Docker Desktop 4.18.0: Enhancements, Bug Fixes, and Security Updates

- [Containerd v1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18), which includes fixes for [CVE-2023-25153](https://github.com/advisories/GHSA-259w-8hf6-59c2) and [CVE-2023-25173](https://github.com/advisories/GHSA-hmfx-3pcx-653p). - [Docker Engine v20.10.24](https://docs.docker.com/engine/release-notes/20.10/#201024), which contains fixes for [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841), [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). ### Bug fixes and enhancements #### For all platforms - [Docker Scout CLI](../scout/_index.md#docker-scout-cli) can now compare two images and display packages and vulnerabilities differences. This command is in [Early Access](../release-lifecycle.md) and might change in the future. - [Docker Scout CLI](../scout/_index.md#docker-scout-cli) now displays base image update and remediation recommendations using `docker scout recommendations`. It also displays a short overview of an image using `docker scout quickview` commands. - You can now search for extensions direct from the Marketplace, as well as using **Global Search**. - Fixed a bug where `docker buildx` container builders would lose access to the network after 24hrs. - Reduced how often users are prompted for feedback on Docker Desktop. - Removed minimum VM swap size. - Added support for subdomain match, CIDR match, `.` and `_.` in HTTP proxy exclude lists. - Fixed a bug in the transparent TLS proxy when the Server Name Indication field is not set. - Fixed a grammatical error in Docker Desktop engine status message. ### For Windows - Fixed a bug where `docker run --gpus=all` hangs. Fixes [docker/for-win#13324](https://github.com/docker/for-win/issues/13324). - Fixed a bug where Registry Access Management policy updates were not downloaded. - Docker Desktop now allows Windows containers to work when BitLocker is enabled on `C:`. - Docker Desktop with the WSL backend no longer requires the `com.docker.service` privileged service to run permanently. For more information see [Permission requirements for Windows](https://docs.docker.com/desktop/windows/permission-requirements/). ### For Mac - Fixed a performance issue where attributes stored on the host would not be cached for VirtioFS users. - The first time Docker Desktop for Mac is launched, the user is presented with an installation window to confirm or adjust the configuration that requires privileged access. For more information see [Permission requirements for Mac](https://docs.docker.com/desktop/mac/permission-requirements/). - Added the **Advanced** tab in **Settings**, where users can adjust the settings which require privileged access. ### For Linux - Fixed a bug where the VM networking crashes after 24h. [docker/for-linux#131](https://github.com/docker/desktop-linux/issues/131) ### Security #### For all platforms - Fixed [CVE-2023-1802](https://www.cve.org/cverecord?id=CVE-2023-1802) where a security issue with the Artifactory Integration would cause it to fall back to sending registry credentials over plain HTTP if HTTPS check failed. Only users who have `Access experimental features` enabled are affected. Fixes [docker/for-win#13344](https://github.com/docker/for-win/issues/13344). #### For Mac - Removed the `com.apple.security.cs.allow-dyld-environment-variables` and `com.apple.security.cs.disable-library-validation` entitlements which allow an arbitrary dynamic library to be loaded with Docker Desktop via the `DYLD_INSERT_LIBRARIES` environment variable. ### Known Issues - Uninstalling Docker Desktop on Mac from the **Troubleshoot** page might trigger an unexpected fatal error popup. ## 4.17.1 {{< release-date date="2023-03-20" >}} ### Bug fixes and enhancements #### For Windows - Docker Desktop now allows Windows containers to work when BitLocker is enabled on C: - Fixed a bug where `docker buildx` container builders would lose access to the network after 24hrs.

This section details the upgrades to Containerd and Docker Engine, including fixes for specific CVEs. It covers enhancements to Docker Scout CLI, allowing image comparison and displaying base image update/remediation recommendations. It also describes bug fixes across platforms, including network access issues with docker buildx, feedback prompts, VM swap size, HTTP proxy exclude lists, and transparent TLS proxy. Windows-specific fixes address hangs with `docker run --gpus=all` and Registry Access Management policy updates, while enabling Windows containers with BitLocker on C:. Mac-specific fixes improve performance with VirtioFS and introduce an Advanced tab in Settings. A Linux fix addresses VM networking crashes. Security fixes address CVE-2023-1802, impacting users with experimental features enabled, and remove entitlements on Mac. A known issue regarding uninstalling Docker Desktop on Mac is noted. Finally, bug fixes specific to Windows for Docker Desktop 4.17.1 are mentioned.