Container runtime engine
npx @buildinternet/releases get docker-enginecontainerd is updated to v2.4.2, fixing CVE-2026-95839 and two other crashes or disk-exhaustion issues triggered by malformed manifests and layer fetches. Also fixes bridge networks failing to restore when bound to a non-docker firewalld zone, daemon panic with fluentd TLS and fluentd-async, and docker ps -s failing when one container's size can't be computed.
A Go runtime update fixes CVE-2026-97032, CVE-2026-78659, CVE-2026-78663, CVE-2026-78669 (HTTP/2 DoS issues) and CVE-2026-56857, a Windows junction directory creation outside the data root. The containerd image store gains a lazy-pull daemon feature, enabled by default for nydus, overlaybd, soci, and stargz, plus numerous networking fixes including encrypted overlay traffic possibly sent in cleartext.
Docker Engine 29.8.2 fixes 13 security vulnerabilities: a malicious DNS response could make registry connections skip TLS certificate verification or fall back to HTTP, unprivileged users on a Swarm node could inject forged Ethernet frames into encrypted overlay networks, and pulling a crafted OCI image index could cause unbounded CPU and memory use. The BuildKit update addresses build cache poisoning via mismatched layer DiffIDs, daemon crashes from malformed LLB operations, and a source policy bypass in crafted Git build sources, plus fixes for docker cp on nested bind-mounted sockets and docker info failing after daemon reload with custom default address pools.
containerd image store no longer leaves dangling images when docker load loads an image that already exists, and GET /networks returns a proper error instead of a 500 for an invalid type filter. Windows commits now preserve hard links, user-namespace detection works on OpenVZ, and static containerd binaries are updated to v2.3.5.
New HostConfig.Umask option and docker run/create --umask flag set the umask for a container's main process, execs, and healthchecks. AppArmor and SELinux rules now block containers from using the 32-bit socketcall(2) path to create AF_VSOCK sockets and reach host virtual machines, plus a long tail of Swarm networking and containerd image store fixes.
Fixes regressions introduced in Engine 29.7.0 that caused image pulls to reject images with absolute hardlink targets and caused pulls and docker cp to fail on older Linux kernels when applying file permissions. Also fixes a panic in docker service create and docker service update when the same environment variable is passed twice, and updates BuildKit to v0.32.2.
Fixes a regression that prevented pulling images whose layers contain directories without explicit parent directory entries, and a regression where CopyToContainer rejected container paths traversing absolute symlinks such as /var/run to /run.
Updates github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106 / GHSA-hfg8-hc9c-6c3h. Also adds an experimental embedded-containerd feature that runs containerd inside the daemon process, graduates the image mount type out of experimental, adds a default-stop-timeout daemon option, and fixes daemon panics during network disconnect cleanup and swarm ingress port removal.
Bug fixes and enhancements
Security
CVE-2026-31431, which exposed AF_ALG sockets to 32-bit programs, is patched by replacing the socketcall(2) seccomp deny with targeted AppArmor (deny network alg) and SELinux (alg_socket) rules at the LSM layer. On SELinux systems, this requires selinux-enabled: true in daemon.json or via the --selinux-enabled flag. Also fixed the default AppArmor profile not being updated on daemon restart, which previously required a system reboot to pick up profile changes from upgrades.
Security fixes:
docker plugin install where privilege validation could be partially…New features:
bind-create-src option to --mount flag for bind mounts