Docker Engine 17.09 release notes

17.09.1-ce

2017-12-07

Fix config leakage on shared parent stage moby/moby#33753
Warn on empty continuation lines only, not on comment-only lines moby/moby#35004

Overlay fix for transient IP reuse docker/libnetwork#2016
Fix reapTime logic in NetworkDB and handle DNS cleanup for attachable container docker/libnetwork#2017
Disable hostname lookup on chain exists check docker/libnetwork#2019
Fix lint issues docker/libnetwork#2020
Restore error type in FindNetwork moby/moby#35634

Protect health monitor Go channel moby/moby#35482
Fix leaking container/exec state moby/moby#35484
Add /proc/scsi to masked paths (patch to work around CVE-2017-16539 moby/moby/#35399
Vendor tar-split: fix to prevent memory exhaustion issue that could crash Docker daemon moby/moby/#35424 Fixes CVE-2017-14992
Fix P/Z HubPullSuite tests moby/moby#34837
Windows: Add support for version filtering on pull moby/moby#35090
Windows: Stop filtering Windows manifest lists by version moby/moby#35117
Use rslave instead of rprivate in chroot archive moby/moby/#35217
Remove container rootfs mountPath after unmount moby/moby#34573
Fix honoring tmpfs size of user /dev/shm mount moby/moby#35316
Don’t abort when setting may_detach_mounts (log the error instead) moby/moby#35172
Fix version comparison when negotiating the API version moby/moby#35008

Increase gRPC request timeout when sending snapshots docker/swarmkit#2404
Fix node filtering when there is no log driver docker/swarmkit#2442
Add an error on attempt to change cluster name docker/swarmkit/#2454
Delete node attachments when node is removed docker/swarmkit/#2456
Provide custom gRPC dialer to override default proxy dialer docker/swarmkit/#2457
Avoids recursive readlock on swarm info moby/moby#35388

2017-09-26

Allow extension fields in the v3.4 version of the compose format docker/cli#452
Make compose file allow to specify names for non-external volume docker/cli#306
Support --compose-file - as stdin docker/cli#347
Support start_period for healthcheck in Docker Compose docker/cli#475
Add support for stop-signal in docker stack commands docker/cli#388
Add support for update order in compose deployments docker/cli#360
Add ulimits to unsupported compose fields docker/cli#482
Add --format to docker-search docker/cli#440
Show images digests when {{.Digest}} is in format docker/cli#439
Print output of docker stack rm on stdout instead of stderr docker/cli#491
Fix docker history --format {{json .}} printing human-readable timestamps instead of ISO8601 when --human=true docker/cli#438
Fix idempotence of docker stack deploy when secrets or configs are used docker/cli#509
Fix presentation of random host ports docker/cli#404
Fix redundant service restarts when service created with multiple secrets moby/moby#34746

Fix Splunk logger not transmitting log data when tag is empty and raw-mode is used moby/moby#34520

Graphdriver: promote overlay2 over aufs moby/moby#34430
LCOW: Additional flags for VHD boot moby/moby#34451
LCOW: Don’t block export moby/moby#34448
LCOW: Dynamic sandbox management moby/moby#34170
LCOW: Force Hyper-V Isolation moby/moby#34468
LCOW: Move toolsScratchPath to /tmp moby/moby#34396
LCOW: Remove hard-coding moby/moby#34398
LCOW: WORKDIR correct handling moby/moby#34405
Windows: named pipe mounts moby/moby#33852
Fix “permission denied” errors when accessing volume with SELinux enforcing mode moby/moby#34684
Fix layers size reported as 0 in docker system df moby/moby#34826
Fix some “device or resource busy” errors when removing containers on RHEL 7.4 based kernels moby/moby#34886

Include whether the managers in the swarm are autolocked as part of docker info docker/cli#471
Add ‘docker service rollback’ subcommand docker/cli#205
Fix managers failing to join if the gRPC snapshot is larger than 4MB docker/swarmkit#2375
Fix “permission denied” errors for configuration file in SELinux-enabled containers moby/moby#34732
Fix services failing to deploy on ARM nodes moby/moby#34021