Skip to content

Conversation

@AkihiroSuda
Copy link
Member

For CVE-2025-67499

In containerd v1.7, the CNI plugin binaries are included in the cri-cni-containerd-*-linux-*.tar.gz bundle.

@github-project-automation github-project-automation bot moved this to Needs Triage in Pull Request Review Dec 10, 2025
@dosubot dosubot bot added the dependencies Pull requests that update a dependency file label Dec 10, 2025
@dmcgowan
Copy link
Member

This is a huge change. Updates to hcsshim, grpc, otel often lead to issues directly in this repo or in downstreams importers. Downstreams importers should mostly be moved to 2.0 already, but this is still an unexpected change for a stable 30th patch release.

Could we just update the package binaries instead? It seems we should be able to do that by adding a flag in the Makefile to call to install cni. Could updated binaries have issue with the large version difference? (1.2 to 1.9).

Copy link
Member

@mikebrow mikebrow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

see comment on hcshim version and question about go-cni

@AkihiroSuda
Copy link
Member Author

Could we just update the package binaries instead?

done

@AkihiroSuda AkihiroSuda changed the title [release/1.7] go.mod: github.com/containernetworking/plugins v1.9.0 [release/1.7] script/setup/install-cni: install CNI plugins v1.9.0 Dec 11, 2025
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
@github-project-automation github-project-automation bot moved this from Needs Triage to Review In Progress in Pull Request Review Dec 11, 2025
@fuweid fuweid merged commit ba2b3a2 into containerd:release/1.7 Dec 11, 2025
84 of 86 checks passed
@github-project-automation github-project-automation bot moved this from Review In Progress to Done in Pull Request Review Dec 11, 2025
@SergeyKanzhelev
Copy link
Contributor

Just FYI, needed to add this: kubernetes-sigs/cri-tools#1961 since install-cni changed arguments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file size/S

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

7 participants