What is new in Docker Engine 26
Docker Engine 26 brings several practical improvements focused on networking reliability, image management, and overall stability. This version series refines IPv6 behavior, adds better support for Windows containers, and includes important security patches. It also continues the transition toward modern storage backends and prepares the ground for enhanced multi-platform capabilities.
Users will find more consistent network configuration, especially around IPv6 and loopback interfaces, along with fixes that make daily operations smoother for both Linux and Windows environments.
Key Highlights
- Improved IPv6 handling on container loopback interfaces when networks do not have IPv6 enabled
- Better DNS configuration for native Windows containers
- Security fixes addressing resource exposure issues in IPv6 setups
- Continued progress on containerd image store integration
- Various CLI and daemon stability enhancements
Networking Improvements
Networking received targeted refinements in the 26 series:
| Area | Change |
|---|---|
| IPv6 Behavior | IPv6 remains enabled on the container loopback interface even when the container is not attached to an IPv6-enabled network. This prevents unexpected connectivity loss in many scenarios. |
| Windows Containers | Native Windows containers now use an internal DNS server for container name resolution while still forwarding external DNS queries properly. |
| Security | Fixed unexpected resource exposure related to IPv6 on ipvlan and macvlan networks (addressed in 26.0.2). |
Security Updates
Docker Engine 26 includes important security patches:
- Addressed IPv6 interface configuration that could allow unintended link-local communication or SLAAC address assignment on shared network links
- Updated runc and other components with upstream security fixes
- General hardening around network interface setup and resource isolation
Organizations using macvlan or ipvlan networks are encouraged to upgrade to at least 26.0.2 for the resource exposure fix.
New Features and Enhancements
The release introduces several usability and compatibility improvements:
- Enhanced support for the containerd image store, bringing Docker closer to full snapshotter-based image management
- Better handling of DNS in Windows container environments
- Improved consistency in how the daemon manages network interfaces across different container types
- Refinements to CLI output and error reporting for clearer feedback
Component Updates
Docker Engine 26 keeps core dependencies up to date:
| Component | Updated Versions |
|---|---|
| BuildKit | Latest 0.13.x series |
| containerd | v1.7.x series |
| runc | Updated with security patches |
| Go runtime | 1.22.x or compatible |
These updates deliver performance gains, bug fixes, and the latest security improvements from the upstream projects.
Bug Fixes
The 26 series resolves a number of issues reported by users:
- Fixed DNS resolution behavior in native Windows containers
- Improved reliability when handling containers on networks without IPv6
- Addressed resource exposure vulnerabilities in specific network driver configurations
- Corrected various edge cases in container lifecycle and network attachment
- Enhanced stability during image operations when using the containerd store
Deprecations and Breaking Changes
As Docker Engine evolves, some older behaviors continue to be phased out:
- Certain legacy networking configurations receive reduced support
- Internal APIs and SDK elements have been cleaned up for consistency
- Some warning messages were updated to reflect current best practices
Most users can upgrade without issues, but teams relying on custom IPv6 or Windows container setups should test thoroughly.
Upgrade Recommendations
When moving to Docker Engine 26, pay special attention to your IPv6 and Windows container configurations. The networking refinements make behavior more predictable, but it is always good practice to validate critical workloads after upgrading. This release offers a balanced set of fixes and improvements suitable for both development and production use.