---

title: CS Docker Engine 1.13 release notes description: Commercially supported Docker Engine release notes keywords: docker, engine, install, release notes redirect_from:

• /docker-trusted-registry/cs-engine/release-notes/

- /cs-engine/release-notes/

This document describes the latest changes, additions, known issues, and fixes for the commercially supported Docker Engine (CS Engine).

The CS Engine is functionally equivalent to the corresponding Docker Engine that it references. However, a commercially supported release also includes back-ported fixes (security-related and priority defects) from the open source. It incorporates defect fixes that you can use in environments where new features cannot be adopted as quickly for consistency and compatibility reasons.

Looking for the release notes for Docker CS Engine 1.12?

CS Engine 1.13.1-cs9 (2017-12-13)

• Handle cleanup DNS for attachable container to prevent leak in name resolution docker/libnetwork#1999
• When a node is removed, delete all of its attachment tasks so networks use by those tasks can be removed docker/swarmkit#2417
• Increase gRPC request timeout to 20 seconds for sending snapshots to prevent context deadline exceeded errors docker/swarmkit#2406
• Avoid using a map for log attributes to prevent panic moby/moby#34174
• Fix "raw" mode with the Splunk logging driver moby/moby#34520
• Don't unmount entire plugin manager tree on remove moby/moby#33422
• Redact secret data on secret creation moby/moby#33884
• Sort secrets and configs to ensure idempotence and prevent docker stack deploy from useless restart of services docker/cli#509
• Automatically set may_detach_mounts=1 on startup to prevent device or resource busy errors moby/moby#34886
• Don't abort when setting may_detach_mounts moby/moby#35172

CS Engine 1.13.1-cs8 (2017-11-17)

• Protect health monitor channel to prevent engine panic moby/moby#35482

CS Engine 1.13.1-cs7 (2017-10-13)

• Fix logic in network resource reaping to prevent memory leak docker/libnetwork#1944 docker/libnetwork#1960
• Increase max GRPC message size to 128MB for larger snapshots so newly added managers can successfully join docker/swarmkit#2375

CS Engine 1.13.1-cs6 (2017-08-24)

• Fix daemon panic on docker image push moby/moby#33105
• Fix panic in concurrent network creation/deletion operations docker/libnetwork#1861
• Improve network db stability under stressful situations docker/libnetwork#1860
• Enable TCP Keep-Alive in Docker client docker/cli#415
• Lock goroutine to OS thread while changing NS docker/libnetwork#1911
• Ignore PullOptions for running tasks docker/swarmkit#2351

CS Engine 1.13.1-cs5 (21 Jul 2017)

• Add more locking to storage drivers #31136
• Prevent data race on docker network connect/disconnect #33456
• Improve service discovery reliability #1796 #18078
• Fix resource leak in swarm mode #2215
• Optimize docker system df for volumes on NFS #33620
• Fix validation bug with host-mode ports in swarm mode #2177
• Fix potential crash in swarm mode #2268
• Improve network control-plane reliability #1704
• Do not error out when selinux relabeling is not supported on volume filesystem #33831
• Remove debugging code for aufs ebusy errors #31665
• Prevent resource leak on healthchecks #33781
• Fix issue where containerd supervisor may exit prematurely #32590
• Fix potential containerd crash #2
• Ensure server details are set in client even when an error is returned #33827
• Fix issue where slow/dead docker logs clients can block the container #33897
• Fix potential panic on Windows when running as a service #32244

CS Engine 1.13.1-cs4 (01 Jun 2017)

Backports all fixes from 17.03.2

Note: This release includes a fix for potential data loss under certain circumstances with the local (built-in) volume driver.

CS Engine 1.13.1-cs3

(30 Mar 2017)

Backports all fixes from 17.03.1

• Fix issue with swarm CA timeouts #2063 #2064

CS Engine 1.13.1-cs2 (23 Feb 2017)

Client

• Fix panic in docker stats --format #30776

Contrib

• Update various bash and zsh completion scripts #30823, #30945 and more...
• Block obsolete socket families in default seccomp profile - mitigates unpatched kernels' CVE-2017-6074 #29076

Networking

• Fix bug on overlay encryption keys rotation in cross-datacenter swarm #30727
• Fix side effect panic in overlay encryption and network control plane communication failure ("No installed keys could decrypt the message") on frequent swarm leader re-election #25608
• Several fixes around system responsiveness and datapath programming when using overlay network with external kv-store docker/libnetwork#1639, docker/libnetwork#1632 and more...
• Discard incoming plain vxlan packets for encrypted overlay network #31170
• Release the network attachment on allocation failure #31073
• Fix port allocation when multiple published ports map to the same target port docker/swarmkit#1835

Runtime

• Fix a deadlock in docker logs #30223
• Fix CPU spin waiting for log write events #31070
• Fix a possible crash when using journald #31231 #31263
• Fix a panic on close of nil channel #31274
• Fix duplicate mount point for --volumes-from in docker run #29563
• Fix --cache-from does not cache last step #31189
• Fix issue with lock contention while performing container size calculation #31159

Swarm Mode

• Shutdown leaks an error when the container was never started #31279
• Fix possibility of tasks getting stuck in the "NEW" state during a leader failover docker/swarmkit#1938
• Fix extraneous task creations for global services that led to confusing replica counts in docker service ls docker/swarmkit#1957
• Fix problem that made rolling updates slow when task-history-limit was set to 1 docker/swarmkit#1948
• Restart tasks elsewhere, if appropriate, when they are shut down as a result of nodes no longer satisfying constraints docker/swarmkit#1958

CS Engine 1.13.1-cs1 (08 Feb 2017)

Refer to the detailed lists of changes since the release of CS Engine 1.12.6-cs8 by reviewing the changes in v1.13.0 and v1.13.1.