containerd 1.6.38

Welcome to the v1.6.38 release of containerd!

The thirty-eighth patch release for containerd 1.6 contains various fixes
and updates.

Highlights

• Fix integer overflow in User ID handling (GHSA-265r-hfxg-fhmg)

Container Runtime Interface (CRI)

• Fix fatal map concurrency error in httpstream (#11319)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Jin Dong
• Akhil Mohan
• Derek McGowan
• Phil Estes
• Akihiro Suda
• Craig Ingram
• Kohei Tokunaga
• Maksym Pavlenko
• Samuel Karp
• ningmingxiao

Changes

19 commits

• cf158e884 Merge commit from fork
• 9639b9625 validate uid/gid
• Prepare release notes for v1.6.38 (#11539)
  • eee34bac2 Prepare release notes for v1.6.38
• update build to go1.23.7, test go1.24.1 (#11421)
  • b67a35baf move exclude-dirs to issues.exclude-dirs
  • 2104a41ef update golangci-lint to 1.60.1
  • 820e81adc update build to go1.23.7, test go1.24.1
• Remove hashicorp/go-multierror dependency and fix CI (#11500)
  • 7cc3b3dce e2e: use the shim bundled with containerd artifact
  • 0733895f3 Remove unnecessary joinError unwrap
  • 054c4cc79 Remove hashicorp/go-multierror
  • ff21be0ee Update go to 1.20 to use its multi error support
  • f63b5fd3f update containerd/project-checks to 1.2.1
• Fix fatal map concurrency error in httpstream (#11319)
  • abd1692cf fix fatal error: concurrent map iteration and map write
• CI: arm64-8core-32gb -> ubuntu-24.04-arm (#11438)
  • f5ab73c0a CI: arm64-8core-32gb -> ubuntu-24.04-arm
  • 2cc6b5b0a increase xfs base image size to 300Mb

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.37