Summary
David Leadbeater discovered that containerd incorrectly set certain
directory path permissions. An attacker could possibly use this issue to
achieve unauthorised access to the files. (CVE-2024-25621)
It was discovered that containerd did not properly handle the execution
of the goroutine of container attach. An attacker could possibly use this
issue to cause a denial of service. (CVE-2025-64329)
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | containerd | 1.6.12-0ubuntu1~22.04.10 |
| Ubuntu · 24.04 LTS 24.04:LTS | containerd-app | 1.7.28-0ubuntu1~24.04.2 |
| Ubuntu · 25.10 | containerd | 1.7.24~ds1-8ubuntu1.1 |
| Ubuntu · 25.10 | containerd-app | 2.1.3-0ubuntu3.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | containerd | 1.2.6-0ubuntu1~16.04.6+esm6 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | containerd | 1.6.12-0ubuntu1~18.04.1+esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | containerd | 1.6.12-0ubuntu1~20.04.8+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | containerd-app | 1.7.24-0ubuntu1~20.04.2+esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | containerd-app | 1.7.28-0ubuntu1~22.04.1+esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | containerd | 1.6.24~ds1-1ubuntu1.3+esm2 |