containerd v2.0.10

Welcome to the v2.0.10 release of containerd!

The tenth patch release for containerd 2.0 includes various bug fixes and updates including security patches.

Security Updates

• containerd
  • CVE-2026-53488
  • CVE-2026-47262

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Chris Henzie
• Akhil Mohan
• Akihiro Suda
• Ben Cressey
• Davanum Srinivas
• Paweł Gronowski
• Sebastiaan van Stijn

Changes

• Prepare release notes for v2.0.10 (#13630)
  • cbbd21672 Prepare release notes for v2.0.10
  • 200a4005f Merge commit from fork
  • da4098647 Merge commit from fork
  • 03a19324f Bound user-database file reads in openBoundedUserFile
  • 126177ea4 Merge commit from fork
  • bbf4a2b8e Do not propagate reserved labels from image configs
• update runc binary to v1.3.6 (#13619)
  • a15e98122 update runc binary to v1.3.6
  • ba2ed2a5e [release/2.2] update runc binary to v1.3.5
  • 474184497 runc: Update runc binary to v1.3.4
• update go to 1.26.4/1.25.11 (#13581)
  • becbb802e update go to 1.26.4/1.25.11
• Configure udevd children-max for root-test (#13565)
  • 55bdc8bc5 Configure udevd children-max for root-test
• Clean up disk space in node e2e workflow (#13553)
  • 6d81e8867 Clean up disk space in node e2e workflow

Dependency Changes

This release has no dependency changes

Previous release can be found at v2.0.9

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.