containerd v2.2.9

Welcome to the v2.2.9 release of containerd!

The ninth patch release for containerd 2.2 contains various fixes and updates including a security patch.

Security Updates

• containerd
  • CVE-2026-53493

Highlights

Container Runtime Interface (CRI)

• Fix bug where container creation failed when SELinux relabeling was unsupported by the filesystem (#14210)
• Enable mount manager for image mounts in CRI (#14148)

Image Storage

• Ensure all layers are fetched when multiple manifests in an index share a config descriptor (#14140)

Runtime

• Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linux containers by default (#14182)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Chris Henzie
• Maksym Pavlenko
• Wei Fu
• Gao Xiang
• Nan Liu

Changes

13 commits

• 60acf78bc5 Prepare release notes for v2.2.9
• 253f9cc140 Merge commit from fork
• 053c0cc412 Bound Walk references
• efd11fc9c2 Bound Dispatch concurrency and references
• cri: tolerate wrapped ENOTSUP during relabel (#14210)
  • 39d0dd4b43 cri: tolerate wrapped ENOTSUP during relabel
• pkg/oci: mask thermal interrupt info (#14182)
  • baffef9669 pkg/oci: mask thermal interrupt info
• core/unpack: fetch layers of every config-sharing manifest (#14140)
  • 9e1ae6a9e9 core/unpack: fetch layers of every config-sharing manifest
• cri: Backport image mount fixes 2.2 (#14148)
  • 2cdf8d80cc cri: only unmount image volumes when mounting fails
  • 2e1dcc5da0 cri: enable mount manager for image mounts

Dependency Changes

This release has no dependency changes

Previous release can be found at v2.2.8

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.

---

Source containerd/containerd · v2.2.9 · 2026-09-24 · upstream release

Mirrored verbatim for indexing. All rights belong to the upstream project.