SUSE-SU-2026:20949-1

Security update for docker-compose

view advisory published 2026-03-27

Security update for docker-compose

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-47914US	—	0.55% (45th)	—	2025-11-19
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of boun…
CVE-2025-47913US	—	0.67% (51st)	—	2025-11-13
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVE-2025-62725US	—	13.7% (96th)	—	2025-10-27
Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile,…

references

External citations — patches, advisories, analysis.

SUSE Bug 1252752self
SUSE Bug 1253584self
SUSE Bug 1254041self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20949-1self
SUSE CVE CVE-2025-47913 pageself
SUSE CVE CVE-2025-47914 pageself
SUSE CVE CVE-2025-62725 pageself

remediations (12)

Fixeddocker-compose-0:2.33.1-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.s390x as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddocker-compose-0:2.33.1-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan