-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Jan 2026 12:12:05 +0700 Source: containerd Architecture: source Version: 1.4.13~ds1-1~deb11u6 Distribution: bullseye-security Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Arnaud Rebillout <arnaudr@debian.org> Closes: 1120285 1120343 Changes: containerd (1.4.13~ds1-1~deb11u6) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS security team. * CVE-2024-25621: overly broad default permission vulnerability (Closes: #1120285) * CVE-2025-64329: bug in the CRI Attach implementation (Closes: #1120343) Checksums-Sha1: f1781548c54d549cc6da79bcd94a5ddb6d1c8cce 4505 containerd_1.4.13~ds1-1~deb11u6.dsc e432ebbd421db3d84c6990a8e4fe4f1396c2884a 1488960 containerd_1.4.13~ds1.orig.tar.xz 0e28693c39e536119c4177e1b4c3e31d2a59ba81 34232 containerd_1.4.13~ds1-1~deb11u6.debian.tar.xz b84e1dabc56b8028ff30a99d3844ca0d920d3817 5681 containerd_1.4.13~ds1-1~deb11u6_source.buildinfo Checksums-Sha256: 652689c6ce8a7eb6012c3c701e9c28b48afc6d39ed6e7711d08bd4b515c26228 4505 containerd_1.4.13~ds1-1~deb11u6.dsc 867588af3fa86d4a9ff4e2330dfa5db2df480a81e5f73a20d321b20f7c596a0f 1488960 containerd_1.4.13~ds1.orig.tar.xz 4a9a1c97482d199362aa0fc97d2a9232fa2c822d5d66fca021e0edb48767e360 34232 containerd_1.4.13~ds1-1~deb11u6.debian.tar.xz 193aa2ab239884af0a89a0bfae15fde87376bd8fbeaa32d44feec2dda7cebc6d 5681 containerd_1.4.13~ds1-1~deb11u6_source.buildinfo Files: c58a293ddd95a6506f6a7447d440b230 4505 admin optional containerd_1.4.13~ds1-1~deb11u6.dsc 3958d3c535cdde744769515c30e618ff 1488960 admin optional containerd_1.4.13~ds1.orig.tar.xz 843a23ed599c0dc0898632ed877ab17b 34232 admin optional containerd_1.4.13~ds1-1~deb11u6.debian.tar.xz 825dcd2bbffe36c5cbb62a896bb51ea7 5681 admin optional containerd_1.4.13~ds1-1~deb11u6_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEE0Kl7ndbut+9n4bYs5yXoeRRgAhYFAmmEEoATHGFybmF1ZHJA ZGViaWFuLm9yZwAKCRDnJeh5FGACFpI2D/9FgSda9inBIck9DP8BsT/pxubRoR7L n08ov6K2iV3SQ4L2mKWB9yBxsXOvITO4fVSMUTvQ2PL1b8phmiS+3VLj55HZ6E3f ABn+By3FXQMiP82I7e6urYxViMZJ/BlCC7HXZd9Rur3LcteKw/sOWjW+aCyTWaWF K8RbYOaEirCL/7pqf78WOILQZUashOpMVW0osrPSNwTLmHIyFNG2z2KoyQvG9RKn uU1ibTzInFwhgQH7W+5eVOlsLs4CFwwDdHX7rmNfSbMVMOSwxRc5g02DiykAzcys 6wBQKERMim2DtUs6yJoPQ6h5C9L1ftTE477QQTm2FTJzTa/ZWGvOdC5A6igjo0q2 22jgTfcLtcUJ6j1x8T381qgr6MbFGqGOhqKuax0RRLGi3c2tU6v8EMitrq1/HxWo NL/XeLUkWznKJga109xMZtMlMiJ1WVdprqm3LfUuq6GD/3V/ncvaZH2q8Sdt6TqP SHTujbNvSBhTnpDn4jwYJJ4/XcCXCQ6hJ7dxCkRVozf13MEwBVXHBvvQMcV0Rt/v 765VWwWPoAQX6JR7+O6RblJXsleCVCC6pLIL9mMmGddgUDZHdE2WHtBBInLZD1yi kSUkeUrXEVYNTazDYE54bvZMJn99gIdHiOK0bvMtkNaxvm6yBNSjdhAC66MGntQ8 W1Etl8465rYuJg== =RUj4 -----END PGP SIGNATURE-----