https://docs.docker.com/engine/release-notes/

Docker官网安全更新，18.03.1-ce版本发布

Client


Fix error with merge compose file with networks docker/cli#983
Fix docker stack deploy re-deploying services after the service was updated with --force docker/cli#963
Fix docker version output alignment docker/cli#965


Runtime


Fix AppArmor profiles not being applied to docker exec processes moby/moby#36466
Don’t sort plugin mount slice moby/moby#36711
Daemon/cluster: handle partial attachment entries during configure moby/moby#36769
Bump Golang to 1.9.5 moby/moby#36779 docker/cli#986
Daemon/stats: more resilient cpu sampling moby/moby#36519
Containerd: update to 1.0.3 release moby/moby#36749
Fix Windows layer leak when write fails moby/moby#36728
Don’t make container mount unbindable moby/moby#36768
Fix Daemon panics on container export after a daemon restart moby/moby/36586
Fix digest cache being removed on autherrors moby/moby#36509
Make sure plugin container is removed on failure moby/moby#36715
Copy: avoid using all system memory with authz plugins moby/moby#36595
Relax some libcontainerd client locking moby/moby#36848
Update hcsshim to v0.6.10 to address CVE-2018-8115


Swarm Mode


Increase raft Election tick to 10 times Heartbeat tick moby/moby#36672


Networking


Gracefully remove LB endpoints from services docker/libnetwork#2112
Retry other external DNS servers on ServFail docker/libnetwork#2121
Improve scalabiltiy of bridge network isolation rules docker/libnetwork#2117
Allow for larger preset property values, do not override docker/libnetwork#2124
Prevent panics on concurrent reads/writes when calling changeNodeState docker/libnetwork#2136

Docker 是一个开源的应用容器引擎，让开发者可以打包他们的应用以及依赖包到一个可移植的镜像中，然后发布到任何流行的 Linux或Windows 机器上，也可以实现虚拟化。容器是完全使用沙箱机制，相互之间不会有任何接口。 [1]

CVE-2018-8115

暂无

暂无