From b942abf04b2dbde12e8901b7ed11f6c6d51f97a2 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Sat, 5 Sep 2026 02:25:02 +0200 Subject: [PATCH] fix(deps): github.com/containerd/containerd/v2 v2.3.5 full diff: https://github.com/containerd/containerd/compare/v2.3.4...v2.3.5 Security Updates - [**CVE-2026-53495**](https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv) - [**GHSA-rp3h-jf77-q9p4**](https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4) Image Distribution - Apply hardening to strip sensitive authentication headers when fetching descriptor URLs Runtime - Avoid hangs and data races when streaming container standard I/O in CRI - Fix missing error messages in OpenTelemetry trace attributes - Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group - Fix configuration loading error when drop-in configuration files have a higher version than the root configuration - Avoid containerd startup hangs when loading shims - Add context to error when shim delete times out - Fix Windows Server 2022 container compatibility on host builds newer than the latest LTSC Snapshotters - Fix unpack failure for EROFS images containing the erofs OS feature Signed-off-by: Sebastiaan van Stijn --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index c061e04d5c..231506eebe 100644 --- a/go.mod +++ b/go.mod @@ -10,7 +10,7 @@ require ( github.com/buger/goterm v1.0.4 github.com/compose-spec/compose-go/v2 v2.15.0 github.com/containerd/console v1.0.5 - github.com/containerd/containerd/v2 v2.3.4 + github.com/containerd/containerd/v2 v2.3.5 github.com/containerd/errdefs v1.0.0 github.com/containerd/platforms v1.0.0-rc.5 github.com/creack/pty v1.1.24 diff --git a/go.sum b/go.sum index 92032c1367..7ab5bb1906 100644 --- a/go.sum +++ b/go.sum @@ -40,8 +40,8 @@ github.com/containerd/console v1.0.5 h1:R0ymNeydRqH2DmakFNdmjR2k0t7UPuiOV/N/27/q github.com/containerd/console v1.0.5/go.mod h1:YynlIjWYF8myEu6sdkwKIvGQq+cOckRm6So2avqoYAk= github.com/containerd/containerd/api v1.11.1 h1:h8nfoDW9+fNsC/9TwiAHj8B1GzXKtR4eFtkhi/X5RLU= github.com/containerd/containerd/api v1.11.1/go.mod h1:CaQFRu+N1MtbgL6JDOJLUB1hCKESU1lD6MuTJhgtdlw= -github.com/containerd/containerd/v2 v2.3.4 h1:c2PJo/9UGVdiiw8SwrxuLxWGY+9b3jQ6Xp9zntneIvI= -github.com/containerd/containerd/v2 v2.3.4/go.mod h1:a30D8fWZJ1Uzx/2WpjLbLsxBkq9He41pe8ENW+QZ3LY= +github.com/containerd/containerd/v2 v2.3.5 h1:9MYlI81gUcOZ0WsCkSMtvOU7rTR3hqAoa2eCzhoLlkA= +github.com/containerd/containerd/v2 v2.3.5/go.mod h1:RXDyLPaI3zoO7dFdAW9/54W4cix+z3A6larieufC9mg= github.com/containerd/continuity v0.5.0 h1:7a85HZpCSs+1Zps0Ee3DPSuAWY+0SJM1JNM51nlEVDg= github.com/containerd/continuity v0.5.0/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE= github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=