2.39.5
Release 2.39.5 LTS
Changed 1
- Improved Edge tunnel reliability over high-latency links by not tearing down a half-established tunnel on timeout, adding keep-alive and unlimited background retries on the agent, and raising the ping timeout from 3s to 8s
Fixed 5
- Fixed a 2.39.4 regression where a relative env_file: in a Git stack whose compose file lives in a repository sub-directory was resolved against the project root instead of the compose file's own directory
- Fixed standard users not seeing all of their teams in access control selectors due to FilterUserTeams incorrectly dropping teams
- Fixed deleting images from the Swarm image list only removing them from a single node instead of every node they exist on
- Fixed a potential block where a Docker stack deployment exceeding the internal 15-minute timeout left the stack stuck in Deploying status
- Fixed the environment details view always showing the default poll frequency for Edge environments instead of the saved value
Security 2
- Upgraded the Alpine base image from 3.23.4 to 3.24.1 to address OS-level package CVEs including jq advisories CVE-2026-32316 and CVE-2026-40164
- Upgraded github.com/containerd/containerd/v2 to 2.2.5 to address CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262, and CVE-2026-50195
Known issues
- On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot
Known issues with Podman support
- Podman environments aren't supported by auto-onboarding script
- It's not possible to add Podman environments via socket, when running a Portainer server on Docker (and vice versa)
- Support for only CentOS 9, Podman 5 rootful
Changes
- Fixed a 2.39.4 regression where a relative
env_file:in a Git stack whose compose file lives in a repository sub-directory was resolved against the project root instead of the compose file's own directory, deploying stacks with an empty environment or failing outright - Improved Edge tunnel reliability over high-latency links (satellite/VSAT): the server no longer tears down a half-established tunnel on timeout, keep-alive and unlimited background retries were added on the agent, and the ping timeout was raised from 3s to 8s
- Fixed standard users not seeing all of their teams in access control selectors (e.g. when restricting access on a newly created Docker Config), caused by
FilterUserTeamsincorrectly dropping teams - Fixed deleting images from the Swarm image list only removing them from a single node instead of every node they exist on
- Fixed a potential block where a Docker stack deployment exceeding the internal 15-minute timeout left the stack stuck in "Deploying" status, preventing further redeployments
- Fixed the environment details view always showing the default poll frequency for Edge environments instead of the saved value
- Upgraded the Alpine base image from 3.23.4 to 3.24.1 to address OS-level package CVEs, including the jq advisories (CVE-2026-32316, CVE-2026-40164 and others)
- Upgraded
github.com/containerd/containerd/v2to 2.2.5 to address the following CVEs:- CVE-2026-53488,
- CVE-2026-53492,
- CVE-2026-53489,
- CVE-2026-47262,
- CVE-2026-50195
Deprecated and removed features
Deprecated features
- None
Removed features
- None