Docker Desktop Updates & Release Notes

<em class="text-gray-400 italic dark:text-gray-500">2021-12-21</em>

Security

• Fixed CVE-2021-45449 that affects users currently on Docker Desktop version 4.3.0 or 4.3.1.

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.

Upgrades

docker scan v0.14.0

Security

Log4j 2 CVE-2021-44228: We have updated the docker scan CLI plugin. This new version of docker scan is able to detect Log4j 2 CVE-2021-44228 and Log4j 2 CVE-2021-45046

For more information, read the blog post Apache Log4j 2 CVE-2021-44228.

<em class="text-gray-400 italic dark:text-gray-500">2021-12-11</em>

Upgrades

docker scan v0.11.0

Security

Log4j 2 CVE-2021-44228: We have updated the docker scan CLI plugin for you. Older versions of docker scan in Docker Desktop 4.3.0 and earlier versions are not able to detect Log4j 2 CVE-2021-44228.

For more information, read the blog post Apache Log4j 2 CVE-2021-44228.

<em class="text-gray-400 italic dark:text-gray-500">2021-12-02</em>

Upgrades

• Docker Engine v20.10.11
• containerd v1.4.12
• Buildx 0.7.1
• Compose v2.2.1
• Kubernetes 1.22.4
• Docker Hub Tool v0.4.4
• Go 1.17.3

Bug fixes and minor changes

For all platforms

• Added a self-diagnose warning if the host lacks Internet connectivity.
• Fixed an issue which prevented users from saving files from a volume using the Save As option in the Volumes UI. Fixes docker/for-win#12407.
• Docker Desktop now uses cgroupv2. If you need to run systemd in a container then:
  • Ensure your version of systemd supports cgroupv2. It must be at least systemd 247. Consider upgrading any centos:7 images to centos:8.
  • Containers running systemd need the following options: --privileged --cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw.

For Mac …

<em class="text-gray-400 italic dark:text-gray-500">2021-11-09</em>

New

Pause/Resume: You can now pause your Docker Desktop session when you are not actively using it and save CPU resources on your machine.

• Ships Docker Public Roadmap#226

Software Updates: The option to turn off automatic check for updates is now available for users on all Docker subscriptions, including Docker Personal and Docker Pro. All update-related settings have been moved to the Software Updates section.

• Ships Docker Public Roadmap#228

Window management: The Docker Desktop Dashboard window size and position persists when you close and reopen Docker Desktop.

Upgrades

• Docker Engine v20.10.10
• containerd v1.4.11
• runc v1.0.2
• Go 1.17.2
• Compose v2.1.1
• docker-scan 0.9.0

Bug fixes and minor changes

For all platforms

• Improved: Self-diagnose now also checks for overlap between host IPs and docker networks.
• Fixed the position of the indicator that displays the availability of an update on the Docker Desktop Dashboard.

For Mac …

<em class="text-gray-400 italic dark:text-gray-500">2021-10-12</em>

Bug fixes and minor changes

For Mac

When upgrading from 4.1.0, the Docker menu does not change to Update and restart so you can just wait for the download to complete (icon changes) and then select Restart. This bug is fixed in 4.1.1, for future upgrades.

• Fixed a bug where a Docker.qcow2 file would be ignored on upgrade and a fresh Docker.raw used instead, resulting in containers and images disappearing. If a system has both files (due to the previous bug), then the most recently modified file will be used to avoid recent containers and images disappearing again. To force the use of the old Docker.qcow2, delete the newer Docker.raw file. Fixes docker/for-mac#5998.
• Fixed the update notification overlay sometimes getting out of sync between the Settings button and the Software update button in the Docker Desktop Dashboard.
• Fixed the menu entry to install a newly downloaded Docker Desktop update. When an update is ready to install, the Restart option changes to Update and restart.

For Windows

• Fixed a regression in WSL 2 integrations for some distributions (e.g. Arch or Alpine). Fixes docker/for-win#12229
• Fixed update notification overlay sometimes getting out of sync between the Settings button and the Software update button in the Dashboard.

