From 1e228bf1f4aa72d1bb0a84d2e73be2c388cdd60c Mon Sep 17 00:00:00 2001 From: aevesdocker Date: Wed, 21 Oct 2026 14:21:13 +0100 Subject: [PATCH 1/6] 4.96.2 RN Signed-off-by: aevesdocker --- content/manuals/desktop/release-notes.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index 4b0c3fb1994..95961497d4a 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -24,6 +24,28 @@ Docker Desktop versions older than 6 months from the latest release are not avai For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoot-and-support/faqs/releases.md). +## 4.96.2 + +{{< release-date date="2026-10-21" >}} + +{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.96.2" build_path="/XXXXXX/" >}} + +### Updates + +- [Docker Compose v5.6.1](https://github.com/docker/compose/releases/tag/v5.6.1) +- Docker Offload `v0.7.6` +- [Docker Agent v1.152.0](https://github.com/docker/docker-agent/releases/tag/v1.152.0) +- [Docker Hardened Images CLI (`dhictl`) v0.0.9](https://github.com/docker-hardened-images/dhictl/releases/tag/v0.0.9) +- [Docker Scout CLI v1.27.0](https://github.com/docker/scout-cli/releases/tag/v1.27.0) + +### Security + +- Removed trust for certificates issued by the compromised [eMudhra intermediate CA compromise](https://emudhra.we-have-a-problem.com/). An attacker with network access could have used these certificates to intercept TLS connections made by non-browser clients, such as the Docker CLI and daemon. + +> [!IMPORTANT] +> +> This fix is being rolled out in batches as individual Docker Desktop components are updated. Upcoming patch releases will cover the remaining components. We recommend updating to each patch release as soon as it’s available. + ## 4.96.1 {{< release-date date="2026-10-21" >}} From 15fc52990df5f0f4444ae30d44a56183fa9a060c Mon Sep 17 00:00:00 2001 From: aevesdocker Date: Wed, 21 Oct 2026 17:03:25 +0100 Subject: [PATCH 2/6] 4.96.2-rn Signed-off-by: aevesdocker --- content/manuals/desktop/release-notes.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index 95961497d4a..dd42baf02d4 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -37,10 +37,13 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo - [Docker Agent v1.152.0](https://github.com/docker/docker-agent/releases/tag/v1.152.0) - [Docker Hardened Images CLI (`dhictl`) v0.0.9](https://github.com/docker-hardened-images/dhictl/releases/tag/v0.0.9) - [Docker Scout CLI v1.27.0](https://github.com/docker/scout-cli/releases/tag/v1.27.0) +- Docker Desktop Build `v0.39.1` ### Security - Removed trust for certificates issued by the compromised [eMudhra intermediate CA compromise](https://emudhra.we-have-a-problem.com/). An attacker with network access could have used these certificates to intercept TLS connections made by non-browser clients, such as the Docker CLI and daemon. + - Updated the Docker Extensions CLI to v0.2.32, built with Go 1.27.3, which stops trusting the compromised eMudhra certificate authority and fixes CVE-2026-111943. + - Removed the bundled `docker-credential-ecr-login` AWS ECR credential helper. Install it separately if you need it. > [!IMPORTANT] > From 655255e58d182186b728468b14f162b0c05815a5 Mon Sep 17 00:00:00 2001 From: aevesdocker Date: Wed, 21 Oct 2026 17:04:37 +0100 Subject: [PATCH 3/6] 4.96.2-rn Signed-off-by: aevesdocker --- content/manuals/desktop/release-notes.md | 1 - 1 file changed, 1 deletion(-) diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index dd42baf02d4..0cfcb7603c1 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -36,7 +36,6 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo - Docker Offload `v0.7.6` - [Docker Agent v1.152.0](https://github.com/docker/docker-agent/releases/tag/v1.152.0) - [Docker Hardened Images CLI (`dhictl`) v0.0.9](https://github.com/docker-hardened-images/dhictl/releases/tag/v0.0.9) -- [Docker Scout CLI v1.27.0](https://github.com/docker/scout-cli/releases/tag/v1.27.0) - Docker Desktop Build `v0.39.1` ### Security From b96ca2c9b1ea81eae205bc0d13eeb4595c5333e4 Mon Sep 17 00:00:00 2001 From: aevesdocker Date: Wed, 21 Oct 2026 17:40:39 +0100 Subject: [PATCH 4/6] review Signed-off-by: aevesdocker --- content/manuals/desktop/release-notes.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index 0cfcb7603c1..5edbd4ab97b 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -41,8 +41,6 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo ### Security - Removed trust for certificates issued by the compromised [eMudhra intermediate CA compromise](https://emudhra.we-have-a-problem.com/). An attacker with network access could have used these certificates to intercept TLS connections made by non-browser clients, such as the Docker CLI and daemon. - - Updated the Docker Extensions CLI to v0.2.32, built with Go 1.27.3, which stops trusting the compromised eMudhra certificate authority and fixes CVE-2026-111943. - - Removed the bundled `docker-credential-ecr-login` AWS ECR credential helper. Install it separately if you need it. > [!IMPORTANT] > From 0de08029e39620842b355af298418011878e091e Mon Sep 17 00:00:00 2001 From: Craig Osterhout Date: Wed, 21 Oct 2026 20:35:03 -0700 Subject: [PATCH 5/6] Apply suggestion from @gabolaev Co-authored-by: george --- content/manuals/desktop/release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index 5edbd4ab97b..eb242501a23 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -26,7 +26,7 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo ## 4.96.2 -{{< release-date date="2026-10-21" >}} +{{< release-date date="2026-10-22" >}} {{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.96.2" build_path="/XXXXXX/" >}} From f732b9daef4725c7e33a5a6b9a5141febc1ee716 Mon Sep 17 00:00:00 2001 From: Craig Osterhout Date: Wed, 21 Oct 2026 20:35:37 -0700 Subject: [PATCH 6/6] Apply suggestion from @craig-osterhout --- content/manuals/desktop/release-notes.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/manuals/desktop/release-notes.md b/content/manuals/desktop/release-notes.md index eb242501a23..2f931ba4594 100644 --- a/content/manuals/desktop/release-notes.md +++ b/content/manuals/desktop/release-notes.md @@ -28,7 +28,7 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo {{< release-date date="2026-10-22" >}} -{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.96.2" build_path="/XXXXXX/" >}} +{{< desktop-install-v2 all=true win_arm_release="Early Access" version="4.96.2" build_path="/244353/" >}} ### Updates