diff --git a/desktop/release-notes.md b/desktop/release-notes.md index 2bd65893ba..dfe0380c56 100644 --- a/desktop/release-notes.md +++ b/desktop/release-notes.md @@ -92,6 +92,7 @@ For frequently asked questions about Docker Desktop releases, see [FAQs](faqs/ge #### For all platforms +- Fixed a security issue allowing users to bypass Image Access Management (IAM) restrictions configured by their organisation by avoiding `registry.json` enforced login via deleting the `credsStore` key from their Docker CLI configuration file. Only affects Docker Business customers. - Fixed [CVE-2023-24532](https://github.com/advisories/GHSA-x2w5-7wp4-5qff). - Fixed [CVE-2023-25809](https://github.com/advisories/GHSA-m8cg-xc2p-r3fc). - Fixed [CVE-2023-27561](https://github.com/advisories/GHSA-vpvm-3wq2-2wvm).