Sourced from github.com/docker/docker's releases.
v28.3.3
28.3.3
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Security
This release fixes an issue where, after a firewalld reload, published container ports could be accessed directly from the local network, even when they were intended to be accessible only via a loopback address. CVE-2025-54388 / GHSA-x4rx-4gw3-53p4 / moby/moby#50506.
Packaging updates
- Update Buildx to v0.26.1. docker/docker-ce-packaging#1230
- Update Compose to v2.39.1. docker/docker-ce-packaging#1234
- Update Docker Model CLI plugin to v0.1.36. docker/docker-ce-packaging#1233
Go SDK
- cli/command/formatter: add
TrunateID()utility as alternative forgithub.com/docker/docker/pkg/stringid.TrunateID(). docker/cli#618028.3.2
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
- docker/cli, 28.3.2 milestone
- moby/moby, 28.3.2 milestone
- Deprecated and removed features, see Deprecated Features.
- Changes to the Engine API, see API version history.
Bug fixes and enhancements
- Fix
--use-api-socketnot working correctly when targeting a remote daemon. docker/cli#6157- Fix stray "otel error" logs being printed if debug logging is enabled. docker/cli#6160
- Quote SSH arguments when connecting to a remote daemon over an SSH connection to avoid unexpected expansion. docker/cli#6147
- Warn when
DOCKER_AUTH_CONFIGis set duringdocker loginanddocker logout. docker/cli#6163Packaging updates
- Update Compose to v2.38.2. docker/docker-ce-packaging#1225
- Update Docker Model CLI plugin to v0.1.33. docker/docker-ce-packaging#1227
- Update Go runtime to 1.24.5. moby/moby#50354
28.3.1
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
... (truncated)
bea959c
Merge pull request #50506
from robmry/backport-28.x/fix_firewalld_reload3e9ff78
bridge: Reapply endpoint iptables rules on firewalld reload29ed80a
bridge: Trigger firewalld reload during bridge integration testsda489a1
Merge pull request #50478
from thaJeztah/28.x_backport_gha_bump_bkf173e45
Merge pull request #50480
from austinvazquez/cherry-pick-ea29dffaa541289591aa...e4b1f89
daemon/server: remove compatibility with API v1.4 auth-config on
push0c9e14d
hack/buildkit-ref: temporarily bump BuildKit to head of v0.23
branchbf6d688
Merge pull request #50471
from austinvazquez/cherry-pick-b1ce0c89f0214cc6711c...4205776
client: always send (empty) body on pushe77ff99
Merge pull request #50354
from vvoland/50353-28.x