gpp_maybe Security update for docker-compose

SUSE-SLES-16.0-455

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253584). - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read (bsc#1254041). - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files (bsc#1252752).

• Release Date
  Mar 27 2026
• References
  Bugzilla: 1252752, 1253584, 1254041
  CVEs: CVE-2025-47913, CVE-2025-47914, CVE-2025-62725
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  docker-compose
  Define and run multi-container applications with Docker

  2.33.1-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  docker-compose
  Define and run multi-container applications with Docker

  2.33.1-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  docker-compose
  Define and run multi-container applications with Docker

  2.33.1-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  docker-compose
  Define and run multi-container applications with Docker

  2.33.1-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  docker-compose
  Define and run multi-container applications with Docker

  2.33.1-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  docker-compose
  Define and run multi-container applications with Docker

  2.33.1-160000.4.1 lock rpm