containerd v2.3.2

v2.3.2 is a critical maintenance release focusing on security and runtime stability. It resolves five CVEs, improves the reliability of container startups under heavy load, and enhances image pulling resilience by adding retries for transient network errors. it also addresses specific stability issues for Windows hosts and CRI checkpointing operations.

Fixes multiple security vulnerabilities (CVE-2026-50195, CVE-2026-53488, and others) — This release addresses five distinct CVEs. Regular security updates are critical for a core runtime like containerd to prevent potential container escapes, unauthorized access, or denial-of-service attacks in production clusters.

Improved container startup reliability during slow creation cycles — Internal locking improvements prevent container startup failures and RPC timeouts that previously occurred during periods of high system load or slow container creation.

Resilient image distribution with transient network retries — The image resolver now retries on transient network errors, reducing the likelihood of failed image pulls and improving the robustness of deployments in unstable network environments.

Resolved data race in Windows shim log reading — Specifically for Windows users, this fixes a potential instability issue when reading logs from the shim, improving the reliability of Windows container workloads.