25.0.10

Release date	Name	Upstream release
2025-APR-22	MCR 25.0.10	Moby 25.0.10 and Docker CLI 25.0.7

Changelog

MCR 25.0.10 comprises the Moby 25.0.10 upstream release.

Changes specific to MCR

• MCR contains the following component additions and updates:

  • Fipster (Go runtime) go1.23.8-m1

  • Docker Compose CLI plugin 2.34.0m1

Changes from upstream

The upstream pull requests detailed in the sections that follow are those that pertain to the MCR product. For the complete list of changes and pull requests upstream, refer to the GitHub milestones.

What is new

The MCR 25.0.10 patch release focuses on the delivery of CVE and bug fixes. In addition, the MCR 25.0.10 release includes the Docker Compose plugin to the Docker CLI.

Security

github.com/golang-jwt/jwt

• Fix CVE-2025-30204: Fix asymmetric resource consumption with JSON Web Tokens.

golang.org/x/net/http/httpproxy

• Fix CVE-2025-22870: Proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts.

openssl

• Fix CVE-2024-13176: Adds a constant-time implementation of ECDSA, to mitigate a potential side-channel vulnerability.

• Fix CVE-2024-9143: Adds additional checking of elliptic curve parameters.

• Fix CVE-2024-5535: Adds handling a situation when calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.

containerd

• Fix GHSA-265r-hfxg-fhmg: Fix integer overflow in User ID handling.

Bug fixes

containerd

• containerd/containerd#11538 Update image type checks to avoid unnecessary logs for attestations

GitHub milestones

The GitHub milestones offer full detail on the pull requests and changes as they correlate to the upstream Moby 25.0.10 release:

• moby/moby, 25.0.10 milestone

• docker/cli, 25.0.7 milestone

Major component versions

Version detail for the major components that comprise MCR 25.0.10 is presented in the table below:

Component	Upstream Version	Mirantis Version
Moby	25.0.10	25.0.10m1
Docker CLI	25.0.7	25.0.10m1
containerd	1.7.27	1.7.27m1
runc	1.2.5	1.2.5m1
cri-dockerd	0.3.15	–
buildx	0.12.1m	0.12.1m1
Fipster (Go runtime)	go1.23.8	go1.23.8m1
buildkit	0.12.5	–
rootlesskit	1.0.2	–
Docker Compose CLI plugin	2.34.0	2.34.0m1