29.9.3 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: docker/cli, 29.9.3 milestone moby/moby, 29.9.3 milestone Security This release includes fixes for multiple security vulnerabilities affecting Docker Engine and related components. CVE-2026-116587 Fix possible excessive CPU usage when parsing crafted RSA keys GHSA-mgcc-cww5-fp2q CVE-2026-11…
Welcome to the v0.38.2 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. Contributors CrazyMax Tõnis Tiigi Sebastiaan van Stijn Notable Changes Fix Bake filesystem entitlement checks when building multiple targets together so paths from every target are checked against the approved entitlements. GHSA-xg6v-cv2h-2w5h Fix Bake fil…
Welcome to the v0.34.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. Contributors CrazyMax Sebastiaan van Stijn Tõnis Tiigi Notable Changes Fix a daemon panic caused by resolver cache poisoning when a build resolves metadata for the same Git source reference twice. GHSA-2fqp-xg6f-v7gj Prevent malicious clients with access…
2026-11-03 Download Docker DesktopWindows (checksum)Windows ARM Early Access (checksum)Mac with Apple chip (checksum)Mac with Intel chip (checksum)Debian - RPM - Arch (checksum)
CRI-O v1.35.11 Downloads Changelog since v1.35.10 Changes by Kind Ci Bug or Regression Other (Cleanup or Flake) Uncategorized Dependencies Added Changed Removed CRI-O v1.35.11 The release notes have been generated for the commit range v1.35.10...v1.35.11 on Tue, 03 Nov 2026 00:21:58 UTC. Downloads Download one of our static release bundles via our Google Cloud Bucket: cri-o.amd64.v1.35.11.tar.gz c…
CRI-O v1.36.8 Downloads Changelog since v1.36.7 Changes by Kind Ci Bug or Regression Other (Cleanup or Flake) Uncategorized Dependencies Added Changed Removed CRI-O v1.36.8 The release notes have been generated for the commit range v1.36.7...v1.36.8 on Tue, 03 Nov 2026 00:21:45 UTC. Downloads Download one of our static release bundles via our Google Cloud Bucket: cri-o.amd64.v1.36.8.tar.gz cri-o.a…
CRI-O v1.37.3 The release notes have been generated for the commit range v1.37.2...v1.37.3 on Tue, 03 Nov 2026 00:21:41 UTC. Downloads Release Bundles Download one of our static release bundles via our Google Cloud Bucket. Each bundle includes a SHA-256 checksum, a cosign signature (.bundle), and a SPDX 3 bill of materials (.spdx.json) with its own signature: cri-o.amd64.v1.37.3.tar.gz cri-o.amd64…
What's Changed WSLc Clarify image pull status message by James Alickolli (@licon4812) in #41753 Match console detach sequence for full UTF-16 characters by ggarzia-MSFT in #41960 Fix: plan9 truncate the wrong file after replacement by Feng Wang (@chemwolf6922) in #41974 Fix guiApplications config parsing by Feng Wang (@chemwolf6922) in #41973 Fix potential use-after-free in MirroredNetworking by B…
What's Changed ℹ️ Heads-up for users of Compose as a library: Up now runs its Create and Start phases as a single plan over a single daemon snapshot, for up -d (#14290) and interactive up (#14305), as scale, watch rebuilds and start already do (#14291, #14296). The CLI behaves as before. If you call api.Compose.Up from your own program: Up now validates its options first, with the same rules as th…
Announcement https://discuss.linuxcontainers.org/t/incus-7-6-has-been-released/27462 What's Changed devcontainer: bump Go to 1.26 by @0xk1f0 in #4073 Dont interpret ErrNonReusuableSucceeded as failure on instance delete by @DarkressX in #4076 doc: Move warning for macOS in howto/insntances_create by @hnakamur in #4077 incusd/instance/qemu: Report disk usage for all disk devices in state by @stgrab…
Highlights: 🪟Experimentally support HCS driver for eliminating QEMU dependency (Windows hosts) 🍎Attach host block devices to VZ guests (macOS hosts) 🐧Experimentally support lima:shared, lima:host, and lima:bridged networks (Linux hosts) 🖥️limactl menu: a menu-based user interface Changes Windows host support: Experimentally support HCS driver (#5449 #5514, thanks to LFX mentee @mie313, and @unsuma…
Changes nerdctl container: Add --device-cgroup-rule to nerdctl run and nerdctl create (#5258, thanks to @takumi12311123) Add --timeout to nerdctl commit for configuring the lease timeout, which was hard-coded to 1h (#5253, thanks to @Luckydog691) Fix --volumes-from to inherit only user mounts, so that the target container's own /dev/shm configuration is not replaced (#5250, thanks to @git-jxj) Exi…
Announcement Announcement: https://discourse.ubuntu.com/t/lxd-5-0-11-lts-has-been-released/90570/1 Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/5.0/release-notes-5.0.11/ What's Changed Full Changelog: lxd-5.0.10...lxd-5.0.11
Announcement Announcement: https://discourse.ubuntu.com/t/lxd-4-0-15-lts-has-been-released/90571/1 Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/4.0/release-notes-4.0.15/ What's Changed Full Changelog: lxd-4.0.14...lxd-4.0.15
Announcement Announcement: https://discourse.ubuntu.com/t/lxd-5-21-9-lts-has-been-released/90565/1 Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/5.21/release-notes-5.21.9/ What's Changed Full Changelog: lxd-5.21.8...lxd-5.21.9
Client tools for OKD/SCOS These archives contain the client tooling for OKD on CentOS Stream CoreOS. To verify the contents of this directory, use the 'gpg' and 'shasum' tools to ensure the archives you have downloaded match those published from this location. The openshift-install binary has been preconfigured to install the following release: Name: 5.0.0-okd-scos.4 Digest: sha256:de68403c50493b2…
Client tools for OKD/SCOS These archives contain the client tooling for OKD on CentOS Stream CoreOS. To verify the contents of this directory, use the 'gpg' and 'shasum' tools to ensure the archives you have downloaded match those published from this location. The openshift-install binary has been preconfigured to install the following release: Name: 5.1.0-okd-scos.ec.1 Digest: sha256:b2234b7aa898…
Announcement Announcement: https://discourse.ubuntu.com/t/lxd-6-10-1-lts-has-been-released/90024 Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/6/release-notes-6.10.1/ What's Changed Full Changelog: lxd-6.10.0...lxd-6.10.1
Features The podman push command now supports a new option, --platform, which selects and pushes a single platform-specific manifest instead of the entire list. The podman kube play command now supports a new option, --validate, which determines how unrecognized YAML fields are handled (#18332). The podman kube play command now supports a new option, --label, to set labels on created containers, p…
2026-10-26 Download Docker DesktopWindows (checksum)Windows ARM Early Access (checksum)Mac with Apple chip (checksum)Mac with Intel chip (checksum)Debian - RPM - Arch (checksum)
2026-10-22 Download Docker DesktopWindows (checksum)Windows ARM Early Access (checksum)Mac with Apple chip (checksum)Mac with Intel chip (checksum)Debian - RPM - Arch (checksum)