-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 17 Nov 2025 12:27:07 -0500 Source: containerd Architecture: source Version: 1.7.24~ds1-6+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1120343 Changes: containerd (1.7.24~ds1-6+deb13u1) trixie-security; urgency=medium . * Fix overly broad directory permissions, Fixes: CVE-2024-25621 * Fix bug in the CRI Attach implementation, Fixes: CVE-2025-64329 Closes: #1120343 Checksums-Sha1: e868b9d66c17713680b5130c1c305f29610020ed 5072 containerd_1.7.24~ds1-6+deb13u1.dsc ed7bf084bf9b2a5218f7efb24ba521c8ce62f65e 1799264 containerd_1.7.24~ds1.orig.tar.xz 4246a80832268663a6de7e164be864200b08fa4d 36856 containerd_1.7.24~ds1-6+deb13u1.debian.tar.xz ad692a58efc350b67e78ed3ee84eb0a5651e3617 10147 containerd_1.7.24~ds1-6+deb13u1_source.buildinfo Checksums-Sha256: 466e6b029e2abcd1c9614043097cddd18d2383539a145be2cca1a33520d39532 5072 containerd_1.7.24~ds1-6+deb13u1.dsc e35d88a79245e807aebf5d45eb17083c10cf54ad8b226c60c193a0fe0bbf5965 1799264 containerd_1.7.24~ds1.orig.tar.xz f1941ebb04925fc2d5f0260a100ac7e3af76e4e75d1989cdfb57a607e6d9420f 36856 containerd_1.7.24~ds1-6+deb13u1.debian.tar.xz c22ba5aee04f3e81751bbed64e52b6484c818279fe30e60b9652fde031a60ce1 10147 containerd_1.7.24~ds1-6+deb13u1_source.buildinfo Files: 9b615e6a18a35c8f9591e92279fe3136 5072 admin optional containerd_1.7.24~ds1-6+deb13u1.dsc cc583fa77a063245d84ec074c68f3ce0 1799264 admin optional containerd_1.7.24~ds1.orig.tar.xz aeba18ea59ec290261574e3aae858661 36856 admin optional containerd_1.7.24~ds1-6+deb13u1.debian.tar.xz 495221d960c30bedfac1b5646556fc3b 10147 admin optional containerd_1.7.24~ds1-6+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmkbW14UHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJss+8hAAsOEgZ6YcUmVV+8yrBztPaPAojiMv /hPyBZ9TxGU9jrtOOQaooQ4O36Lxej2sZ2ECs/Te6YoRpLzTpFsfDNALknPwvVHq Yuuz5X9CmMZj3uJB1SqKLl5n5ZvhQvtx660SxAvlj154uwp+2mE5leGKFdERYpTP 0JnmpfoFpOjXVDHkf/f7wUCcIkZV5PezY5WP96umx9GHG4IP1561KFlrqT42ZuMp RE0IYGpFDiRysZJxHGimor9YJ70XzQxiY75OiT7fBPUMBTFTFKxbSBPd+jXX8pVI bEPoHaDJ8IKfExOor/9NfKDojAJz5Ovdq06PBNEA/fA6P0TBxH4n8cV3E5D2l8Sr lkqxHAqYY+EwI6Cb9GX9RA7tbIqRX2usDGIEQog8MYDKPB2fNBgEY+VAr4W/v5Tm owgqPQeeYkhe76HApkic5wISURiX1avSgql3Piu02sZWxEXLfvl6jAYiCl1LRcEp Bi7E61r/g0f51VGj/ByDZAXLxHtFL9/eQelRATd+Rta6xWYkfyh4VOUbBF4nm4NU ypUu5laWMZMFklnmCUiXHhUiEiaG90mxZAB7VENJglNY+xT306odsKmn82WgbVrL fwy9BlLLrREQ5ta6Q3tbIsDwA4DY+j2LJCbHkBPaUHMH84aJsQS0lCBOm5akhiuo qe8vWtHofECwXH0= =/oBT -----END PGP SIGNATURE-----