Skip to content

Commit 4aec810

Browse files
authored
Merge pull request #22512 from mat007/cve-2025-3911
Add CVE-2025-3911 to release notes of Docker Desktop 4.41
1 parent 9362a99 commit 4aec810

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

content/manuals/desktop/release-notes.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,9 +51,10 @@ For more frequently asked questions, see the [FAQs](/manuals/desktop/troubleshoo
5151
- [Docker Scout CLI v1.17.1](https://github.com/docker/scout-cli/releases/tag/v1.17.1)
5252
- [Compose Bridge v0.0.19](https://github.com/docker/compose-bridge-binaries/releases/tag/v0.0.19)
5353

54-
### Security
54+
### Security
5555

5656
- Fixed [CVE-2025-3224](https://www.cve.org/CVERecord?id=CVE-2025-3224) allowing an attacker with access to a user machine to perform an elevation of privilege when Docker Desktop updates.
57+
- Fixed [CVE-2025-3911](https://www.cve.org/CVERecord?id=CVE-2025-3911) allowing an attacker with read access to a user's machine to obtain sensitive information from Docker Desktop log files, including environment variables configured for running containers.
5758

5859
### Bug fixes and enhancements
5960

0 commit comments

Comments
 (0)