Skip to content

Docker Desktop 4.44.0 release notes #23173

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 15 commits into from
Aug 7, 2025
+70 −1
Merged

Docker Desktop 4.44.0 release notes #23173

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
519b1fc
release 4.44.0
gabolaev Jul 28, 2025
38b6d79
edits
aevesdocker Jul 29, 2025
48aefac
edits
aevesdocker Jul 29, 2025
ca0ed6c
fix link
aevesdocker Jul 29, 2025
99c5aa5
new desktop cli command
aevesdocker Jul 29, 2025
3ca0789
wsl url bugfix
gabolaev Jul 29, 2025
87d2b3d
another 7693 fix
gabolaev Jul 29, 2025
fdb0b85
highlights
gabolaev Jul 30, 2025
468e08d
highlights
gabolaev Jul 30, 2025
b283cab
highlights
gabolaev Jul 30, 2025
44c7270
Update release-notes.md
gabolaev Jul 30, 2025
7535f78
mcp gemini and goose
gabolaev Aug 4, 2025
af89422
Update release-notes.md
gabolaev Aug 6, 2025
96b1573
Update release-notes.md
gabolaev Aug 7, 2025
3bb4ec9
Update release-notes.md
gabolaev Aug 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 54 additions & 0 deletions content/manuals/desktop/release-notes.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,60 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo
>
> If you're experiencing malware detection issues on Mac, follow the steps documented in [docker/for-mac#7527](https://github.com/docker/for-mac/issues/7527).

## 4.44.0

{{< release-date date="2025-07-31" >}}

{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.44.0" build_path="/TODO/" >}}

### New

- You can now inspect requests and responses to help you diagnose model-related issues in Docker Model Runner.
- Added the ability to run multiple models and receive a warning on insufficient resources. This avoids Docker Desktop freezing when using big models.
- Introduced `--gpu` (Windows only) and `--cors` flags for `docker desktop enable model-runner`.

### Upgrades

- [Docker Compose v2.39.1](https://github.com/docker/compose/releases/tag/v2.39.1)
- [Docker Buildx v0.26.1](https://github.com/docker/buildx/releases/tag/v0.26.1)
- [Docker Engine v28.3.2](https://docs.docker.com/engine/release-notes/28/#2832)
- [Docker Scout CLI v1.18.2](https://github.com/docker/scout-cli/releases/tag/v1.18.2)
- [Docker Model CLI v0.1.36](https://github.com/docker/model-cli/releases/tag/v0.1.36)
- [Docker Desktop CLI v0.2.0](/manuals/desktop/features/desktop-cli.md)

### Security

We are aware of [CVE-2025-23266](https://nvd.nist.gov/vuln/detail/CVE-2025-23266), a critical vulnerability affecting the NVIDIA Container Toolkit in CDI mode up to version 1.17.7. Docker Desktop includes version 1.17.8, which is not impacted. However, older versions of Docker Desktop that bundled earlier toolkit versions may be affected if CDI mode was manually enabled. Uprade to Docker Desktop 4.44 or later to ensure you're using the patched version.

### Bug fixes and enhancements

#### For all platforms

- Fixed an issue pulling images with zstd differential layers when the containerd image store is enabled.
- Fixed a bug causing containers launching with the `--restart` flag to not restart properly when using Enhanced Container Isolation.
- Improved interaction between [Kubernetes custom registry images](/manuals/desktop/features/kubernetes/#configuring-a-custom-image-registry-for-kubernetes-control-plane-images) and Enhanced Container Isolation (ECI), so the [ECI Docker Socket image list](/enterprise/security/hardened-desktop/enhanced-container-isolation/config/#image-list) no longer needs to be manually updated when using a custom registry for Kubernetes control plane images.
- Fixed a bug where a Docker Desktop Kubernetes cluster in kind mode fails to start after restarting Docker Desktop if the user is required to be signed in but is currently signed out.
- Fixed a bug that prevented the mounting of MCP secrets into containers when [Enhanced Container Isolation](/enterprise/security/hardened-desktop/enhanced-container-isolation/) is enabled.
- Fixed a bug preventing the use of `--publish-all` when `--publish` was already specified.
- Fixed a bug causing the **Images** view to scroll infinitely. Fixes [#7725](https://github.com/docker/for-mac/issues/7725).
- Fixed a bug which caused the **Volumes** tab to be blank while in Resource Saver mode.
- Updated terms of service text on first launch.

