Engine

Security

New

Bug fixes and enhancements

Bug fixes and enhancements

Security

New

CVE-2026-31431, which exposed AF_ALG sockets to 32-bit programs, is patched by replacing the socketcall(2) seccomp deny with targeted AppArmor (deny network alg) and SELinux (alg_socket) rules at the LSM layer. On SELinux systems, this requires selinux-enabled: true in daemon.json or via the --selinux-enabled flag. Also fixed the default AppArmor profile not being updated on daemon restart, which previously required a system reboot to pick up profile changes from upgrades.

Security

Bug fixes and enhancements

Bug fixes and enhancements

Security fixes:

• CVE-2026-34040: Fix an authorization bypass in AuthZ plugins GHSA-x744-4wpc-v9h2
• CVE-2026-33997: Fix a flaw in docker plugin install where privilege validation could be partially…

New features:

• Add bind-create-src option to --mount flag for bind mounts
• CLI plugin hooks now fire on command failure and plugins can use "error-hooks" to show hints only when commands fail
• Lower minimum API version from v1.44 to v1.40 (Docker 19.03)

Bug fixes:

• Update BuildKit to v0.27.1
• Fix docker system df failing when run concurrently with docker system prune
• Fix daemon handling of duplicate container exit events
• Fix panic after failed daemon initialization
• Fix encrypted overlay networks not passing…

New features:

• docker info now includes NRI section
• Add experimental NRI support
• New Identity field in inspect endpoint showing trusted origin information about images

Networking:

• Fixed a regression where established network connections could be disrupted during a container's shutdown grace period

Updates:

• Update Go runtime to 1.25.6

Bug fixes:

• Fix docker run --network none panic on Windows
• Fix image mounts failing with "file name too long" for long mount paths
• Fix potential creation of orphaned overlay2 layers

Updates:

• Update BuildKit to v0.26.3

Bug fixes and enhancements:

• Add shell completion for docker stack deploy --compose-file
• containerd image store: Fix a bug causing docker build to ignore the explicitly set unpack image exporter option
• Fix docker image ls dangling image handling
• Fix a bug that…

Navigation and documentation interface for Docker. No release information provided.