  • 6850f41724 core/unpack: fetch layers of every config-sharing manifest

Dependency Changes

This release has no dependency changes

Previous release can be found at v2.0.12

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.

---

Source containerd/containerd · v2.0.13 · 2026-09-24 · upstream release

Mirrored verbatim for indexing. All rights belong to the upstream project.