containerd (2.1.9+ds1-1ubuntu2) stonking; urgency=medium

  * Cherry-pick upstream PR: 13240 to fix tests with cgroup v2

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 14 Jul 2026 09:38:22 +0200

containerd (2.1.9+ds1-1ubuntu1) stonking; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Mon, 22 Jun 2026 17:18:07 +0200

containerd (2.1.9+ds1-1) unstable; urgency=medium

  * New upstream release
  * Address CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-
    53489, and CVE-2026-47262. (Closes: #1140385)
  * Fix lintian copyright warnings (DEP-5 formatting).
  * Override containerd-shim-runc-v2 no-manual-page warning.
  * Add procps to integration and cri-integration test dependencies.
    (Closes: #1136486)
  * Bump Standards version

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 19 Jun 2026 13:29:03 -0400

containerd (2.1.6+ds1-1ubuntu1) stonking; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Mon, 04 May 2026 17:01:14 +0200

containerd (2.1.6+ds1-1) unstable; urgency=medium

  * New upstream release 2.1.6 & 2.1.5:
    - Fix local privilege escalation via overly broad default permissions
      (CVE-2024-25621 / GHSA-pwhc-rpq9-4c8w)
    - Fix denial of service and memory exhaustion in CRI Attach
      (CVE-2025-64329 / GHSA-m6hq-p25p-ffr2)
  * debian/watch: Use template version 5, change repacksuffix to +ds1

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 02 Apr 2026 05:47:46 -0400

containerd (2.1.4~ds2-8) unstable; urgency=medium

  * Move containerd-shim-runc-v2 back to /bin, Closes: #1131547
  * Update Breaks to force testing against docker 28.5

 -- Reinhard Tartler <siretart@tauware.de>  Mon, 23 Mar 2026 05:52:55 -0400

containerd (2.1.4~ds2-7) unstable; urgency=medium

  * Don't run integration tests during package build

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 20 Mar 2026 15:28:30 -0400

containerd (2.1.4~ds2-6) experimental; urgency=medium

  * tests/integration: install containerd-shim-runc-v2 and similar
  * fix format string issue
  * tests: build test executables in regular build
  * ignore more integration tests
  * tests/cri-integration: Use binaries from the package build
  * Use cni path '/usr/lib/cni'

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 20 Mar 2026 06:17:12 -0400

containerd (2.1.4~ds2-5) experimental; urgency=medium

  * Fix autopkgtest by not excluding tracing/plugin
  * Tighten dependency on golang-github-containerd-containerd-api-dev
  * Fix build-only test

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 11 Jan 2026 17:51:00 -0500

containerd (2.1.4~ds2-4) experimental; urgency=medium

  * include the cmd/ packages for docker.io 28.x

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 10 Jan 2026 06:32:41 -0500

containerd (2.1.4~ds2-3) experimental; urgency=medium

  * Bump again, no changes to previous upload

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 03 Jan 2026 08:28:09 -0500

containerd (2.1.4~ds2-2) experimental; urgency=medium

  * Bump version number, no changes

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 03 Jan 2026 08:27:57 -0500

containerd (2.1.4~ds2-1) experimental; urgency=medium

  * Package containerd 2.1.4
  * Refresh patches, tighten dependencies
  * debian/copyright: Additional clarifications
  * Bump Standards Version, no changes needed
  * debian/control: add misc:Depends to transitional meta-package
  * debian/rules: fix dh-golang-autopkgtest, cleanup excludes to avoid
    dependencies
  * add debian/vendor/update.sh, vendor imgcrypt/v2
  * Drop all other vendored sources from orig tarball
  * Add missing build-depends

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 01 Jan 2026 10:39:56 -0500

containerd (1.7.27~ds1-1) experimental; urgency=medium

  * New upstream version

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 19 Jun 2025 13:28:59 -0400

containerd (1.7.24~ds1-10ubuntu1) resolute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sun, 09 Nov 2025 07:54:45 +0100

containerd (1.7.24~ds1-10) unstable; urgency=medium

  * fix goroutine leak of container Attach, Closes: #1120343,
    Fixes: CVE-2025-64329