<em class="text-gray-400 italic dark:text-gray-500">2021-09-30</em>

New

• Software Updates: The Settings tab now includes a new section to help you manage Docker Desktop updates. The Software Updates section notifies you whenever there's a new update and allows you to download the update or view information on what's included in the newer version.
• Compose V2 You can now specify whether to use Docker Compose V2 in the General settings.
• Volume Management: Volume management is now available for users on any subscription, including Docker Personal. Ships Docker Public Roadmap#215

Upgrades

• Compose V2
• Buildx 0.6.3
• Kubernetes 1.21.5
• Go 1.17.1
• Alpine 3.14
• Qemu 6.1.0
• Base distribution to debian:bullseye

Bug fixes and minor changes

For Windows

• Fixed a bug related to anti-malware software triggering, self-diagnose avoids calling the net.exe utility.
• Fixed filesystem corruption in the WSL 2 Linux VM in self-diagnose. This can be caused by microsoft/WSL#5895. …

<em class="text-gray-400 italic dark:text-gray-500">2021-09-13</em>

Upgrades

• Compose V2 RC3
  • Compose v2 is now hosted on github.com/docker/compose.
  • Fixed go panic on downscale using compose up --scale.
  • Fixed a race condition in compose run --rm while capturing exit code.

Bug fixes and minor changes

For all platforms

• Fixed a bug where copy-paste was not available in the Docker Desktop Dashboard.

For Windows

• Fixed a bug where Docker Desktop would not start correctly with the Hyper-V engine. See docker/for-win#11963

<em class="text-gray-400 italic dark:text-gray-500">2021-08-31</em>

New

Docker has announced updates and extensions to the product subscriptions to increase productivity, collaboration, and added security for our developers and businesses.

The updated Docker Subscription Service Agreement includes a change to the terms for Docker Desktop.

• Docker Desktop remains free for small businesses (fewer than 250 employees AND less than $10 million in annual revenue), personal use, education, and non-commercial open source projects.
• It requires a paid subscription (Pro, Team, or Business), for as little as $5 a month, for professional use in larger enterprises.
• The effective date of these terms is August 31, 2021. There is a grace period until January 31, 2022 for those that will require a paid subscription to use Docker Desktop.
• The Docker Pro and Docker Team subscriptions now include commercial use of Docker Desktop.
• The existing Docker Free subscription has been renamed Docker Personal.
• No changes to Docker Engine or any other upstream open source Docker or Moby project.

To understand how these changes affect you, read the FAQs. For more information, see Docker subscription overview.

Upgrades …

New

• Air-Gapped Containers is now generally available.
• Docker Compose File Viewer shows your Compose YAML with syntax highlighting and contextual links to relevant docs (Beta, progressive rollout).
• New Sidebar user experience.

Upgrades

• Docker Engine and CLI v26.1.4.
• Docker Scout CLI v1.9.1
• Docker Compose v2.27.1
• Docker Buildx v0.14.1
• Containerd v1.6.33
• Credential Helpers v0.8.2
• NVIDIA Container Toolkit v1.15.0
• Go 1.22.4
• Linux kernel v6.6.31

Bug fixes and enhancements

For all platforms

• Newer releases are now displayed in the Software updates settings tab when an update has already been downloaded.
• Added proxyEnableKerberosNTLM config to settings.json to enable fallback to basic proxy authentication if Kerberos/NTLM environment is not properly set up.
• Fixed a bug where Docker Debug was not working properly with Enhanced Container Isolation enabled. …

<em class="text-gray-400 italic dark:text-gray-500">22-01-13</em>

New

• Easy, Secure sign in with Auth0 and Single Sign-on
  • Single Sign-on: Users with a Docker Business subscription can now configure SSO to authenticate using their identity providers (IdPs) to access Docker. For more information, see Single Sign-on.
  • Signing in to Docker Desktop now takes you through the browser so that you get all the benefits of auto-filling from password managers.

Upgrades

• Docker Engine v20.10.12
• Compose v2.2.3
• Kubernetes 1.22.5
• docker scan v0.16.0

Security

• Fixed CVE-2021-45449 that affects users currently on Docker Desktop version 4.3.0 or 4.3.1.

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.

Bug fixes and enhancements

For all platforms …