containerd-app (2.2.2-0ubuntu1.1) resolute-security; urgency=high

  * SECURITY UPDATE: HTTP/2 SETTINGS frame infinite loop (vendored
    golang.org/x/net)
    - debian/patches/CVE-2026-33814.patch: move s.Valid() check before
      switch in ForeachSetting callback
    - CVE-2026-33814
  * SECURITY UPDATE: Uncontrolled Resource Consumption via unbounded
    group parsing
    - debian/patches/CVE-2026-47262.patch: bound user-database file
      reads in openUserFile, reject non-regular files
    - CVE-2026-47262
  * SECURITY UPDATE: Insufficient Verification of Data Authenticity in
    CRI checkpoint import
    - debian/patches/CVE-2026-50195.patch: remove re-tagging of restored
      checkpoint base images
    - CVE-2026-50195
  * SECURITY UPDATE: Reserved label propagation from image configs
    - debian/patches/CVE-2026-53488.patch: filter containerd.io/ and
      io.cri-containerd labels from image config
    - CVE-2026-53488
  * SECURITY UPDATE: UNIX Symbolic Link Following in CRI checkpoint
    restore
    - debian/patches/CVE-2026-53489.patch: add copyNoFollow,
      checkpointArchiveEntryAllowed, assertCheckpointDirSafe; use
      dedicated restore subdirectory
    - CVE-2026-53489
  * SECURITY UPDATE: Improper Input Validation of CDI annotations in
    checkpoint restore
    - debian/patches/CVE-2026-53492.patch: filter cdi.k8s.io
      annotations on checkpoint restore
    - CVE-2026-53492

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Mon, 22 Jun 2026 18:09:35 +0200

containerd-app (2.2.2-0ubuntu1) resolute; urgency=medium

  * d/copyright: add missing copyright entry
  * New upstream version 2.2.2 (LP: #2145667)

 -- Athos Ribeiro <athos@ubuntu.com>  Mon, 23 Mar 2026 13:55:12 -0300

containerd-app (2.2.1-0ubuntu1) resolute; urgency=medium

  * New upstream version 2.2.1
  * d/containerd.docs: update NOTICE files
  * d/copyright: update copyright data
  * d/s/lintian-overrides: ignore long lines

 -- Athos Ribeiro <athos@ubuntu.com>  Tue, 13 Jan 2026 10:58:22 -0300

containerd-app (2.1.3-0ubuntu3) questing; urgency=medium

  * d/control: adjust for new containerd-stable package in the archive
    - Conflics/Replaces containerd
    - Update package description

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Fri, 29 Aug 2025 15:01:05 -0300

containerd-app (2.1.3-0ubuntu2) questing; urgency=medium

  * d/t/basic-smoke: use systemctl to start the service (LP: #2118738)

 -- Andreas Hasenack <andreas@canonical.com>  Tue, 05 Aug 2025 10:16:03 -0300

containerd-app (2.1.3-0ubuntu1) questing; urgency=medium

  * New upstream version 2.1.3
  * d/containerd.docs: update NOTICE files
  * d/copyright: update copyright data

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Thu, 03 Jul 2025 11:25:51 -0300

containerd-app (2.0.5-0ubuntu1) questing; urgency=medium

  * d/t/basic-smoke: remove shell's -u option
  * New upstream version 2.0.5
  * d/p/CVE-2024-40635.patch: drop patch applied upstream
  * d/copyright: remove unused license text
  * d/control:
    - Replace pkg-config with pkgconf
    - Bump Standards-Version

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Tue, 06 May 2025 19:50:35 -0300

containerd-app (2.0.2-0ubuntu2) plucky; urgency=medium

  * SECURITY UPDATE: Integer overflow.
    - debian/patches/CVE-2024-40635.patch: Add maxUserID and maxGroupID with
      limitations in ./pkg/oci/spec_opts.go.
    - CVE-2024-40635

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 25 Mar 2025 14:31:52 -0230

containerd-app (2.0.2-0ubuntu1) plucky; urgency=medium

  * New upstream version 2.0.2 (LP: #2085187, #2076166)
  * d/control:
    - build with golang 1.24 (LP: #2098664)
    - add missing B-D on procps
  * d/rules: add golang 1.24 to PATH
  * d/copyright: update copyright data

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Mon, 17 Feb 2025 10:52:33 -0300

containerd-app (2.0.0-0ubuntu1) plucky; urgency=medium

  * New upstream version 2.0.0. (LP: #2089704)

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Tue, 26 Nov 2024 21:03:03 -0300

# For older changelog entries, run 'apt-get changelog containerd'
