containerd

containerd Updates Bound OCI Image Graph Processing

A crafted OCI image index can exhaust containerd resources during image pull, before a container starts. Update affected runtimes through the host or cluster's supported channel and limit untrusted image sources while arranging rollout.