-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 16 Nov 2025 16:57:18 -0500 Source: containerd Architecture: source Version: 1.6.20~ds1-1+deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1120343 Changes: containerd (1.6.20~ds1-1+deb12u2) bookworm-security; urgency=medium . * Fix overly broad directory permissions, Fixes: CVE-2024-25621 * Fix bug in the CRI Attach implementation, Fixes: CVE-2025-64329 Closes: #1120343 Checksums-Sha1: ecea856a28783c612885f1c994405ddedef9308c 4827 containerd_1.6.20~ds1-1+deb12u2.dsc 6b6bd9969d80877f1912e58599cf7012957ccdab 2100072 containerd_1.6.20~ds1.orig.tar.xz 33578d718445be8ad8f26db3678b5bd593942cfd 23692 containerd_1.6.20~ds1-1+deb12u2.debian.tar.xz 0edaf4fbb607596735928741d6c39aabf75fcf95 10147 containerd_1.6.20~ds1-1+deb12u2_source.buildinfo Checksums-Sha256: aef4c9d428cb7d35fd1d4feca3d24591ae8f2d8cd7887126ba0e1b0631f9ef9e 4827 containerd_1.6.20~ds1-1+deb12u2.dsc 270136d05125f15636f036d4ea846581c0e49a1d3a5e6001115098f4b656d688 2100072 containerd_1.6.20~ds1.orig.tar.xz b58dc21a8a16d1da0482a9125b07e72d2d20cbb9472d184e86e0608c8baee57c 23692 containerd_1.6.20~ds1-1+deb12u2.debian.tar.xz c5c75db941a77f4245414880a96cd393f110a15f00a60b14c8993049ba9a8f8f 10147 containerd_1.6.20~ds1-1+deb12u2_source.buildinfo Files: 9007c78bfa1868f2e439c0038f10a880 4827 admin optional containerd_1.6.20~ds1-1+deb12u2.dsc 09a7fa3682e8330383c1b56c31ef4b48 2100072 admin optional containerd_1.6.20~ds1.orig.tar.xz 2aea43d4989ad9a716fa95c961949f47 23692 admin optional containerd_1.6.20~ds1-1+deb12u2.debian.tar.xz 2f5b6b3afcdccb670e2abb5cb651940c 10147 admin optional containerd_1.6.20~ds1-1+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmkdxrgUHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJsuZ2g/+OgoqGb7xqHV8GhvKTLAjDels3w6l qW01KA10ci+LA4AQnCNSAZzhvEraMjHQ22ELl45fkqyAAT/+RlEo5brFuVw7U3Kv oqrD5/ISfmZ1amTH7f56PjX2mU0kO1MEOYNRKU5OPsbMi/sahUcOitzWIPYxOC3A 52SghWKn6IgLUw8aDasJ42ng96wDTcUluBOcbb94HYN0sJl5GHbF+gom+t3ZVNWE aFOGhdViBw4nBqkZYsLDOyFST4DZodYQSqe3EEhHCufWuoVJkbeVo5BXyku0CJmS ONNaAvdEryhemJ1LTP1mZHaLynedwYcHTW5uP6/eyjiJ50bYQcq6lmJSsxhoe8d7 KKYasSBUlOH54QOcNnAVHooBhxUuDDjFCqrXJCUaVnVpgz7u4Cz+tfk8ZY2X8k/a 4vXj0IK8RHBwHOuvZ1YbqEoBPAuQ/GJ06dfHSduQPNEX4uNoLb7espYbk1znxqMC 9pdXd39/hgamBY2fbfgP1jprIPySZeE1WoFE1IS/sMZRkyrF9HJLh2YF9dn+4gzj gPPFT400vqHFiVfX2OzGPKl7a0yxJCbODsiO+CNYbDJnxc0Cy04IqaNuf9nrVRL7 qlayCo7UR+fiEIxQdok77gW0csjCw1SYRJpgeFIUiq0pZtJcWTT5ZR0Sw8iUT0Vb T/ERSC5zhZq36nY= =WNNZ -----END PGP SIGNATURE-----