gpp_maybe Security update for docker-compose

SUSE-SL-Micro-6.2-455

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1254041). - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files (bsc#1252752).

Release Date

Mar 27 2026
References

Bugzilla: 1252752, 1253584, 1254041
CVEs: CVE-2025-47913, CVE-2025-47914, CVE-2025-62725
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 ppc64le

Packages

docker-compose
Define and run multi-container applications with Docker

2.33.1-160000.4.1 lock rpm

SUSE Linux Micro 6.2 aarch64

Packages

docker-compose
Define and run multi-container applications with Docker

2.33.1-160000.4.1 lock rpm

SUSE Linux Micro 6.2 s390x

Packages

docker-compose
Define and run multi-container applications with Docker

2.33.1-160000.4.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

docker-compose
Define and run multi-container applications with Docker

2.33.1-160000.4.1 lock rpm