Fedora 43 docker-compose Security Flaw Allows Code Execution File Access
fedora
May 30, 2026
Update to release v5.1.4 Resolves: rhbz#2480186 Upstream fixes Update to release v5.1.3 Resolves rhbz#2458697
Summary
Define and run multi-container applications with Docker.
Update Information:
Update to release v5.1.4 Resolves: rhbz#2480186 Upstream fixes Update to release v5.1.3 Resolves rhbz#2458697 Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199 Resolves CVE-2026-33748: rhbz#2453089 Upstream fixes
Topics Covered
Change Log
* Wed May 20 2026 Bradley G Smith
References
[ 1 ] Bug #2452188 - CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2452188
[ 2 ] Bug #2452199 - CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2452199
[ 3 ] Bug #2453089 - CVE-2026-33748 docker-compose: BuildKit: Unauthorized file access via Git URL fragment subdir components [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2453089
[ 4 ] Bug #2458697 - docker-compose-5.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2458697
[ 5 ] Bug #2480186 - docker-compose-5.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2480186
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-951a6725b8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: docker-compose
Product: Fedora 43
Version: 5.1.4
Release: 1.fc43
Summary: Define and run multi-container applications with Docker
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!