Fedora 44 docker-compose Critical Arbitrary File Write Proc 2026-3316f97296
fedora
May 30, 2026
Update to release v5.1.4 Resolves: rhbz#2480186 Upstream fixes Update to release v5.1.3 Resolves rhbz#2458697
Summary
Define and run multi-container applications with Docker.
Update Information:
Update to release v5.1.4 Resolves: rhbz#2480186 Upstream fixes Update to release v5.1.3 Resolves rhbz#2458697 Resolves CVE-2026-33747: rhbz#2452188, rhbz#2452199 Resolves CVE-2026-33748: rhbz#2453089 Upstream fixes
Change Log
* Wed May 20 2026 Bradley G Smith
References
[ 1 ] Bug #2452188 - CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2452188
[ 2 ] Bug #2452199 - CVE-2026-33747 docker-compose: BuildKit: Arbitrary file write and code execution via untrusted frontend [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2452199
[ 3 ] Bug #2453089 - CVE-2026-33748 docker-compose: BuildKit: Unauthorized file access via Git URL fragment subdir components [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2453089
[ 4 ] Bug #2458697 - docker-compose-5.1.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2458697
[ 5 ] Bug #2480186 - docker-compose-5.1.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2480186
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3316f97296' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: docker-compose
Product: Fedora 44
Version: 5.1.4
Release: 1.fc44
Summary: Define and run multi-container applications with Docker
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!