Docker Desktop Updates: Versions 4.3.2 to 4.4.2 - Security Fixes, New Features, and Bug Resolutions

- After logging in, when the Dashboard receives focus, it sometimes stays in the foreground even when clicking a background window. As a workaround you need to click the Dashboard before clicking another application window. - The tips of the week show on top of the mandatory login dialog when an organization restriction is enabled via a `registry.json` file. ## 4.4.2 {{< release-date date="22-01-13" >}} ### New - Easy, Secure sign in with Auth0 and Single Sign-on - Single Sign-on: Users with a Docker Business subscription can now configure SSO to authenticate using their identity providers (IdPs) to access Docker. For more information, see [Single Sign-on](../security/for-admins/single-sign-on/_index.md). - Signing in to Docker Desktop now takes you through the browser so that you get all the benefits of auto-filling from password managers. ### Upgrades - [Docker Engine v20.10.12](/manuals/engine/release-notes/20.10.md#201012) - [Compose v2.2.3](https://github.com/docker/compose/releases/tag/v2.2.3) - [Kubernetes 1.22.5](https://github.com/kubernetes/kubernetes/releases/tag/v1.22.5) - [docker scan v0.16.0](https://github.com/docker/scan-cli-plugin/releases/tag/v0.16.0) ### Security - Fixed [CVE-2021-45449](../security/_index.md#cve-2021-45449) that affects users currently on Docker Desktop version 4.3.0 or 4.3.1. Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files. ### Bug fixes and enhancements #### For all platforms - Docker Desktop displays an error if `registry.json` contains more than one organization in the `allowedOrgs` field. If you are using multiple organizations for different groups of developers, you must provision a separate `registry.json` file for each group. - Fixed a regression in Compose that reverted the container name separator from `-` to `_`. Fixes [docker/compose-switch](https://github.com/docker/compose-switch/issues/24). #### For Mac - Fixed the memory statistics for containers in the Dashboard. Fixes [docker/for-mac/#4774](https://github.com/docker/for-mac/issues/6076). - Added a deprecated option to `settings.json`: `"deprecatedCgroupv1": true`, which switches the Linux environment back to cgroups v1. If your software requires cgroups v1, you should update it to be compatible with cgroups v2. Although cgroups v1 should continue to work, it is likely that some future features will depend on cgroups v2. It is also possible that some Linux kernel bugs will only be fixed with cgroups v2. - Fixed an issue where putting the machine to Sleep mode after pausing Docker Desktop results in Docker Desktop not being able to resume from pause after the machine comes out of Sleep mode. Fixes [for-mac#6058](https://github.com/docker/for-mac/issues/6058). #### For Windows - Doing a `Reset to factory defaults` no longer shuts down Docker Desktop. ### Known issues #### For all platforms - The tips of the week show on top of the mandatory login dialog when an organization restriction is enabled via a `registry.json` file. #### For Windows - Clicking **Proceed to Desktop** after logging in in the browser, sometimes does not bring the Dashboard to the front. - After logging in, when the Dashboard receives focus, it sometimes stays in the foreground even when clicking a background window. As a workaround you need to click the Dashboard before clicking another application window. - When the Dashboard is open, even if it does not have focus or is minimized, it will still catch keyboard shortcuts (e.g. ctrl-r for Restart) ## 4.3.2 {{< release-date date="2021-12-21" >}} ### Security - Fixed [CVE-2021-45449](../security/_index.md#cve-2021-45449) that affects users currently on Docker Desktop version 4.3.0 or 4.3.1.

This document outlines updates from Docker Desktop versions 4.3.2 to 4.4.2. Both versions 4.3.2 and 4.4.2 address CVE-2021-45449, a security vulnerability affecting versions 4.3.0 and 4.3.1. Version 4.4.2 introduces easy and secure sign-in with Auth0 and Single Sign-On, and upgrades Docker Engine, Compose, Kubernetes, and docker scan. Bug fixes include handling multiple organizations in `registry.json`, restoring the container name separator in Compose, fixing memory statistics in the Dashboard on Mac, adding a deprecated option for cgroups v1, and resolving issues with sleep mode and factory resets. Known issues pertain to the Dashboard's focus behavior and keyboard shortcut capturing, as well as the placement of tips of the week during login when using organization restrictions.