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 07 Nov 2025 20:08:08 -0500

containerd (1.7.24~ds1-9) unstable; urgency=medium

  * golang-github-containerd-containerd-api-dev: Add missing Breaks
  * Backport patch for CVE-2024-25621, Closes: #1120285
  * Bump Standards Version, no changes needed
  * debian/control: Drop redundant Rules-Requires-Root
  * Switch to using Static-Build-Using
  * golang-github-containerd-containerd-api-dev: add ${misc:Depends}

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 06 Nov 2025 20:27:20 -0500

containerd (1.7.24~ds1-8ubuntu1) questing; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Mon, 18 Aug 2025 10:28:47 +0200

containerd (1.7.24~ds1-8) unstable; urgency=medium

  * Unbreak builds without arch-indep packages
  * autopkgtests: require qemu, add procps
  * oci/utils_unix_test.go: Cover for incus/lxd test failures
  * autopkgtest: redirect stderr to stdout
  * Silence lintian error about overly long Built-Using

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 15 Aug 2025 09:34:36 -0400

containerd (1.7.24~ds1-7) experimental; urgency=medium

  * Build the grpc api into its own package. This is in preparation for
    packaging containerd2, which replaces theses, but still requires

 -- Reinhard Tartler <siretart@tauware.de>  Wed, 13 Aug 2025 16:57:01 -0400

containerd (1.7.24~ds1-6ubuntu1) questing; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 06 May 2025 10:52:41 +0200

containerd (1.7.24~ds1-6) unstable; urgency=medium

  * Team upload.
  * CVE-2024-40635: large UID:GID (>32bit) can overflow, runs as root
    (Closes: #1100806)

 -- Andreas Henriksson <andreas@fatal.se>  Tue, 29 Apr 2025 20:55:02 +0200

containerd (1.7.24~ds1-5ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 09 Apr 2025 07:53:59 +0200

containerd (1.7.24~ds1-5) unstable; urgency=medium

  * Add stubs for new cri-api RuntimeConfig (Closes: #1102287)

 -- Tianon Gravi <tianon@debian.org>  Tue, 08 Apr 2025 14:31:41 -0700

containerd (1.7.24~ds1-4ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sun, 22 Dec 2024 18:50:24 +0100

containerd (1.7.24~ds1-4) unstable; urgency=medium

  * Revert "Integration tests not stable enough for armel, s390",
    but mark that autopkgtest as flaky for further observation

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 21 Dec 2024 11:53:55 -0500

containerd (1.7.24~ds1-3) unstable; urgency=medium

  * Also include pkg/nri, and add missing dependencies

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 20 Dec 2024 17:17:13 -0500

containerd (1.7.24~ds1-2) unstable; urgency=medium

  * install pkg/cri, req. for nerdctl
  * autopkgtest: disable Integration tests for armel, s390, not stable enough

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 20 Dec 2024 06:08:19 -0500

containerd (1.7.24~ds1-1ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Thu, 19 Dec 2024 16:12:03 +0100

containerd (1.7.24~ds1-1) unstable; urgency=medium

  [ Reinhard Tartler ]
  * New upstream release: 1.7.24
  * Install NOTICE file for license compliance
  * normalize patches with gbp-pq
  * Add some commentary to the integration tests
  * debian/watch: reset repacksuffix to ds1
  * debian/gbp.conf: add upstream-vcs-branch
  * drop patches applied upstream
  * Fixup patch to adjust paths where Debian installs CNI binaries
  * remove 'flaky' marker from autopkgtests

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 13 Dec 2024 11:36:25 -0500

containerd (1.7.23~ds2-1ubuntu1) plucky; urgency=medium

  * Merged from Debian unstable (LP: #2089893). Remaining changes:
    - d/golang-github-containerd-containerd-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Anshul Singh <anshul.singh@canonical.com>  Thu, 05 Dec 2024 11:44:01 +0530

containerd (1.7.23~ds2-1) unstable; urgency=medium

  * Vendor in containerd/imgcrypt to avoid circular dependency

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 02 Nov 2024 06:11:58 -0400

containerd (1.7.23~ds1-3) unstable; urgency=medium

  * Revert tightening on golang-github-prometheus-client-golang-dev

 -- Reinhard Tartler <siretart@tauware.de>  Fri, 01 Nov 2024 06:55:21 -0400

containerd (1.7.23~ds1-2ubuntu1) plucky; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/golang-github-containerd-containerd-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sun, 03 Nov 2024 23:24:22 +0100

containerd (1.7.23~ds1-2) unstable; urgency=medium

  * Tighten dependency on prometheus (>= 2.45.6+ds-6)
  * Upload to unstable

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 31 Oct 2024 06:33:17 -0400

containerd (1.7.23~ds1-1) experimental; urgency=medium

  * New upstream version: 1.7.23
  * Bump dependency on containerd/errdefs (>= 0.3.0)
  * Build against opentelemetry libraries in experimental
  * containerd.service: add systemd dependency on dbus, Closes: #1083290

