content/manuals/engine/release-notes/24.0.md
This page describes the latest changes, additions, known issues, and fixes for Docker Engine version 24.0.
For more information about:
{{< release-date date="2024-01-31" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
This release contains security fixes for the following CVEs affecting Docker Engine and its components.
| CVE | Component | Fix version | Severity |
|---|---|---|---|
| CVE-2024-21626 | runc | 1.1.12 | High, CVSS 8.6 |
| CVE-2024-24557 | Docker Engine | 24.0.9 | Medium, CVSS 6.9 |
[!IMPORTANT]
Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit:
To address these vulnerabilities, upgrade to Docker Engine v25.0.2.
For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the blog post.
For details about each vulnerability, see the relevant security advisory:
{{< release-date date="2024-01-25" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
docker run --rm) are no longer forcibly removed on engine restart. moby/moby#46857go1.20.13. moby/moby#47054, docker/cli#4826, docker/docker-ce-packaging#975{{< release-date date="2023-10-27" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
dockerd-rootless-setuptools.sh when username contains a backslash. moby/moby#46407dockerd --bridge=none is used. moby/moby#46702--ip-range with a range larger than the subnet. docker/for-mac#6870docker.socket not getting disabled when uninstalling the docker-ce RPM package. docker/docker-ce-packaging#852go1.20.10. docker/docker-ce-packaging#951v1.7.6 (static binaries only). moby/moby#46103containerd.io package to v1.6.24.Deny containers access to /sys/devices/virtual/powercap by default. This change hardens against
CVE-2020-8694,
CVE-2020-8695, and
CVE-2020-12912,
and an attack known as the PLATYPUS attack.
{{< release-date date="2023-09-05" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
docker ps failing when a container image is no longer present in the content store. moby/moby#46095docker ps -s -a and docker container prune failing when a container image config is no longer present in the content store. moby/moby#46097docker inspect failing when a container image config is no longer (or was never) present in the content store. moby/moby#46244overlayfs snapshotter by using reference-counted rootfs mounts. moby/moby#46266FROM scratch Dockerfile instruction with the classic builder. moby/moby#46302mismatched image rootfs and manifest layers errors with the classic builder. moby/moby#46310dockerd.exe --register-service not working when the binary is in the current directory on Windows. moby/moby#46215docker login against Docker Hub. docker/cli#4500GET /_ping when possible. docker/cli#4508docker manifest inspect an image on Docker Hub. docker/cli#4512docker events not supporting --format=json. docker/cli#4544go1.20.7. moby/moby#46140, docker/cli#4476, docker/docker-ce-packaging#932v1.7.3 (static binaries only). moby/moby#46103v2.21.0. docker/docker-ce-packaging#936{{< release-date date="2023-07-24" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
Host: header, in order to be compatible with changes introduced in go1.20.6. moby/moby#45962, moby/moby#45990Variant not being included in docker image inspect and GET /images/{name}/json. moby/moby#46025RepoDigests. moby/moby#46014EXPOSE when building containers with the legacy builder. moby/moby#45921overlay network on a non-Swarm node. moby/moby#45974auths: null is found in the CLI config file. docker/cli#4450contrib/init. docker/docker-ce-packaging#914, docker/docker-ce-packaging#926contrib/init. moby/moby#46044go1.20.6. docker/cli#4428, moby/moby#45970, docker/docker-ce-packaging#921v2.20.2. docker/docker-ce-packaging#924v0.11.2. docker/docker-ce-packaging#922{{< release-date date="2023-07-07" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
{{< release-date date="2023-07-06" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
FROM scratch in container builds. moby/moby#45822docker cp with snapshotters that cannot mount the same content multiple times. moby/moby#45780, moby/moby#45786type=image not being correctly unpacked/stored. moby/moby#45692docker load. moby/moby#45688name_to_handle_at(2) is now always allowed in the default seccomp profile. moby/moby#45833host-gateway with BuildKit by passing the IP as a label (also requires docker/buildx#1894). moby/moby#45790POST /containers/{id}/stop would forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. moby/moby#45774docker cp -a from the root (/) directory would fail. moby/moby#45748GET /info. moby/moby#45856docker info when only the client is in debug mode. docker/cli#4393go1.20.5. moby/moby#45745, docker/cli#4351, docker/docker-ce-packaging#904v2.19.1. docker/docker-ce-packaging#916v0.11.1. docker/docker-ce-packaging#918{{< release-date date="2023-05-26" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
exit code: 4294967295 when performing many concurrent build stages. moby/moby#45620etc/hosts (%WINDIR%\System32\Drivers\etc\hosts), including resolution of localhost. moby/moby#45562docker exec commands to take significantly longer than expected. moby/moby#45625Created field would contain an incorrect value. moby/moby#45623v0.10.5. docker/docker-ce-packaging#900{{< release-date date="2023-05-19" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
docker pull --platform would report No such image regarding another tag pointing to the same image. moby/moby#45562docker images -a moby/moby#45588GET /images/{id}/json would return null instead of empty RepoTags and RepoDigests. moby/moby#45564POST /commit did not accept an empty request body. moby/moby#45568v2.18.1. docker/docker-ce-packaging#896{{< release-date date="2023-05-16" >}}
For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:
--host CLI flag now supports a path component in a ssh:// host address, allowing use of an alternate socket path without configuration on the remote host. docker/cli#4073docker info CLI command now reports a version and platform field. docker/cli#4180--default-network-opt to configure options for newly created networks. moby/moby#43197AF_VSOCK in the socket(2) family of syscalls in the default seccomp profile. moby/moby#44562daemon.json, enabling runtime names to be aliased and options to be passed. moby/moby#45032docker-init binary will now be discovered in FHS-compliant libexec directories, in addition to the PATH. moby/moby#45198--no-new-privileges in GET /info. moby/moby#45320docker info no longer reports IndexServiceAddress. docker/cli#4204xt_u32 kernel module from encrypted Swarm overlay networks. moby/moby#45281buildinfo in favor of standard provenance attestations. moby/moby#45097overlay storage drivers. moby/moby#45342, moby/moby#45359overlay2.override_kernel_check storage driver option. moby/moby#45368apparmor_parser from the AppArmor profiles. moby/moby#45500GET /images/json no longer represents empty RepoTags and RepoDigests as<none>:<none>/<none>@<none>. Empty arrays are returned instead on API >= 1.43. moby/moby#45068--oom-score-adjust daemon option. moby/moby#45315VirtualSize field in GET /images/json and GET /images/{id}/json. moby/moby#45346docker stack command no longer validates the build section of Compose files. docker/cli#4214overlay2 storage driver. moby/moby#44285before= and since= filters in GET /images. moby/moby#44503execDuration field to the map of event attributes. moby/moby#45494internal, l2bridge, and nat drivers. moby/swarmkit#3121, moby/moby#452911.20.4. docker/cli#4253, moby/moby#45456, docker/docker-ce-packaging#888containerd to v1.7.1. moby/moby#45537buildkit to v0.11.6. moby/moby#45367