20.10.24

Bug fixes and enhancements

• Fixed a number of issues that can cause Swarm encrypted overlay networks
  to fail to uphold their guarantees, addressing CVE-2023-28841,
  CVE-2023-28840, and
  CVE-2023-28842.
  • A lack of kernel support for encrypted overlay networks now reports
    as an error.
  • Encrypted overlay networks are eagerly set up, rather than waiting for
    multiple nodes to attach.
  • Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9
    through the use of the xt_bpf kernel module.
  • Users of Swarm overlay networks should review GHSA-vwm3-crmr-xfxw
    to ensure that unintentional exposure has not occurred.
• Upgrade github.com/containerd/fifo to v1.1.0 to fix a potential panic moby/moby#45216.
• Fix missing Bash completion for installed cli-plugins docker/cli#4091.

Packaging Updates

• Update Go runtime to 1.19.7.
• Update Docker Buildx to v0.10.4.
• Update containerd to v1.6.20.
• Update runc to v1.1.5.