 -- Reinhard Tartler <siretart@tauware.de>  Mon, 28 Oct 2024 19:01:13 -0400

containerd (1.7.22~ds1-1) unstable; urgency=medium

  * New upstream version: 1.7.22

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 28 Sep 2024 11:39:55 -0400

containerd (1.7.21~ds2-1) experimental; urgency=medium

  * New upstrem version: 1.7.21
  * refresh patches
  * Tighten dependency on golang-github-moby-sys
  * Drop unneeded grpc patch

 -- Reinhard Tartler <siretart@tauware.de>  Wed, 04 Sep 2024 09:53:53 -0400

containerd (1.7.20~ds2-2) unstable; urgency=medium

  * Upload to unstable.

 -- Reinhard Tartler <siretart@tauware.de>  Mon, 02 Sep 2024 07:37:02 -0400

containerd (1.7.20~ds2-1) experimental; urgency=medium

  [ Shengjing Zhu ]
  * New upstream version: 1.7.20
  * Update Files-Excluded/Included in copyright
  * Update Build-Depends

  [ Reinhard Tartler ]
  * Repack upstream tarball
  * Unvendor all k8s libraries. This avoids a conflict with types from the
    golang-github-kubernetes-cri-api-dev package.

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 01 Sep 2024 09:15:29 -0400

containerd (1.7.18~ds2-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/golang-github-containerd-containerd-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.
    - d/tests/control: remove integration and cri-integration autopkgtest
      Since they depend on the containerd binary package which is not provided by
      this source package by default.
  * Dropped changes (replaced by non default Build-Profiles):
    - d/control: remove the binary paragraph for containerd.
    - d/containerd.*: remove all packaging related files associated to the
      containerd binary package.
    - d/rules: remove execute_after_dh_auto_build target, it is changing
      content in the containerd binary package. Also avoid installing binaries
      in the library package.
    - d/golang-github-containerd-containerd-dev.install: remove this file, it
      is causing a FTBFS, no need to have it in place, the library files are
      already installed correctly without it.
  * New changes:
    - d/control: add non default pkg.containerd.with-bin Build-Profiles
      to disable building containerd binary package by default.
      And change Architecture to amd64 to avoid Launchpad reporting build
      failures on other architecture.

 -- Shengjing Zhu <shengjing.zhu@canonical.com>  Fri, 09 Aug 2024 07:31:26 +0000

containerd (1.7.18~ds2-1) unstable; urgency=medium

  * Repack the source with only circular dependency and k8s library in vendor
  * Add patch to fix build with Go1.23

 -- Shengjing Zhu <zhsj@debian.org>  Thu, 08 Aug 2024 18:27:06 +0800

containerd (1.7.18~ds1-6) unstable; urgency=medium

  * debian/tests/build-only: Clarify and build in separate directory
  * containerd/zfs: Adjust import path for debian
  * add missing dependencies to the -dev package
  * Ensure most pkg/cri don't end up in the binary package
  * Add Breaks:
    - golang-github-containerd-imgcrypt-dev (<< 1.1.11-4)
    - golang-github-docker-docker-dev (<< 26.1)

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 04 Aug 2024 11:09:55 -0400

containerd (1.7.18~ds1-5) unstable; urgency=medium

  * install aufs, zfs as if it came from this package to work around cyclic dependencies
    (Closes: #1077319)
  * remove the 'build-only' autopkgtest

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 03 Aug 2024 10:22:27 -0400

containerd (1.7.18~ds1-4) unstable; urgency=medium

  * Team upload
  * Upload changes from experimental to unstable

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 26 Jul 2024 02:50:31 +0000

containerd (1.7.18~ds1-3) experimental; urgency=medium

  * Depend on golang-opentelemetry-contrib-dev to fix FTBFS in dependent
    packages

