Docker fixes critical 5-year old authentication bypass flaw

Docker released patches for CVE-2024-41110, a critical (CVSS 10.0) authorization bypass in Docker Engine caused by a regression that forwards API requests with Content-Length: 0 to AuthZ plugins without the request body, potentially allowing unauthorized actions and privilege escalation for environments using authorization plugins; multiple supported Engine versions are affected and updates are available, with mitigations including upgrading to patched releases, disabling AuthZ plugins, and restricting Docker API access.