Docker Desktop 4.16.x Bug Fixes, Enhancements, and Security Updates

- Added support for running under cgroupv2 on WSL 2. This is activated by adding `kernelCommandLine = systemd.unified_cgroup_hierarchy=1 cgroup_no_v1=all` to your `%USERPROFILE%\.wslconfig` file in the `[wsl2]` section. - Fixed an issue that caused Docker Desktop to get stuck in the "starting" phase when in WSL 2 mode (introduced in 4.16). - Fixed Docker Desktop failing to start the WSL 2 backend when file system compression or encryption is enabled on `%LOCALAPPDATA%`. - Fixed Docker Desktop failing to report a missing or outdated (incapable of running WSL version 2 distributions) WSL installation when starting. - Fixed a bug where opening in Visual Studio Code fails if the target path has a space. - Fixed a bug that causes `~/.docker/context` corruption and the error message "unexpected end of JSON input". You can also remove `~/.docker/context` to work around this problem. - Ensured the credential helper used in WSL 2 is properly signed. Related to [docker/for-win#10247](https://github.com/docker/for-win/issues/10247). - Fixed an issue that caused WSL integration agents to be terminated erroneously. Related to [docker/for-win#13202](https://github.com/docker/for-win/issues/13202). - Fixed corrupt contexts on start. Fixes [docker/for-win#13180](https://github.com/docker/for-win/issues/13180) and [docker/for-win#12561](https://github.com/docker/for-win/issues/12561). ### For Linux - Added Docker Buildx plugin for Docker Desktop for Linux. - Changed compression algorithm to `xz` for RPM and Arch Linux distribution. - Fixed a bug that caused leftover files to be left in the root directory of the Debian package. Fixes [docker/for-linux#123](https://github.com/docker/desktop-linux/issues/123). ### Security #### For all platforms - Fixed [CVE-2023-0628](https://www.cve.org/cverecord?id=CVE-2023-0628), which allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious `docker-desktop://` URL. - Fixed [CVE-2023-0629](https://www.cve.org/cverecord?id=CVE-2023-0629), which allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to `docker.raw.sock`, or `npipe:////.pipe/docker_engine_linux` on Windows, via the `-H` (`--host`) CLI flag or the `DOCKER_HOST` environment variable and launch containers without the additional hardening features provided by ECI. This does not affect already running containers, nor containers launched through the usual approach (without Docker's raw socket). ## 4.16.3 {{< release-date date="2023-01-30" >}} ### Bug fixes and enhancements #### For Windows - Fixed Docker Desktop failing to start the WSL 2 backend when file system compression or encryption is enabled on `%LOCALAPPDATA%`. Fixes [docker/for-win#13184](https://github.com/docker/for-win/issues/13184). - Fixed Docker Desktop failing to report a missing or outdated WSL installation when starting. Fixes [docker/for-win#13184](https://github.com/docker/for-win/issues/13184). ## 4.16.2 {{< release-date date="2023-01-19" >}} ### Bug fixes and enhancements #### For all platforms - Fixed an issue where `docker build` and `docker tag` commands produced an `image already exists` error if the containerd integration feature is enabled. - Fixed a regression introduced with Docker Desktop 4.16 breaking networking from containers with target platform linux/386 on amd64 systems. Fixes [docker/for-mac/6689](https://github.com/docker/for-mac/issues/6689). #### For Mac - Fixed the capitalization of `Info.plist` which caused `vmnetd` to break on case-sensitive file systems. Fixes [docker/for-mac/6677](https://github.com/docker/for-mac/issues/6677). #### For Windows - Fixed a regression introduced with Docker Desktop 4.16 causing it to get stuck in the "starting" phase when in WSL2 mode. Fixes [docker/for-win/13165](https://github.com/docker/for-win/issues/13165) ## 4.16.1 {{< release-date date="2023-01-13" >}}

This release includes fixes and enhancements for Docker Desktop across Windows, Linux, and all platforms, as well as security updates. Windows specific updates include support for cgroupv2 on WSL2, fixes for startup issues related to WSL2, file system compression/encryption, outdated WSL installations, Visual Studio Code integration, Docker context corruption, credential helper signing, and WSL integration agent termination. For Linux, the Docker Buildx plugin is added, the compression algorithm is changed to xz, and a Debian package issue is resolved. Security updates address CVE-2023-0628 (arbitrary command execution in Dev Environments) and CVE-2023-0629 (ECI bypass). Additionally, regressions in Docker Desktop 4.16 related to image tagging, networking for linux/386 containers, Info.plist capitalization, and WSL2 startup issues are fixed.