Docker Desktop 4.33.0: New Features, Upgrades, Bug Fixes, and Security Enhancements

{{< desktop-install-v2 all=true beta_win_arm=true version="4.33.0" build_path="/160616/" >}} ### New - [Docker Debug](/reference/cli/docker/debug.md) is now generally available. - BuildKit now evaluates Dockerfile rules to inform you of potential issues. - **Resource Allocation** settings can now be accessed directly from the resource usage data displayed in the Dashboard footer. - New and improved experience for [troubleshooting](/manuals/desktop/troubleshoot-and-support/troubleshoot/_index.md). ### Upgrades - [Docker Compose v2.29.1](https://github.com/docker/compose/releases/tag/v2.29.1) - [Docker Engine v27.1.1](https://docs.docker.com/engine/release-notes/27.1/#2711) - [containerd v1.7.19](https://github.com/containerd/containerd/releases/tag/v1.7.19) - [NVIDIA Container Toolkit v1.16.0](https://github.com/NVIDIA/nvidia-container-toolkit/releases/tag/v1.16.0) - [Docker Scout CLI v1.11.0](https://github.com/docker/scout-cli/releases/tag/v1.11.0) - [Kubernetes v1.30.2](https://github.com/kubernetes/kubernetes/releases/tag/v1.30.2) - Linux kernel `v6.10` ### Bug fixes and enhancements #### For all platforms - Fixed an issue that caused containers started with `--net=host` and listening on an IPv6 address to be accessible from the host. - Improved the UX for enabling the containerd image store in the **Settings** tab. - Fixed an issue that caused a deadlock seen while using the `grpcfuse` filesharing option under heavy load. - Fixed a bug where Mac-specific admin settings were impacting other platforms. - IPv6 address blocks can now be specified in Docker Engine's `default-address-pools`. - Fixed an issue with the validation of the Docker Engine's `bip`, `fixed-cidr` and `fixed-cidr-v6`. Fixes [docker/for-mac#7104](https://github.com/docker/for-mac/issues/7104). - Docker Engine's `default-network-opts` parameter is now properly validated. - VirtioFS performance improvements include increasing directory cache timeout, handling change notifications from the host, removing extra FUSE operations for security.capability attributes, optimizing host event detection, and providing an API to clean caches after container termination. - Docker Desktop now notifies when there is a port conflict in a host networking container. - Compose Bridge command line option is now available via Experimental features. When enabled, run `compose-bridge` to convert your Compose configuration to Kubernetes resources. - Builds view: - Added [build checks](/manuals/build/checks.md) to the build details' **Source** tab. - Added build tags to the build details' **Info** tab under the **Source details** section. - Newly imported builds are now highlighted. - Improved performance of error message handling. - Fixed a connection issue to the builder which prevented build records from displaying. - Fixed the navigation when opening builds through the CLI. #### For Mac - The Configuration integrity check feature now provides more context around what has changed with your Docker Desktop configuration. For more information, see the [FAQs](/manuals/desktop/troubleshoot-and-support/faqs/macfaqs.md). - The Configuration integrity check feature shows an error when it fails to repair Docker Desktop. - Fixed a bug where the IPv6 TCP was set to `host.docker.internal`. Fixes [docker/for-mac#7332](https://github.com/docker/for-mac/issues/7332). - Fixed an issue where the `docker-compose` symlink pointed to an empty location. Fixes [docker/for-mac#7345](https://github.com/docker/for-mac/issues/7345). #### For Linux - Fixed an issue where some `wincred` values were persisted after uninstall. Reported by Javier Yong [@Javiery3889](https://github.com/Javiery3889). - Fixed an issue where the notification **Another application changed your Desktop configurations** is incorrectly triggered. ### Security #### For all platforms - Includes a fix for AuthZ Plugin Bypass Regression in Docker Engine. For more information, see [CVE-2024-41110](https://www.cve.org/cverecord?id=CVE-2024-41110).

Docker Desktop 4.33.0 introduces Docker Debug, BuildKit Dockerfile rule evaluation, direct access to Resource Allocation settings, and improved troubleshooting. Upgrades include Docker Compose, Docker Engine, containerd, NVIDIA Container Toolkit, Docker Scout CLI, Kubernetes, and Linux kernel. Bug fixes address networking issues with `--net=host`, containerd image store UX, `grpcfuse` deadlock, Mac-specific admin settings affecting other platforms, IPv6 address pool specifications, Docker Engine parameter validation, VirtioFS performance, and host networking container port conflicts. Builds view improvements include build checks, tags, highlighting new builds, and performance. Mac fixes improve configuration integrity and address IPv6 TCP issues. Linux fixes address `wincred` persistence and incorrect notifications. A security fix is included for AuthZ Plugin Bypass Regression in Docker Engine (CVE-2024-41110).