23.0.7

Release date	Name	Upstream release
2023-09-26	MCR 23.0.7	Moby 23.0.7 and Docker CLI 23.0.7

Changelog

MCR 23.0.7 comprises the Moby 23.0.7 upstream release.

Changes specific to MCR

• MCR contains the following component updates:

  • containerd v1.6.22, which fixes the following CVEs:

    • NVD CVE-2022-32149

    • NVD CVE-2022-41721.

  • Fipster (Go runtime) go1.19.12m1, which fixes:

    • Resolved CVE-2023-29409

    • Security fix net/http: insufficient sanitization of Host header.

Changes from upstream

The upstream pull requests detailed in the sections that follow are those that pertain to the MCR product. For the complete list of changes and pull requests upstream, refer to the GitHub milestones.

What is new

The MCR 23.0.7 patch release focuses on the delivery of CVE and bug fixes.

Bug fixes

• moby/moby#45635 Fixed an issue wherein encrypted overlay networks did not work on ports other than 4789.

GitHub milestones

The Github milestones offer full detail on the pull requests and changes as they correlate to the upstream Moby 23.0.7 release:

• docker/cli, 23.0.7 milestone

• moby/moby, 23.0.7 milestone

Major component versions

Version detail for the major components that comprise MCR 23.0.7 is presented in the table below:

Component	Version
Moby	23.0.7
Docker CLI	23.0.7
containerd	1.6.22
runc	1.1.8
cri-dockerd	0.3.4
buildx	0.10.7
Fipster (Go runtime)	go1.19.12m1
buildkit	0.10.7-0.20230412161310-d52b2d584242
rootlesskit	1.1.0