FEDORA-2026-951a6725b8 — security update for docker-compose

stable

docker-compose-5.1.4-1.fc43

FEDORA-2026-951a6725b8 created by buckaroogeek 3 months ago for Fedora 43

Update to release v5.1.4
Resolves: #2480186
Upstream fixes

Update to release v5.1.3
Resolves #2458697
Resolves CVE-2026-33747: #2452188, #2452199
Resolves CVE-2026-33748: #2453089
Upstream fixes

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-951a6725b8

This update has been submitted for testing by buckaroogeek.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has obsoleted docker-compose-5.1.3-1.fc43, and has inherited its bugs and notes.

3 months ago

This update has been pushed to testing.

3 months ago

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

3 months ago

approved

3 months ago

Builds

docker-compose-5.1.4-1.fc43

BZ#2452188 CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-42]

BZ#2452199 CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-43]

BZ#2453089 CVE-2026-33748 docker-compose: BuildKit: Unauthorized file access via Git URL fragment subdir components [fedora-all]

BZ#2458697 docker-compose-5.1.3 is available

BZ#2480186 docker-compose-5.1.4 is available

docker-compose-5.1.4-1.fc43

Automated Test Results

ignored