#### For Mac

- Fixed disk corruption on DockerVMM when reclaiming disk space.
- Fixed regression since 4.42.0 on DockerVMM by re-introducing performance boost on general usage.
- Removed QEMU hypervisor and switched to Apple Virtualization as the new default. See [blog post](https://www.docker.com/blog/docker-desktop-for-mac-qemu-virtualization-option-to-be-deprecated-in-90-days/).
- Fixed a bug preventing Traefik from autodetecting containers' ports. Fixes [docker/for-mac#7693](https://github.com/docker/for-mac/issues/7693).
- Removed eBPF which blocked `io_uring`. To enable `io_uring` in a container, use `--security-opt seccomp=unconfined`. Fixes [docker/for-mac#7707](https://github.com/docker/for-mac/issues/7707).

#### For Windows

- Re-added `docker-users` group to the named pipe security descriptors.
- Fixed an installer crash when the current user has no `SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall` registry key.
- Fixed a bug where Docker Desktop could leak a `com.docker.build` process and fail to start. Fixed [docker/for-win#14840](https://github.com/docker/for-win/issues/14840).
- Fixed a bug that was preventing Docker Desktop Kubernetes in kind mode from starting when using WSL with `cgroups v1` and Enhanced Container Isolation (ECI) is enabled.

## 4.43.2

{{< release-date date="2025-07-15" >}}
Expand Down
8 changes: 7 additions & 1 deletion content/manuals/security/security-announcements.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,13 @@
toc_max: 2
---

## Docker Desktop 4.43.0 Security Update: CVE-2025-6587
## Docker Desktop 4.44.0 security update: CVE-2025-23266

Check warning on line 10 in content/manuals/security/security-announcements.md

View workflow job for this annotation

GitHub Actions / validate (vale) 

[vale] reported by reviewdog 🐶
[Docker.HeadingLength] Try to keep headings short (< 8 words).

Raw Output:
{"message": "[Docker.HeadingLength] Try to keep headings short (\u003c 8 words).", "location": {"path": "content/manuals/security/security-announcements.md", "range": {"start": {"line": 10, "column": 4}}}, "severity": "INFO"}

_Last updated July 31, 2025_

We are aware of [CVE-2025-23266](https://nvd.nist.gov/vuln/detail/CVE-2025-23266), a critical vulnerability affecting the NVIDIA Container Toolkit in CDI mode up to version 1.17.7. Docker Desktop includes version 1.17.8, which is not impacted. However, older versions of Docker Desktop that bundled earlier toolkit versions may be affected if CDI mode was manually enabled. Upgrade to Docker Desktop 4.44 or later to ensure you're using the patched version.

Check warning on line 14 in content/manuals/security/security-announcements.md

View workflow job for this annotation

GitHub Actions / validate (vale) 

[vale] reported by reviewdog 🐶
[Docker.We] Avoid using first-person plural like 'We'.

Raw Output:
{"message": "[Docker.We] Avoid using first-person plural like 'We'.", "location": {"path": "content/manuals/security/security-announcements.md", "range": {"start": {"line": 14, "column": 1}}}, "severity": "WARNING"}

## Docker Desktop 4.43.0 security update: CVE-2025-6587

Check warning on line 16 in content/manuals/security/security-announcements.md

View workflow job for this annotation

GitHub Actions / validate (vale) 

[vale] reported by reviewdog 🐶
[Docker.HeadingLength] Try to keep headings short (< 8 words).

Raw Output:
{"message": "[Docker.HeadingLength] Try to keep headings short (\u003c 8 words).", "location": {"path": "content/manuals/security/security-announcements.md", "range": {"start": {"line": 16, "column": 4}}}, "severity": "INFO"}

_Last updated July 03, 2025_

Expand Down
Loading