Docker Engine Release Notes (19.03.9

- overlay2: show backing filesystem. [moby/moby#40652](https://github.com/moby/moby/pull/40652) - Update CRIU to v3.13 "Silicon Willet". [moby/moby#40850](https://github.com/moby/moby/pull/40850) - Only show registry v2 schema1 deprecation warning upon successful fallback, as opposed to any registry error. [moby/moby#40681](https://github.com/moby/moby/pull/40681) - Use FILE_SHARE_DELETE for log files on Windows. [moby/moby#40563](https://github.com/moby/moby/pull/40563) - Bump Golang 1.13.10. [moby/moby#40803](https://github.com/moby/moby/pull/40803) ### Rootless - Now rootlesskit-docker-proxy returns detailed error message on exposing privileged ports. [moby/moby#40863](https://github.com/moby/moby/pull/40863) - Supports numeric ID in /etc/subuid and /etc/subgid. [moby/moby#40951](https://github.com/moby/moby/pull/40951) ### Security - apparmor: add missing rules for userns. [moby/moby#40564](https://github.com/moby/moby/pull/40564) - SElinux: fix ENOTSUP errors not being detected when relabeling. [moby/moby#40946](https://github.com/moby/moby/pull/40946) ### Swarm - Increase refill rate for logger to avoid hanging on service logs. [moby/moby#40628](https://github.com/moby/moby/pull/40628) - Fix issue where single swarm manager is stuck in Down state after reboot. [moby/moby#40831](https://github.com/moby/moby/pull/40831) - tasks.db no longer grows indefinitely. [moby/moby#40831](https://github.com/moby/moby/pull/40831) ## 19.03.8 2020-03-10 ### Runtime - Improve mitigation for [CVE-2019-14271](https://nvd.nist.gov/vuln/detail/CVE-2019-14271) for some nscd configuration. ## 19.03.7 2020-03-03 ### Builder - builder-next: Fix deadlock issues in corner cases. [moby/moby#40557](https://github.com/moby/moby/pull/40557) ### Runtime * overlay: remove modprobe execs. [moby/moby#40462](https://github.com/moby/moby/pull/40462) * selinux: display better error messages when setting file labels. [moby/moby#40547](https://github.com/moby/moby/pull/40547) * Speed up initial stats collection. [moby/moby#40549](https://github.com/moby/moby/pull/40549) - rootless: use certs.d from XDG_CONFIG_HOME. [moby/moby#40461](https://github.com/moby/moby/pull/40461) - Bump Golang 1.12.17. [moby/moby#40533](https://github.com/moby/moby/pull/40533) - Bump google.golang.org/grpc to v1.23.1. [moby/moby#40566](https://github.com/moby/moby/pull/40566) - Update containerd binary to v1.2.13. [moby/moby#40540](https://github.com/moby/moby/pull/40540) - Prevent showing stopped containers as running in an edge case. [moby/moby#40555](https://github.com/moby/moby/pull/40555) - Prevent potential lock. [moby/moby#40604](https://github.com/moby/moby/pull/40604) ### Client - Bump Golang 1.12.17. [docker/cli#2342](https://github.com/docker/cli/pull/2342) - Bump google.golang.org/grpc to v1.23.1. [docker/cli#1884](https://github.com/docker/cli/pull/1884) [docker/cli#2373](https://github.com/docker/cli/pull/2373) ## 19.03.6 2020-02-12 ### Builder - builder-next: Allow modern sign hashes for ssh forwarding. [docker/engine#453](https://github.com/docker/engine/pull/453) - builder-next: Clear onbuild rules after triggering. [docker/engine#453](https://github.com/docker/engine/pull/453) - builder-next: Fix issue with directory permissions when usernamespaces is enabled. [moby/moby#40440](https://github.com/moby/moby/pull/40440) - Bump hcsshim to fix docker build failing on Windows 1903. [docker/engine#429](https://github.com/docker/engine/pull/429) ### Networking - Shorten controller ID in exec-root to not hit UNIX_PATH_MAX. [docker/engine#424](https://github.com/docker/engine/pull/424) - Fix panic in drivers/overlay/encryption.go. [docker/engine#424](https://github.com/docker/engine/pull/424) - Fix hwaddr set race between us and udev. [docker/engine#439](https://github.com/docker/engine/pull/439) ### Runtime * Bump Golang 1.12.16. [moby/moby#40433](https://github.com/moby/moby/pull/40433) * Update containerd binary to v1.2.12. [moby/moby#40433](https://github.com/moby/moby/pull/40453)

This document summarizes release notes for Docker Engine versions 19.03.9 through 19.03.6, detailing fixes and improvements across various components. It includes updates to runtime functionalities like overlay2 filesystem display, CRIU updates, and handling of registry deprecation warnings. Rootless mode improvements include detailed error messages and support for numeric IDs. Security enhancements involve AppArmor and SELinux rule adjustments. Swarm improvements address logger refill rates, manager state issues, and task database growth. Additional fixes and updates are included for builder components, networking (addressing panics and hardware address races), and the client, along with mitigation for CVE-2019-14271 and updates to containerd and Golang versions.