-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 16 Nov 2025 16:57:18 -0500
Source: containerd
Binary: containerd containerd-dbgsym
Architecture: amd64
Version: 1.6.20~ds1-1+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Reinhard Tartler <siretart@tauware.de>
Description:
 containerd - open and reliable container runtime
Closes: 1120343
Changes:
 containerd (1.6.20~ds1-1+deb12u2) bookworm-security; urgency=medium
 .
   * Fix overly broad directory permissions, Fixes: CVE-2024-25621
   * Fix bug in the CRI Attach implementation, Fixes: CVE-2025-64329
     Closes: #1120343
Checksums-Sha1:
 64991cd3801c0a58f217b4b1c36dd4a5203f130c 27162792 containerd-dbgsym_1.6.20~ds1-1+deb12u2_amd64.deb
 dc3ac299dba899899b09ee5d2aecbcecafe8ea5a 12763 containerd_1.6.20~ds1-1+deb12u2_amd64-buildd.buildinfo
 0adaed412ba059ae427eadd1c17bc5885184676b 25905876 containerd_1.6.20~ds1-1+deb12u2_amd64.deb
Checksums-Sha256:
 fec084ddea89c61008959327880761101abab210648fcd8bbc007968c088a630 27162792 containerd-dbgsym_1.6.20~ds1-1+deb12u2_amd64.deb
 1ceab6569e398a0bb03f3deae17d4028b9f11420f515369779d9dea9592f1445 12763 containerd_1.6.20~ds1-1+deb12u2_amd64-buildd.buildinfo
 97a18ebff2326b96ce9bd7b1904bba4204525b678744294ab78d76acb6f3af62 25905876 containerd_1.6.20~ds1-1+deb12u2_amd64.deb
Files:
 ee2492d41cd2f65f928842092f249510 27162792 debug optional containerd-dbgsym_1.6.20~ds1-1+deb12u2_amd64.deb
 1ad7568d4dc087f1fc40fdda4d8c047f 12763 admin optional containerd_1.6.20~ds1-1+deb12u2_amd64-buildd.buildinfo
 0b0ad2dbfedb079f2656281b34e63b24 25905876 admin optional containerd_1.6.20~ds1-1+deb12u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=1MT8
-----END PGP SIGNATURE-----