David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly use this issue to achieve unauthorised access to the files. (CVE-2024-25621)
It was discovered that containerd did not properly handle the execution of the goroutine of container attach. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-64329)
1.6.12-0ubuntu1~22.04.101.7.28-0ubuntu1~24.04.21.7.24~ds1-8ubuntu1.12.1.3-0ubuntu3.11.2.6-0ubuntu1~16.04.6+esm61.6.12-0ubuntu1~18.04.1+esm31.6.12-0ubuntu1~20.04.8+esm11.7.24-0ubuntu1~20.04.2+esm11.7.28-0ubuntu1~22.04.1+esm11.6.24~ds1-1ubuntu1.3+esm2