Add http1Options and strictSingleValueFields options to http2 for HTTP/1 fallback and relaxed header validation
Docker changelog digest
Feb 23 - Mar 1, 2026. Useful releases, risky migrations, and noisy updates from the Docker channel.
No matching updates in this bucket.
Docker updates in 2026-w09
Add new options and APIs: async_hooks.trackPromises, fs.watch ignore, http.setGlobalProxyFromEnv, module subpath imports starting with '/', stream.bytes() consumer, and test runner env and fail‑expectation options.
Imported from changelog source; review and generate a concise summary before publishing.
Fixed a security vulnerability where crafted CRLF sequences in Redis error replies could be used to manipulate data read by a connection.
Fix a vulnerability where CR\r\n sequences could be injected into Redis error replies, allowing data manipulation by a malicious user.
Fix prevents data manipulation by injecting CRLF sequences into Redis error replies
Fix for CRLF injection in Redis error replies
Fixed a security issue where injected CRLF sequences could manipulate data read from Redis error replies.