FEDORA-2026-d275a6eaac — security update for docker-compose

obsolete

docker-compose-5.1.4-1.fc42

FEDORA-2026-d275a6eaac created by buckaroogeek 3 months ago for Fedora 42

Update to release v5.1.4
Resolves: #2480186
Upstream fixes

Update to release v5.1.3
Resolves #2458697
Resolves CVE-2026-33747: #2452188, #2452199
Resolves CVE-2026-33748: #2453089
Upstream fixes

This update has been submitted for testing by buckaroogeek.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has obsoleted docker-compose-5.1.3-1.fc42, and has inherited its bugs and notes.

3 months ago

This update has been pushed to testing.

3 months ago

geraldosimiao provided feedback 3 months ago

karma

This update can be pushed to stable now if the maintainer wishes

3 months ago

This update is marked obsolete because the F42 release is archived.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

3 months ago

in testing

3 months ago

approved

3 months ago

Builds

docker-compose-5.1.4-1.fc42

BZ#2452188 CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-42]

BZ#2452199 CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-43]

BZ#2453089 CVE-2026-33748 docker-compose: BuildKit: Unauthorized file access via Git URL fragment subdir components [fedora-all]

BZ#2458697 docker-compose-5.1.3 is available

BZ#2480186 docker-compose-5.1.4 is available

docker-compose-5.1.4-1.fc42

Automated Test Results

ignored