Docker Desktop Releases: Bug Fixes, Security Updates, and Deprecations in 4.31.0 and 4.30.0

- Fixed a bug where the **Update** screen was hidden when using [Settings Management](/manuals/security/for-admins/hardened-desktop/settings-management/_index.md). - Fixed a bug where proxy settings defined in `admin-settings.json` were not applied correctly on startup. - Fixed a bug where the **Manage Synchronized file shares with Compose** toggle did not correctly reflect the value with the feature. - Fixed a bug where a bind mounted file modified on host is not updated after the container restarts, when gRPC FUSE file sharing is used on macOS and on Windows with Hyper-V. Fixes [docker/for-mac#7274](https://github.com/docker/for-mac/issues/7274), [docker/for-win#14060](https://github.com/docker/for-win/issues/14060). - Builds view: - New [Import builds](use-desktop/builds.md#import-builds) feature that lets you import build records for builds by other people, or [builds in a CI environment](/manuals/build/ci/github-actions/build-summary.md). - Fixed missing OpenTelemetry traces in build results for failed builds. - Fixed `default-load` appearing as invalid driver-opt for the container driver. - Fixed deep link to build details. #### For Windows - Changed the `--allowed-org` installer flag to write a policy registry key instead of to the `registry.json`. #### For Mac - Moved the setting **Automatically check configuration** from **Advanced** settings to **General** settings. - Improved VirtioFS caching by implementing longer attributes timeout and invalidation. #### For Linux - Added Linux headers to the VM, to ease the compilation of custom kernel modules. ### Security #### For all platforms - Fixed a security bug in Enhanced Container Isolation (ECI) mode where a user could create Docker volumes sourced from restricted directories inside the Docker Desktop VM and mount them into containers, thereby giving the container access to such restricted VM directories. - By default, only extensions listed in the marketplace can be installed in Docker Desktop. This can be changed in Docker Desktop's settings. Extension developers will need to change this option in order to test their extensions. ### For Windows - Fixed [CVE-2024-5652](https://www.cve.org/cverecord?id=CVE-2024-5652) in which a user in the `docker-users` group can cause a Windows Denial-of-Service through the `exec-path` Docker daemon config option in Windows containers mode. This vulnerability was discovered by Hashim Jawad ([@ihack4falafel](https://github.com/ihack4falafel)) working with Trend Micro Zero Day Initiative. ### Deprecation #### For all platforms - The CLI binary that used to be shipped as `com.docker.cli` is now shipped simply as `docker`. This release leaves the CLI binary as `com.docker.cli`, but it will be removed next release. #### For Windows - Removed support for legacy version packs from the WSL2 engine. ### Known Issues #### For Windows - When upgrading to Docker Desktop 4.31.0, existing containers, images and volumes become invisible for users that created those containers and images using Docker Desktop 4.8.0 or lower, on Windows hosts with WSL only. The data is not lost, it just becomes invisible to Docker Desktop 4.31.0. If impacted, downgrade to version 4.30 or earlier. For more information see: [docker/for-win#14118](https://github.com/docker/for-win/issues/14118). #### For Linux - Ubuntu 24.04 LTS is not yet supported, Docker Desktop will fail to start. Due to a change in how the latest Ubuntu release restricts the unprivileged namespaces, `sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0` needs to be ran at least once. Refer to the [Ubuntu Blog](https://ubuntu.com/blog/). ## 4.30.0 {{< release-date date="2024-05-06" >}} {{< desktop-install all=true beta_win_arm=true version="4.30.0" build_path="/149282/" >}} ### New #### For all platforms - Docker Desktop now supports [SOCKS5 proxies](/manuals/desktop/features/networking.md#socks5-proxy-support). Requires a Business subscription. - Added a new setting to manage the onboarding survey in [Settings Management](/manuals/security/for-admins/hardened-desktop/settings-management/_index.md).

This document summarizes updates to Docker Desktop versions 4.31.0 and 4.30.0. Version 4.31.0 includes bug fixes for the Update screen, proxy settings, synchronized file share toggle, and bind mount updates. It introduces a new 'Import builds' feature and fixes Builds view issues. Changes were made to the `--allowed-org` flag on Windows and VirtioFS caching on Mac. Linux headers were added to the VM. Security updates include a fix for ECI mode and a Windows vulnerability (CVE-2024-5652). The `com.docker.cli` binary is deprecated, and legacy version packs are removed from WSL2 on Windows. Known issues include container/image visibility on Windows and Ubuntu 24.04 LTS incompatibility. Version 4.30.0 introduces SOCKS5 proxies and a new setting for the onboarding survey.