29.9.3 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.3 milestone moby/moby, 29.9.3 milestone Security This release includes fixes for multiple security vulnerabilities affecting Docker Engine and related components. CVE-2026-116587 Fix possible excessive CPU usage when parsing crafted RSA keys GHSA-mgcc-cww5-fp2q CVE-2026-11…
29.9.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.2 milestone moby/moby, 29.9.2 milestone Security The Go runtime update addresses CVE-2026-111943 by rejecting certificate chains that include eight revoked eMudhra intermediate certificates. Image pulls and pushes fail TLS certificate verification if a registry's certifica…
29.9.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.1 milestone moby/moby, 29.9.1 milestone Security The containerd update to v2.4.2 includes fixes for the following security vulnerabilities: CVE-2026-95839: Pulling or importing an image through containerd's transfer service could crash containerd if a child descriptor cont…
v2.0.0-beta.28
29.9.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.0 milestone moby/moby, 29.9.0 milestone Security The Go runtime update fixes the following security vulnerabilities in Docker Engine: CVE-2026-97032: An HTTP/2 client could crash the daemon by changing the HPACK header table size while sending requests. golang/go#81867 CVE…
v2.0.0-beta.27
0.6.2 Changelog client: bump github.com/docker/go-connections v0.8.2, github.com/Azure/go-ansiterm 8c912ac31dd4. moby/moby#53891 Fix request cancellation and deadlines during client HTTP upgrade handshakes. moby/moby#53889
29.9.0-rc.2 For a full list of changes from the last release candidate refer to the diff: moby/moby, 29.9.0-rc.1...29.9.0-rc.2 docker/cli, 29.9.0-rc.1...29.9.0-rc.2 Bug fixes and enhancements containerd image store: Add the lazy-pull daemon feature to control whether docker pull skips downloading layer content that the snapshotter already provides. Lazy pulls are enabled by default for known remot…
v2.0.0-beta.26
29.9.0-rc.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.0 milestone moby/moby, 29.9.0 milestone Bug fixes and enhancements containerd image store: Fix pulls skipping required layer blobs when unpacked layers already exist, leaving images runnable but incomplete for export or push. moby/moby#53615 Fix docker container creat…
v2.0.0-beta.25
0.6.1 Changelog client: add WithHTTPRequestHook option. moby/moby#53671 client: deprecate WithResponseHook in favor of WithHTTPResponseHook. moby/moby#53666 client: fix WithHTTPResponseHook hooks not being called for hijacked HTTP connections. moby/moby#53821 client: postRaw: use consistent order or arguments. moby/moby#53677 client: prevent response hooks from consuming response body. moby/moby#5…
1.56.1 Changelog api/scripts: Allow isolated model generation with an API directory. moby/moby#53629 api/swagger: Improve OpenAPI compatibility. moby/moby#53626 api/swagger: Quote HTTP response status codes. moby/moby#53759 api/templates: schema: disable validators and serializer sections. moby/moby#53751 api: fix G117 (gosec). moby/moby#53721 api: swagger ImageManifestSummary.ImageData: fix inval…
29.8.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.2 milestone moby/moby, 29.8.2 milestone Security This release fixes the following security vulnerabilities in Docker Engine: CVE-2026-53493: Pulling a crafted OCI image index with deeply nested or widely fanned-out descriptors could cause unbounded CPU and memory use. GHSA…
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone: moby/moby, 25.0.18 milestone Changes to the Engine API, see API version history. Bug fixes and enhancements Fix CVE-2026-17106: crafted tar archive can write outside the extraction directory. #53470
29.8.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.1 milestone moby/moby, 29.8.1 milestone Bug fixes and enhancements containerd image store: Fix docker load leaving dangling images after loading an image that already exists. moby/moby#53595 Fix managed containerd logging a CRI pod-sandbox plugin dependency warning during…
v2.0.0-beta.24
29.8.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.0 milestone moby/moby, 29.8.0 milestone New Add HostConfig.Umask option and a corresponding --umask <octal> flag to docker create/docker run to set the umask for a container's main process, execs, and healthchecks. moby/moby#53463, docker/cli#7108 Add support for attaching…
v2.0.0-beta.23
v2.0.0-beta.22
0.6.0 Changelog pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489 api: Bump to 1.56. moby/moby#53425 minor cleanups, refactors. moby/moby#53509
1.56.0 Changelog GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538 POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process c…
29.8.0-rc.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.8.0 milestone moby/moby, 29.8.0 milestone Bug fixes and enhancements containerd image store: Fix docker image inspect reporting a smaller image size than docker image ls. moby/moby#53426 Do not log expected image signature identity misses as errors for containerd image…
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestone: moby/moby, 25.0.17 milestone Changes to the Engine API, see API version history. Bug fixes and enhancements Fix CVE-2026-41568: symlink escape in mount destination creation. #52648 Decompress archives before entering container filesystem, fixing CVE-2026-41567. #52647 Fix CVE-2026-42306: bind moun…
29.7.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.2 milestone moby/moby, 29.7.2 milestone Bug fixes and enhancements Fix docker service create and docker service update panicking when the same environment variable is passed more than once. docker/cli#7145 Fix a regression introduced in Docker Engine 29.7.0 that caused ima…
29.7.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.1 milestone moby/moby, 29.7.1 milestone Bug fixes and enhancements Fix a regression that prevented pulling images whose layers contain directories without explicit parent directory entries. moby/moby#53260 Fix a regression where the CopyToContainer rejects container paths…
v2.0.0-beta.21
29.7.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.0 milestone moby/moby, 29.7.0 milestone New Add an experimental embedded-containerd feature that runs containerd inside the daemon process instead of as a separate managed process. moby/moby#52898 Mount type image is no longer experimental. moby/moby#52998 Add the default-…
v2.0.0-beta.20
29.7.0-rc.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.7.0 milestone moby/moby, 29.7.0 milestone New Add an experimental embedded-containerd feature that runs containerd inside the daemon process instead of as a separate managed process. moby/moby#52898 Bug fixes and enhancements Add the default-stop-timeout daemon option t…