Portainer 2.39.5

2.39.5

Release 2.39.5 LTS

Changed 1
  • Improved Edge tunnel reliability over high-latency links by not tearing down a half-established tunnel on timeout, adding keep-alive and unlimited background retries on the agent, and raising the ping timeout from 3s to 8s
Fixed 5
  • Fixed a 2.39.4 regression where a relative env_file: in a Git stack whose compose file lives in a repository sub-directory was resolved against the project root instead of the compose file's own directory
  • Fixed standard users not seeing all of their teams in access control selectors due to FilterUserTeams incorrectly dropping teams
  • Fixed deleting images from the Swarm image list only removing them from a single node instead of every node they exist on
  • Fixed a potential block where a Docker stack deployment exceeding the internal 15-minute timeout left the stack stuck in Deploying status
  • Fixed the environment details view always showing the default poll frequency for Edge environments instead of the saved value
Security 2
  • Upgraded the Alpine base image from 3.23.4 to 3.24.1 to address OS-level package CVEs including jq advisories CVE-2026-32316 and CVE-2026-40164
  • Upgraded github.com/containerd/containerd/v2 to 2.2.5 to address CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262, and CVE-2026-50195
Known issues
  • On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot
Known issues with Podman support
  • Podman environments aren't supported by auto-onboarding script
  • It's not possible to add Podman environments via socket, when running a Portainer server on Docker (and vice versa)
  • Support for only CentOS 9, Podman 5 rootful
Changes
  • Fixed a 2.39.4 regression where a relative env_file: in a Git stack whose compose file lives in a repository sub-directory was resolved against the project root instead of the compose file's own directory, deploying stacks with an empty environment or failing outright
  • Improved Edge tunnel reliability over high-latency links (satellite/VSAT): the server no longer tears down a half-established tunnel on timeout, keep-alive and unlimited background retries were added on the agent, and the ping timeout was raised from 3s to 8s
  • Fixed standard users not seeing all of their teams in access control selectors (e.g. when restricting access on a newly created Docker Config), caused by FilterUserTeams incorrectly dropping teams
  • Fixed deleting images from the Swarm image list only removing them from a single node instead of every node they exist on
  • Fixed a potential block where a Docker stack deployment exceeding the internal 15-minute timeout left the stack stuck in "Deploying" status, preventing further redeployments
  • Fixed the environment details view always showing the default poll frequency for Edge environments instead of the saved value
  • Upgraded the Alpine base image from 3.23.4 to 3.24.1 to address OS-level package CVEs, including the jq advisories (CVE-2026-32316, CVE-2026-40164 and others)
  • Upgraded github.com/containerd/containerd/v2 to 2.2.5 to address the following CVEs:
    • CVE-2026-53488,
    • CVE-2026-53492,
    • CVE-2026-53489,
    • CVE-2026-47262,
    • CVE-2026-50195
Deprecated and removed features

Deprecated features

  • None

Removed features

  • None
View original

Upgraded? How did it go?

Discussion