Skip to content
containerd 1.6.28

Welcome to the v1.6.28 release of containerd!

The twenty-eighth patch release for containerd 1.6 updates the runc binary
in the release builds to address CVE-2024-21626

### Notable Updates

* **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv))
* **Update seccomp profile for new syscalls added since Linux 5.16** ([#9694](https://github.com/containerd/containerd/pull/9694))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Andrey Epifanov
* Derek McGowan
* Akihiro Suda
* Maksym Pavlenko
* Phil Estes
* Shengjing Zhu
* Wei Fu

### Changes
<details><summary>13 commits</summary>
<p>

*  Prepare v1.6.28 and update runc to v1.1.12 ([#9723](https://github.com/containerd/containerd/pull/9723))
  * [`570c7c637`](https://github.com/containerd/containerd/commit/570c7c637745c9a5d41309c51193107a25768200) Prepare release notes for v1.6.28
  * [`b20b9f86b`](https://github.com/containerd/containerd/commit/b20b9f86b583b11a7fac34e6c682bc7633c74237) Update runc binary to v1.1.12
* [release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. ([#9707](https://github.com/containerd/containerd/pull/9707))
  * [`19500722a`](https://github.com/containerd/containerd/commit/19500722aec045da29536401fa4c76dfc5ef0cbe) [release/1.6] vendor: golang.org/x/crypto v0.18.0
  * [`919928f6b`](https://github.com/containerd/containerd/commit/919928f6b006e563d1a1c57af36e29b570dd726a) [release/1.6] vendor: golang.org/x/term v0.16.0
  * [`7d6a4d23b`](https://github.com/containerd/containerd/commit/7d6a4d23b182e419c0cfa732c369d7f4c90c7a02) [release/1.6] vendor: golang.org/x/sys v0.16.0
  * [`16ac018ae`](https://github.com/containerd/containerd/commit/16ac018ae3efaa0389678a47d0135c739a93cbae) [release/1.6] vendor: upgrade OpenTelemetry to v1.21.0 / v0.46.0
* [release/1.6] seccomp: kernel 6.7 ([#9694](https://github.com/containerd/containerd/pull/9694))
  * [`f44628305`](https://github.com/containerd/containerd/commit/f44628305d7cdccfd1f7b8996b39846db5c4f035) seccomp: kernel 6.7
* [release/1.6] carry #9557 - enable ARM CI ([#9636](https://github.com/containerd/containerd/pull/9636))
  * [`65e1656f2`](https://github.com/containerd/containerd/commit/65e1656f2755727770f2adc90df8b972e7a513f2) cri: fix integration test on cgroupsv2 system
  * [`9cf1e1a39`](https://github.com/containerd/containerd/commit/9cf1e1a39ca17328c973a7d2ed2969e4f98993cc) *: enable ARM64 runner
</p>
</details>

### Dependency Changes

* **github.com/go-logr/logr**                                                      v1.2.2 -> v1.3.0
* **github.com/google/go-cmp**                                                     v0.5.9 -> v0.6.0
* **github.com/google/uuid**                                                       v1.3.0 -> v1.3.1
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.46.0
* **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.21.0
* **go.opentelemetry.io/otel/metric**                                              v1.21.0 **_new_**
* **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.21.0
* **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.21.0
* **golang.org/x/crypto**                                                          v0.14.0 -> v0.18.0
* **golang.org/x/net**                                                             v0.17.0 -> v0.18.0
* **golang.org/x/oauth2**                                                          v0.10.0 -> v0.11.0
* **golang.org/x/sys**                                                             v0.13.0 -> v0.16.0
* **golang.org/x/term**                                                            v0.13.0 -> v0.16.0
* **golang.org/x/text**                                                            v0.13.0 -> v0.14.0
* **google.golang.org/grpc**                                                       v1.58.3 -> v1.59.0

Previous release can be found at [v1.6.27](https://github.com/containerd/containerd/releases/tag/v1.6.27)