 -- Reinhard Tartler <siretart@tauware.de>  Tue, 09 Jul 2024 19:19:57 -0400

containerd (1.7.18~ds1-2) experimental; urgency=medium

  * Add forgotten bug closure in previous upload
  * 0011-allow-test-run-in-userns.patch: expand to another unit test

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 30 Jun 2024 20:00:55 -0400

containerd (1.7.18~ds1-1) experimental; urgency=medium

  * New upstream release, Closes: #1073550
    - Update / tighten dependencies, drop previously vendored libraries:
      - containerd/errdefs
      - containerd/imgcrypt
      - containerd/log
      - containerd/nri
      - k8s.io/cri-api
  * Avoid building contrib/fuzzer
  * Allow building against go-runc 1.1.0

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 30 Jun 2024 15:25:00 -0400

containerd (1.6.24~ds1-3) experimental; urgency=medium

  * Build against ttrpc in experimental

 -- Reinhard Tartler <siretart@tauware.de>  Tue, 11 Jun 2024 08:25:41 -0400

containerd (1.6.24~ds1-2) unstable; urgency=medium

  * Refresh patches
  * Fix FTBFS when running test if running with unshare, Closes: #1070411
  * Remove leftover manpages in clean, Closes: #1044768
  * Rebuild to move systemd units into /usr, Closes: #1072079
  * Add myself as uploader.

 -- Reinhard Tartler <siretart@tauware.de>  Tue, 11 Jun 2024 06:08:53 -0400

containerd (1.6.24~ds1-1ubuntu1) noble; urgency=medium

  * Merge with Debian unstable (LP: #2040374). Remaining changes:
    - d/control: remove the binary paragraph for containerd.
    - d/containerd.*: remove all packaging related files associated to the
      containerd binary package.
    - d/tests/{cri-integration,integration}: remove since they depend on the
      containerd binary package which is not provided by this source package
      anymore.
    - d/rules: remove execute_after_dh_auto_build target, it is changing
      content in the containerd binary package. Also avoid installing binaries
      in the library package.
    - d/golang-github-containerd-containerd-dev.install: remove this file, it
      is causing a FTBFS, no need to have it in place, the library files are
      already installed correctly without it.
    - d/golang-github-containerd-containerd-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.
  * Dropped:
    - d/p/0009-Skip-test-trying-to-set-OOM-score.patch: fix FTBFS.
      [Not needed anymore]

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Fri, 12 Jan 2024 19:00:15 -0300

containerd (1.6.24~ds1-1) unstable; urgency=medium

  * New upstream version 1.6.24~ds1

 -- Shengjing Zhu <zhsj@debian.org>  Mon, 06 Nov 2023 18:25:11 +0800

containerd (1.6.20~ds1-2) unstable; urgency=medium

  * Backport patch for Go1.21
  * Skip test adjusting oom score when initial is negative
  * Add pkg.containerd.onlydev build profile.
    To reduce delta with Ubuntu

 -- Shengjing Zhu <zhsj@debian.org>  Wed, 23 Aug 2023 13:48:17 +0800

containerd (1.6.20~ds1-1ubuntu2) mantic; urgency=medium

  * d/p/0009-Skip-test-trying-to-set-OOM-score.patch: fix FTBFS.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 21 Jun 2023 23:07:52 -0300

containerd (1.6.20~ds1-1ubuntu1) mantic; urgency=medium

  * Merge from Debian unstable (LP: #2022390). Make src:containerd
    follow Debian and src:containerd-app is going to ship the application with
    vendorized dependencies so we can keep updating just the application across
    all supported releases.
  * Added changes:
    - d/control: remove the binary paragraph for containerd.
    - d/containerd.*: remove all packaging related files associated to the
      containerd binary package.
    - d/tests/{cri-integration,integration}: remove since they depend on the
      containerd binary package which is not provided by this source package
      anymore.
    - d/rules: remove execute_after_dh_auto_build target, it is changing
      content in the containerd binary package. Also avoid installing binaries
      in the library package.
    - d/golang-github-containerd-containerd-dev.install: remove this file, it
      is causing a FTBFS, no need to have it in place, the library files are
      already installed correctly without it.
    - d/golang-github-containerd-containerd-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 21 Jun 2023 11:53:33 -0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog golang-github-containerd-containerd-api-dev`.
