Docker Engine 29.6.2 → 29.7.1
2 releases · 0 breaking changes · 1 security fix · 0 advisories fixed
1security0breaking0deprecated3feature17fix
Breaking changes
None in the release notes.
Security changes
- security Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h. moby/moby#53247, docker/cli#7139 in 29.7.0
Every release in between
otherdocker/cli, 29.7.1 milestone
othermoby/moby, 29.7.1 milestone
fixFix a regression that prevented pulling images whose layers contain directories without explicit parent directory entries. moby/moby#53260
fixFix a regression where the CopyToContainer rejects container paths that traverse absolute symlinks, such as /var/run -> /run. moby/moby#53261
otherdocker/cli, 29.7.0 milestone
othermoby/moby, 29.7.0 milestone
featureAdd an experimental embedded-containerd feature that runs containerd inside the daemon process instead of as a separate managed process. moby/moby#52898
featureMount type image is no longer experimental. moby/moby#52998
featureAdd the default-stop-timeout daemon option to configure the stop timeout assigned to containers without an explicit timeout. moby/moby#53146
securityUpdate github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h. moby/moby#53247, docker/cli#7139
fixFix a daemon panic when cleanup of a container's network interface fails while the container is being disconnected from a network. moby/moby#53237
fixFix a daemon panic when removing swarm ingress ports after failing to bind an ingress proxy listener. moby/moby#53022
otherKeep the cgroup mount for containers with --net=host. moby/moby#52318
fixAdd shell completion for --filter names and known values to docker service ls, docker service ps, and docker node ps. docker/cli#7124
fixcontainerd image store: Fix daemon-wide concurrent download and upload limits for pulls and pushes not being honored. moby/moby#53081
fixTo preserve the previous unlimited startup behavior, configure "max-concurrent-downloads" and "max-concurrent-uploads" to 0
fixFix docker cp -a using the wrong file owner when copying files into containers with user namespace remapping enabled. moby/moby#53084
fixFix docker cp from a Windows container silently returning a file instead of an error when the source path ends with a separator but is not a directory. moby/moby#53123
fixFix docker stats reporting all zeros for running Windows containers when using the containerd runtime. moby/moby#53101
fixFix docker stats reporting empty network stats for running Windows containers when using the containerd runtime. moby/moby#53219
fixFix a typo in the docker create --pull flag description. docker/cli#7103
fixFix Swarm service updates failing due to "file exists" errors when a VIP IP alias already exists on the LB endpoint interface. moby/moby#51657
fixFix Swarm tasks being rejected when their image could not be pulled from the registry but was already present on the node. moby/moby#53212
fixImprove the error returned when a container hostname exceeds Linux's 64-byte limit. moby/moby#53121
fixPrevent live-restored volumes from retaining active mount references when containers exit during daemon startup. moby/moby#53115
fixSuppress the “No such container” error when docker rm --force succeeds for a nonexistent container. docker/cli#7110
otherUpdate Go runtime to 1.26.5. docker/cli#7087
otherUpdate BuildKit to v0.32.0. moby/moby#53234
otherUpdate containerd (static binaries) to v2.3.3. moby/moby#53050
otherUpdate runc (in static binaries) to v1.4.3. moby/moby#50960