Docker Desktop Updates: Versions 4.3.0-4.3.2 - Log4j Patch, cgroupv2, and Bug Fixes

- Fixed an issue where putting the machine to Sleep mode after pausing Docker Desktop results in Docker Desktop not being able to resume from pause after the machine comes out of Sleep mode. Fixes [for-mac#6058](https://github.com/docker/for-mac/issues/6058). #### For Windows - Doing a `Reset to factory defaults` no longer shuts down Docker Desktop. ### Known issues #### For all platforms - The tips of the week show on top of the mandatory login dialog when an organization restriction is enabled via a `registry.json` file. #### For Windows - Clicking **Proceed to Desktop** after logging in in the browser, sometimes does not bring the Dashboard to the front. - After logging in, when the Dashboard receives focus, it sometimes stays in the foreground even when clicking a background window. As a workaround you need to click the Dashboard before clicking another application window. - When the Dashboard is open, even if it does not have focus or is minimized, it will still catch keyboard shortcuts (e.g. ctrl-r for Restart) ## 4.3.2 {{< release-date date="2021-12-21" >}} ### Security - Fixed [CVE-2021-45449](../security/_index.md#cve-2021-45449) that affects users currently on Docker Desktop version 4.3.0 or 4.3.1. Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files. ### Upgrades [docker scan v0.14.0](https://github.com/docker/scan-cli-plugin/releases/tag/v0.14.0) ### Security **Log4j 2 CVE-2021-44228**: We have updated the `docker scan` CLI plugin. This new version of `docker scan` is able to detect [Log4j 2 CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) and [Log4j 2 CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046) For more information, read the blog post [Apache Log4j 2 CVE-2021-44228](https://www.docker.com/blog/apache-log4j-2-cve-2021-44228/). ## 4.3.1 {{< release-date date="2021-12-11" >}} ### Upgrades [docker scan v0.11.0](https://github.com/docker/scan-cli-plugin/releases/tag/v0.11.0) ### Security **Log4j 2 CVE-2021-44228**: We have updated the `docker scan` CLI plugin for you. Older versions of `docker scan` in Docker Desktop 4.3.0 and earlier versions are not able to detect [Log4j 2 CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228). For more information, read the blog post [Apache Log4j 2 CVE-2021-44228](https://www.docker.com/blog/apache-log4j-2-cve-2021-44228/). ## 4.3.0 {{< release-date date="2021-12-02" >}} ### Upgrades - [Docker Engine v20.10.11](/manuals/engine/release-notes/20.10.md#201011) - [containerd v1.4.12](https://github.com/containerd/containerd/releases/tag/v1.4.12) - [Buildx 0.7.1](https://github.com/docker/buildx/releases/tag/v0.7.1) - [Compose v2.2.1](https://github.com/docker/compose/releases/tag/v2.2.1) - [Kubernetes 1.22.4](https://github.com/kubernetes/kubernetes/releases/tag/v1.22.4) - [Docker Hub Tool v0.4.4](https://github.com/docker/hub-tool/releases/tag/v0.4.4) - [Go 1.17.3](https://golang.org/doc/go1.17) ### Bug fixes and minor changes #### For all platforms - Added a self-diagnose warning if the host lacks Internet connectivity. - Fixed an issue which prevented users from saving files from a volume using the Save As option in the Volumes UI. Fixes [docker/for-win#12407](https://github.com/docker/for-win/issues/12407). - Docker Desktop now uses cgroupv2. If you need to run `systemd` in a container then: - Ensure your version of `systemd` supports cgroupv2. [It must be at least `systemd` 247](https://github.com/systemd/systemd/issues/19760#issuecomment-851565075). Consider upgrading any `centos:7` images to `centos:8`. - Containers running `systemd` need the following options: [`--privileged --cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw`](https://serverfault.com/questions/1053187/systemd-fails-to-run-in-a-docker-container-when-using-cgroupv2-cgroupns-priva).

This document details updates to Docker Desktop from versions 4.3.0 to 4.3.2. These releases focus on security updates, particularly addressing the Log4j 2 CVE-2021-44228 vulnerability through updates to the `docker scan` CLI plugin in versions 4.3.1 and 4.3.2. Version 4.3.0 introduces cgroupv2 support, requires systemd 247 or later for containers running systemd, and includes other bug fixes and minor changes for all platforms. Additionally, version 4.3.2 addresses security issues related to sensitive information logging in versions 4.3.0 and 4.3.1. Known issues across platforms include the tips of the week showing on top of the mandatory login dialog and specific Windows-related problems with the Dashboard's focus and keyboard shortcut behavior.