Docker Engine 18.09 Release Notes (cont.)

* Fixed Windows ARP entries getting corrupted randomly under load. [docker/engine#192](https://github.com/docker/engine/pull/192) ### Runtime * Now showing stopped containers with restart policy as `Restarting`. [docker/engine#181](https://github.com/docker/engine/pull/181) * Now using original process spec for execs. [docker/engine#178](https://github.com/docker/engine/pull/178) ### Swarm Mode * Fixed leaking task resources when nodes are deleted. [docker/engine#185](https://github.com/docker/engine/pull/185) ### Known Issues * There are important changes to the upgrade process that, if not correctly followed, can have an impact on the availability of applications running on the Swarm during upgrades. These constraints impact any upgrades coming from any version before 18.09 to version 18.09 or later. ## 18.09.4 2019-03-28 ### Builder * Fixed [CVE-2019-13139](https://nvd.nist.gov/vuln/detail/CVE-2019-13139) by adding validation for `git ref` to avoid misinterpretation as a flag. [moby/moby#38944](https://github.com/moby/moby/pull/38944) ### Runtime * Fixed `docker cp` error for filenames greater than 100 characters. [moby/moby#38634](https://github.com/moby/moby/pull/38634) * Fixed `layer/layer_store` to ensure `NewInputTarStream` resources are released. [moby/moby#38413](https://github.com/moby/moby/pull/38413) * Increased GRPC limit for `GetConfigs`. [moby/moby#38800](https://github.com/moby/moby/pull/38800) * Updated `containerd` 1.2.5. [docker/engine#173](https://github.com/docker/engine/pull/173) ### Swarm Mode * Fixed nil pointer exception when joining node to swarm. [moby/moby#38618](https://github.com/moby/moby/issues/38618) * Fixed issue for swarm nodes not being able to join as masters if http proxy is set. [moby/moby#36951] ### Known Issues * There are important changes to the upgrade process that, if not correctly followed, can have impact on the availability of applications running on the Swarm during upgrades. These constraints impact any upgrades coming from any version before 18.09 to version 18.09 or later. ## 18.09.3 2019-02-28 ### Networking fixes * Windows: now avoids regeneration of network IDs to prevent broken references to networks. [docker/engine#149](https://github.com/docker/engine/pull/149) * Windows: Fixed an issue to address `- restart always` flag on standalone containers not working when specifying a network. (docker/escalation#1037) * Fixed an issue to address the IPAM state from networkdb if the manager is not attached to the overlay network. (docker/escalation#1049) ### Runtime fixes and updates * Updated to Go version 1.10.8. * Modified names in the container name generator. [docker/engine#159](https://github.com/docker/engine/pull/159) * When copying an existing folder, xattr set errors when the target filesystem doesn't support xattr are now ignored. [docker/engine#135](https://github.com/docker/engine/pull/135) * Graphdriver: fixed "device" mode not being detected if "character-device" bit is set. [docker/engine#160](https://github.com/docker/engine/pull/160) * Fixed nil pointer dereference on failure to connect to containerd. [docker/engine#162](https://github.com/docker/engine/pull/162) * Deleted stale containerd object on start failure. [docker/engine#154](https://github.com/docker/engine/pull/154) ### Known Issues * There are important changes to the upgrade process that, if not correctly followed, can have impact on the availability of applications running on the Swarm during upgrades. These constraints impact any upgrades coming from any version before 18.09 to version 18.09 or greater. ## 18.09.2 2019-02-11 ### Security fixes * Update `runc` to address a critical vulnerability that allows specially-crafted containers to gain administrative privileges on the host. [CVE-2019-5736](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736) * Ubuntu 14.04 customers using a 3.13 kernel will need to upgrade to a supported Ubuntu 4.x kernel For additional information, [refer to the Docker blog post](https://blog.docker.com/2019/02/docker-security-update-cve-2018-5736-and-container-security-best-practices/).

This document continues the release notes for Docker Engine 18.09, detailing fixes and updates for versions 18.09.4, 18.09.3 and 18.09.2. Key updates include a fix for CVE-2019-13139 in the builder, runtime fixes related to `docker cp` and resource release, increased GRPC limit, containerd updates, swarm mode fixes, networking fixes for Windows, updates to Go version 1.10.8, and a critical security fix for CVE-2019-5736, addressing a vulnerability allowing privilege escalation within containers. It also warns about important upgrade process changes impacting Swarm mode availability.