Docker Desktop: Features, Updates and Security Fixes

- Added the ability to zoom in, out or set Docker Desktop to Actual Size. This is done by using keyboard shortcuts ⌘ + / CTRL +, ⌘ - / CTRL -, ⌘ 0 / CTRL 0 on Mac and Windows respectively, or through the View menu on Mac. - Added compose stop button if any related container is stoppable. - Individual compose containers are now deletable from the **Container** view. - Removed the workaround for virtiofsd <-> qemu protocol mismatch on Fedora 35, as it is no longer needed. Fedora 35 users should upgrade the qemu package to the most recent version (qemu-6.1.0-15.fc35 as of the time of writing). - Implemented an integrated terminal for containers. - Added a tooltip to display the link address for all external links by default. ### Updates - [Docker Compose v2.10.2](https://github.com/docker/compose/releases/tag/v2.10.2) - [Docker Scan v0.19.0](https://github.com/docker/scan-cli-plugin/releases/tag/v0.19.0) - [Kubernetes v1.25.0](https://github.com/kubernetes/kubernetes/releases/tag/v1.25.0) - [Go 1.19](https://github.com/golang/go/releases/tag/go1.19) - [cri-dockerd v0.2.5](https://github.com/Mirantis/cri-dockerd/releases/tag/v0.2.5) - [Buildx v0.9.1](https://github.com/docker/buildx/releases/tag/v0.9.1) - [containerd v1.6.8](https://github.com/containerd/containerd/releases/tag/v1.6.8) - [containerd v1.6.7](https://github.com/containerd/containerd/releases/tag/v1.6.7) - [runc v1.1.4](https://github.com/opencontainers/runc/releases/tag/v1.1.4) - [runc v1.1.3](https://github.com/opencontainers/runc/releases/tag/v1.1.3) ### Security #### For all platforms - Fixed [CVE-2023-0626](https://www.cve.org/cverecord?id=CVE-2023-0626) which allows RCE via query parameters in the message-box route in the Electron client. - Fixed [CVE-2023-0625](https://www.cve.org/cverecord?id=CVE-2023-0625) which allows RCE via extension description/changelog which could be abused by a malicious extension. #### For Windows - Fixed [CVE-2023-0627](https://www.cve.org/cverecord?id=CVE-2023-0627) which allows to bypass for the `--no-windows-containers` installation flag which was introduced in version 4.11. This flag allows administrators to disable the use of Windows containers. - Fixed [CVE-2023-0633](https://www.cve.org/cverecord?id=CVE-2023-0633) in which an argument injection to the Docker Desktop installer which may result in local privilege escalation. ### Bug fixes and minor enhancements #### For all platforms - Compose V2 is now enabled after factory reset. - Compose V2 is now enabled by default on new installations of Docker Desktop. - Precedence order of environment variables in Compose is more consistent, and clearly [documented](/manuals/compose/how-tos/environment-variables/envvars-precedence.md). - Upgraded kernel to 5.10.124. - Improved overall performance issues caused by calculating disk size. Related to [docker/for-win#9401](https://github.com/docker/for-win/issues/9401). - Docker Desktop now prevents users on ARM macs without Rosetta installed from switching back to Compose V1, which has only intel binaries. - Changed the default sort order to descending for volume size and the **Created** column, along with the container's **Started** column. - Re-organized container row actions by keeping only the start/stop and delete actions visible at all times, while allowing access to the rest via the row menu item. - The Quickstart guide now runs every command immediately. - Defined the sort order for container/compose **Status** column to running > some running > paused > some paused > exited > some exited > created. - Fixed issues with the image list appearing empty in Docker Desktop even though there are images. Related to [docker/for-win#12693](https://github.com/docker/for-win/issues/12693) and [docker/for-mac#6347](https://github.com/docker/for-mac/issues/6347). - Defined what images are "in use" based on whether or not system containers are displayed. If system containers related to Kubernetes and Extensions are not displayed, the related images are not defined as "in use."

This section details new features in Docker Desktop, including zoom functionality, compose stop button, deletable compose containers, integrated terminal, and tooltip for external links. It also lists updates to Docker Compose, Docker Scan, Kubernetes, Go, cri-dockerd, Buildx, containerd and runc. Security fixes for various CVEs on all platforms and specific to Windows are highlighted. It also covers bug fixes and minor enhancements, such as enabling Compose V2 after factory reset, environment variable precedence, kernel upgrade, performance improvements, default sort order changes, reorganized container row actions, quickstart guide improvements, defined sort order for container status, and fixes for image list issues.