Docker Desktop 4.18.0: Bug Fixes, Security Patches, and New Features

- Reverted to fully patching etc/hosts on Windows (includes `host.docker.internal` and `gateway.docker.internal` again). For WSL, this behavior is controlled by a new setting in the **General** tab. Fixes [docker/for-win#13388](https://github.com/docker/for-win/issues/13388) and [docker/for-win#13398](https://github.com/docker/for-win/issues/13398). - Fixed a spurious `courgette.log` file appearing on the Desktop when updating Docker Desktop. Fixes [docker/for-win#12468](https://github.com/docker/for-win/issues/12468). - Fixed the "zoom in" shortcut (ctrl+=). Fixes [docker/for-win#13392](https://github.com/docker/for-win/issues/13392). - Fixed a bug where the tray menu would not correctly update after second container type switch. Fixes [docker/for-win#13379](https://github.com/docker/for-win/issues/13379). #### For Mac - Increased the performance of VM networking when using the Virtualization framework on macOS Ventura and above. Docker Desktop for Mac now uses gVisor instead of VPNKit. To continue using VPNKit, add `"networkType":"vpnkit"` to your `settings.json` file located at `~/Library/Group Containers/group.com.docker/settings.json`. - Fixed a bug where an error window is displayed on uninstall. - Fixed a bug where the setting `deprecatedCgroupv1` was ignored. Fixes [docker/for-mac#6801](https://github.com/docker/for-mac/issues/6801). - Fixed cases where `docker pull` would return `EOF`. #### For Linux - Fixed a bug where the VM networking crashes after 24h. Fixes [docker/desktop-linux#131](https://github.com/docker/desktop-linux/issues/131). ### Security #### For all platforms - Fixed a security issue allowing users to bypass Image Access Management (IAM) restrictions configured by their organisation by avoiding `registry.json` enforced login via deleting the `credsStore` key from their Docker CLI configuration file. Only affects Docker Business customers. - Fixed [CVE-2023-24532](https://github.com/advisories/GHSA-x2w5-7wp4-5qff). - Fixed [CVE-2023-25809](https://github.com/advisories/GHSA-m8cg-xc2p-r3fc). - Fixed [CVE-2023-27561](https://github.com/advisories/GHSA-vpvm-3wq2-2wvm). - Fixed [CVE-2023-28642](https://github.com/advisories/GHSA-g2j6-57v7-gm8c). - Fixed [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840). - Fixed [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841). - Fixed [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). ## 4.18.0 {{< release-date date="2023-04-03" >}} ### New - Initial beta release of `docker init` as per [the roadmap](https://github.com/docker/roadmap/issues/453). - Added a new **Learning Center** tab to help users get started with Docker. - Added an experimental file-watch command to Docker Compose that automatically updates your running Compose services as you edit and save your code. ### Upgrades - [Buildx v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4) - [Compose 2.17.2](https://github.com/docker/compose/releases/tag/v2.17.2) - [Containerd v1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18), which includes fixes for [CVE-2023-25153](https://github.com/advisories/GHSA-259w-8hf6-59c2) and [CVE-2023-25173](https://github.com/advisories/GHSA-hmfx-3pcx-653p). - [Docker Engine v20.10.24](https://docs.docker.com/engine/release-notes/20.10/#201024), which contains fixes for [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841), [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). ### Bug fixes and enhancements #### For all platforms - [Docker Scout CLI](../scout/_index.md#docker-scout-cli) can now compare two images and display packages and vulnerabilities differences. This command is in [Early Access](../release-lifecycle.md) and might change in the future. - [Docker Scout CLI](../scout/_index.md#docker-scout-cli) now displays base image update and remediation recommendations using `docker scout recommendations`. It also displays a short overview of an image using `docker scout quickview` commands.

This section covers bug fixes for Windows, Mac, and Linux platforms, including issues with etc/hosts patching, courgette.log, zoom shortcut, tray menu updates, VM networking performance, uninstall errors, ignored deprecatedCgroupv1 setting, docker pull EOF errors, and VM networking crashes. It also details security fixes for CVE-2023-24532, CVE-2023-25809, CVE-2023-27561, CVE-2023-28642, CVE-2023-28840, CVE-2023-28841, and CVE-2023-28842, along with a security issue related to bypassing Image Access Management. The release includes new features like docker init (beta), a Learning Center tab, and an experimental file-watch command for Docker Compose. Upgrades include Buildx, Compose, Containerd (with CVE-2023-25153 and CVE-2023-25173 fixes), and Docker Engine (with CVE-2023-28841, CVE-2023-28840, and CVE-2023-28842 fixes). Docker Scout CLI improvements include image comparison and base image update/remediation recommendations.