Add security fix to the Docker Desktop 4.19 release notes (#17235)

Co-authored-by: Allie Sadler <102604716+aevesdocker@users.noreply.github.com>
This commit is contained in:
Gabriela Georgieva
2023-05-03 14:22:58 +02:00
committed by GitHub
parent 5810863381
commit a3fab9bf80

View File

@@ -92,6 +92,7 @@ For frequently asked questions about Docker Desktop releases, see [FAQs](faqs/ge
#### For all platforms
- Fixed a security issue allowing users to bypass Image Access Management (IAM) restrictions configured by their organisation by avoiding `registry.json` enforced login via deleting the `credsStore` key from their Docker CLI configuration file. Only affects Docker Business customers.
- Fixed [CVE-2023-24532](https://github.com/advisories/GHSA-x2w5-7wp4-5qff).
- Fixed [CVE-2023-25809](https://github.com/advisories/GHSA-m8cg-xc2p-r3fc).
- Fixed [CVE-2023-27561](https://github.com/advisories/GHSA-vpvm-3wq2-2wvm).