29.4.1

Release date	Name	Upstream release
2026-MAY-13	MCR 29.4.1	Moby 29.4.1 and Docker CLI 29.4.1

Important

Due to the upgrade of containerd from 1.x to 2.x, before you upgrade from a previous MCR major release to MCR 29.4.1 you must upgrade containerd.io before you upgrade docker-ee. In the event that you have upgraded both components at the same time and some of the containers that should have restarted remain stopped, you can get them running again by restarting MCR with the systemctl restart docker command.

Changelog

MCR 29.4.1 comprises the Moby 29.4.1 upstream release.

Changes specific to MCR

• Fixed an issue wherein installation from FIPS channels would fail on Windows Server 2019 with a side-by-side configuration error.

Warning

gVisor is included in the MCR 29.4.1 release; however, although the packages are available, they are optional and not ready for use.

Changes from upstream

The upstream pull requests detailed in the sections that follow are those that pertain to the MCR product. For the complete list of changes and pull requests upstream, refer to the GitHub milestones.

Security

Resolution of the following CVEs:

• CVE-2026-33747

• CVE-2026-1229

• CVE-2026-33186

• CVE-2026-33748

• CVE-2026-32280

• CVE-2026-32281

• CVE-2026-32283

• CVE-2026-33997

• CVE-2026-34040

• CVE-2026-24051

• CVE-2026-39883

• CVE-2026-34986

• CVE-2026-35469

• CVE-2025-66564

GitHub milestones

The GitHub milestones offer full detail on the pull requests and changes as they correlate to the upstream Moby 26.0, 26.1, 27.0, 28.0, 28.1, 28.2, 28.3, 28.4, 28.5, 29.0, 28.1, and 29.2 releases.

• moby/moby, 29.4.1 milestone

• docker/cli, 29.4.1 milestone

Major component versions

Version detail for the major components that comprise MCR 29.4.1 is presented in the table below:

Component	Upstream Version	Mirantis Version
Moby	29.4.1	29.4.1m1
Docker CLI	29.4.1	29.4.1m1
containerd	2.2.3	2.2.3m1
runc	1.4.2	1.4.2m1
cri-dockerd	0.4.3	–
buildx	0.33.0	0.33.0m1
Fipster (Go runtime)	go1.26.2	go1.26.2-m1
buildkit	0.29.0	–
rootlesskit	2.3.6	–
gVisor	release-20260427.0	–
Docker Compose CLI plugin	5.1.3	5.1.3m1

Platform test detail

Platform	Kernel tested
Oracle Linux 9.7	5.14.0-611.49.1.el9_7.x86_64
Oracle Linux 8.10	4.18.0-553.123.1.el8_10.x86_64
RHEL 10.0	6.12.0-124.55.1.el10_1.x86_64
RHEL 9.7	5.14.0-611.49.1.el9_7.x86_64
RHEL 9.6	5.14.0-570.106.1.el9_6.x86_64
RHEL 8.10	4.18.0-553.120.1.el8_10.x86_64
Rocky 9.7	5.14.0-611.5.1.el9_7.x86_64
Rocky 8.10	4.18.0-553.el8_10.x86_64
SLES17 SP7	6.4.0-150700.53.40-default
Ubuntu 24.04	6.17.0-1013-aws
Ubuntu 22.04	6.8.0-1053-aws
Windows 2022 Core	10.0 20348