Docker Engine 25.0.1 and 25.0.0 Release Notes: Bug Fixes, Enhancements, and Packaging Updates

- [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv) - [CVE-2024-23651](https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv) - [CVE-2024-23652](https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8) - [CVE-2024-23653](https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g) - [CVE-2024-23650](https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx) - [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc) ### Packaging updates - Upgrade containerd to [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28). - Upgrade containerd to v1.7.13 (static binaries only). [moby/moby#47280](https://github.com/moby/moby/pull/47280) - Upgrade runc to v1.1.12. [moby/moby#47269](https://github.com/moby/moby/pull/47269) - Upgrade Compose to v2.24.5. [docker/docker-ce-packaging#985](https://github.com/docker/docker-ce-packaging/pull/985) - Upgrade BuildKit to v0.12.5. [moby/moby#47273](https://github.com/moby/moby/pull/47273) ## 25.0.1 {{< release-date date="2024-01-23" >}} For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.1) - [moby/moby, 25.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.1) ### Bug fixes and enhancements - API: Fix incorrect HTTP status code for containers with an invalid network configuration created before upgrading to Docker Engine v25.0. [moby/moby#47159](https://github.com/moby/moby/pull/47159) - Ensure that a MAC address based on a container's IP address is re-generated when the container is stopped and restarted, in case the generated IP/MAC addresses have been reused. [moby/moby#47171](https://github.com/moby/moby/pull/47171) - Fix `host-gateway-ip` not working during build when not set through configuration. [moby/moby#47192](https://github.com/moby/moby/pull/47192) - Fix a bug that prevented a container from being renamed twice. [moby/moby#47196](https://github.com/moby/moby/pull/47196) - Fix an issue causing containers to have their short ID added to their network alias when inspecting them. [moby/moby#47182](https://github.com/moby/moby/pull/47182) - Fix an issue in detecting whether a remote build context is a Git repository. [moby/moby#47136](https://github.com/moby/moby/pull/47136) - Fix an issue with layers order in OCI manifests. [moby/moby#47150](https://github.com/moby/moby/issues/47150) - Fix volume mount error when passing an `addr` or `ip` mount option. [moby/moby#47185](https://github.com/moby/moby/pull/47185) - Improve error message related to extended attributes that can't be set due to improperly namespaced attribute names. [moby/moby#47178](https://github.com/moby/moby/pull/47178) - Swarm: Fixed `start_interval` not being passed to the container config. [moby/moby#47163](https://github.com/moby/moby/pull/47163) ### Packaging updates - Upgrade Compose to `2.24.2`. [docker/docker-ce-packaging#981](https://github.com/docker/docker-ce-packaging/pull/981) ## 25.0.0 {{< release-date date="2024-01-19" >}} For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.0) - [moby/moby, 25.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.0) > [!NOTE] > > In earlier versions of Docker Engine, recursive mounts (submounts) would > always be mounted as writable, even when specifying a read-only mount. This > behavior has changed in v25.0.0, for hosts running on kernel version 5.12 or > later. Now, read-only bind mounts are **recursively read-only** by default. > > To get the same behavior as earlier releases, you can specify the > `bind-recursive` option for the `--mount` flag.

This section summarizes the bug fixes, enhancements, and packaging updates in Docker Engine versions 25.0.1 and 25.0.0. Version 25.0.1 addresses issues such as incorrect HTTP status codes for containers with invalid network configurations, MAC address re-generation on container restart, `host-gateway-ip` functionality during builds, container renaming limitations, container short ID addition to network aliases, remote build context detection, OCI manifest layer order, volume mount errors, improved error messages for extended attributes, and Swarm's `start_interval` parameter. Packaging updates include upgrading Compose to version 2.24.2. Version 25.0.0 includes a note about a change in recursive mount behavior on kernel 5.12+ hosts, where read-only bind mounts are now recursively read-only by default.