{"affected":[{"ecosystem_specific":{"binaries":[{"docker-compose":"2.33.1-1.1"}]},"package":{"ecosystem":"SUSE:Linux Micro 6.0","name":"docker-compose","purl":"pkg:rpm/suse/docker-compose&distro=SUSE%20Linux%20Micro%206.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.33.1-1.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for docker-compose fixes the following issues:\n\nUpdate to version 2.33.1:\n\n  * Improvements\n\n    - Add support for gw_priority, enable_ipv4 (requires docker\n      v28.0) by @thaJeztah in #12570\n\n  * Fixes\n\n    - Run watch standalone if menu fails to start by @ndeloof in\n      #12536\n    - Report error using non-file secret|config with read-only\n      service by @ndeloof in #12531\n    - Don't display bake suggestion when using --progress with\n      quiet or json option by @glours in #12561\n    - Fix pull --parallel and --no-parallel deprecation warnings\n      missing by @maxproske in #12555\n    - Fix error message when detach is implied by wait by @ndeloof\n      in #12566\n\n  * Dependencies\n\n    - build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1\n      by @dependabot in #12556\n    - build(deps): bump google.golang.org/grpc from 1.68.1 to\n      1.70.0 by @dependabot in #12494\n    - go.mod: update to docker v28.0.0 by @thaJeztah in #12545\n\nUpdate to version 2.33.0:\n\n  * Important\n\n    - This release introduce support for Bake to manage builds as\n      an alternative to the internal buildkit client. This new\n      feature can be enabled by setting COMPOSE_BAKE=1 variable.\n      Bake will become the default builder in a future release.\n\n  * Improvements\n\n    - let user know bake is now supported by @ndeloof in #12524\n    - support additional_context reference to another service by\n      @ndeloof in #12485\n    - add support for BUILDKIT_PROGRESS by @ndeloof in #12458\n    - add --with-env flag to publish command by @glours in #12482\n    - Update ls --quiet help description by @maxproske in #12541\n    - Publish warn display env vars by @glours in #12486\n\n  * Fixes\n\n    - Fix bake support by @ndeloof in #12507\n    - Update link in stats --help output by @maxproske in #12523\n    - Properly handle \"builtin\" seccomp profile by @r-bk in #12478\n    - manage watch applied to mulitple services by @ndeloof in\n      #12469\n\n  * Internal\n\n    - use main branch for docs upstream validation workflow by\n      @crazy-max in #12487\n    - fix provenance for binaries and generate sbom by @crazy-max\n      in #12479\n    - add codeowners file by @glours in #12480\n    - remove exit code per error type used by legacy metrics system\n      by @ndeloof in #12502\n    - Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in\n      #12546\n    - Full test coverage for compatibility cmd by @maxproske in\n      #12528\n    - don't send raw os.Args to opentelemetry but a pseudo command\n      line by @ndeloof in #12530\n    - add docker engine v28.x to the test-matrix by @thaJeztah in\n      #12539\n    - enable copyloopvar linter by @thaJeztah in #12542\n    - go.mod: remove toolchain directive by @thaJeztah in #12551\n\n  * Dependencies\n\n    - bump buildx v0.20.1 by @ndeloof in #12488\n    - bump docker to v27.5.1 by @ndeloof in #12491\n    - bump compose-go v2.4.8 by @ndeloof in #12543\n    - bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in\n      #12529\n    - bump github.com/moby/term v0.5.2 by @thaJeztah in #12540\n    - bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by\n      @dependabot in #12493\n    - bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by\n      @dependabot in #12430\n    - bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by\n      @dependabot in #12548\n    - bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot\n      in #12547\n    - bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in\n      #12549\n\nUpdate to version 2.32.4:\n\n  * add missing tag for build during merge workflow\n  * ci: re-use local source to build binary images\n  * ci: use local source for binary builds\n\nUpdate to version 2.32.3:\n\n  * ci: update bake-action to v6\n  * simplification\n  * image can be set to a local ID, that isn't a valid docker ref\n  * can't render progress concurrently with buildkit\n  * exclude one-off container running convergence\n  * Only override service mac if set on the main network.\n\nUpdate to version 2.32.2:\n\n  * remove engine v25 from e2e test matrix The 1st version\n    available for Ubuntu 24.x is Docker Engine v26\n  * fix relative path in compose file\n  * bump compose-go to v2.4.7\n  * replace tibdex/github-app-token by official GitHub\n    create-github-app-token\n  * bump golang.org/x/net to v0.33.0 to fix potential security\n    issue https://github.com/golang/go/issues/70906\n  * checkExpectedVolumes must ignore anonymous volumes\n  * When retrying to resolveOrCreateNetwork, retry with a valid\n    network name\n  * only check bind mount conflict if sync action is involved\n  * use the 3 latest major versions of the engine to run e2e step\n  * bump Golang version to v1.22.10 and update CI actions\n  * add --pull to run command\n  * CI to validate fmt\n  * `make fmt` so any contributor can enforce formatting\n  * format code with gofumpt\n\nUpdate to version 2.32.1:\n\n  * e2e test to prevent future regression\n  * only check volume mounts for updated config\n\nUpdate to version 2.32.0:\n\n  * e2e test for recreate volume\n  * build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1\n  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0\n  * build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0\n  * prompt user to confirm volume recreation\n  * Recreate container on volume configuration change\n  * introduce watch restart action\n  * bump otel dependencies to v1.28.0 and v0.53.0 to align with\n    buildx, buildkit and engine versions\n  * bump docker/buildx to latest release\n  * fix support for service.mac_address\n  * update xx to v1.6.1 for compatibility with alpine 3.21 and file\n    5.46+\n  * build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0\n  * Update pkg/e2e/watch_test.go\n  * first watch action for a file event wins\n  * fix\n  * revisit TestDebounceBatching\n  * introduce sync+exec watch action\n  * log configuration error as a watch log event\n  * do not require a build section but for `rebuild` action\n  * pull --quiet should not drop status message, only progress\n  * use latest engine tags\n  * Bump buildx to 0.19.1\n  * be sure everything has been cleanup at the end of each tests\n  * add local config.json to test configuration dir if exists\n  * disable failing TestBuildSSH test\n  * fix build with bake\n\nUpdate to version 2.31.0:\n\n  * bump containerd to v1.7,24\n  * bump google.golang.org/grpc to v1.68.0\n  * build(deps): bump github.com/moby/buildkit from 0.17.1 to\n    0.17.2\n  * build(deps): bump github.com/compose-spec/compose-go/v2\n  * only stop dependent containers ... if there's some\n  * disable TestNetworkConfigChanged which is unstable on CI\n  * only check attached networks on running containers\n  * fix: commit tests\n  * feat: add commit command\n  * run build tests against bake\n  * delegate build to buildx bake\n  * build(deps): bump github.com/stretchr/testify from 1.9.0 to\n    1.10.0\n  * use service.stop to stop dependent containers\n  * Update wait-timeout flag usage to include the unit\n  * go.mod: github.com/docker/cli v27.4.0-rc.2\n  * go.mod: github.com/docker/docker v27.4.0-rc.2\n  * go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)\n  * go.mod: github.com/docker/cli v27.4.0-rc.1\n  * go.mod: github.com/docker/docker v27.4.0-rc.1\n  * Update pkg/compose/convergence.go\n  * detect network config changes and recreate if needed\n  * go.mod: github.com/docker/buildx v0.18.0\n  * go.mod: github.com/moby/buildkit v0.17.1\n  * gha: test against docker engine v27.4.0\n  * push empty descriptor layer when using OCI version 1.1 for\n    Compose artifact it fixes a repository creation issue when\n    pushing the 1st time a Compose OCI artifact on the Hub\n  * remove ddev e2e tests\n  * implement remove-orphans on run\n  * ci: enable testifylint linter\n  * Emit events for building images\n  * Fix compose images that reutn a different image with the same\n    ID\n  * remove obsolete containers first on scale down\n  * pass stal bot inactivity limit from 6 to 3 months\n  * fix(config): Print service names with --no-interpolate\n  * build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0\n  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0\n\nUpdate to version 2.30.3:\n\n  * bump compose-go v2.4.4\n  * Avoid starting all services on rebuild\n\nUpdate to version 2.30.2:\n\n  * remove ArtifactType from Config in OCI v1.1 definition of the\n    artifact\n  * build(deps): bump github.com/compose-spec/compose-go/v2\n  * Service being declared in a profile must not trigger\n    re-creation\n  * Add profile e2e test case to document in compose\n  * Update `MAINTAINERS` file\n\nUpdate to version 2.30.1:\n\n  * bump compose-go to version v2.4.2\n\nUpdate to version 2.30.0:\n\n  * Improvements\n\n    - Introduce service hooks by @ndeloof (12166)\n    - Introduce generate command as alpha command by @glours\n      (12209)\n    - Add export command by @jarqvi (12120)\n    - Add support for CDI device request using devices by @ndeloof\n      (12184)\n    - Add support for bind recursive by @ndeloof (12210)\n    - Allow usage of -f flag with OCI Compose artifacts by @glours\n      (12220)\n\n  * Fixes\n\n    - Append unix-style relative path when computing container\n      target path by @ndeloof (12145)\n    - Wait for dependent service up to delay set by --wait-timeout\n      by @ndeloof (12156)\n    - Check secret source exists, as bind mount would create target\n      by @ndeloof (12151)\n    - After container restart register printer consumer by @jhrotko\n      (12158)\n    - Fix(down): Fix down command if specified services are not\n      running by @idsulik (12164)\n    - Show watch error message and open DD only when w is pressed\n      by @jhrotko (12165)\n    - Fix(push): Fix unexpected EOF on alpha publish by @idsulik\n      (12169)\n    - Fix(convergence): Serialize access to observed state by\n      @anantadwi13 (12150)\n    - Remove feature flag integration with Docker Desktop for\n      ComposeUI and ComposeNav by @jhrotko (12192)\n    - Support Dockerfile-specific ignore-file with watch by\n      @ndeloof (12193)\n    - Add support for raw env_file format by @ndeloof (12179)\n    - Convert GPUs to DeviceRequests with implicit \"gpu\" capability\n      by @ndeloof (12197)\n    - Improve error message to include expected network label by\n      @divinity76 (12213)\n    - Don't use progress to render restart, which hides logs by\n      @ndeloof (12226)\n    - One-off containers are not indexed, and must be ignored by\n      exec --index command by @ndeloof (12224)\n    - Don't warn about uid/gid not being supported while ... they\n      are by @ndeloof (12232)\n    - Connect to external networks by name by @ndeloof (12234)\n    - Fix push error message typo by @chris-crone (12237)\n    - Fix(dockerignore): Add wildcard support to dockerignore.go by\n      @idsulik (12239)\n\n  * Internal\n\n    - Remove bind options when creating a volume type by @jhrotko\n      (12177)\n    - pass device.options to engine by @ndeloof (12183)\n    - Add security policy by @thaJeztah (12194)\n    - Gha: set default permissions to \"contents: read\" by\n      @thaJeztah (12195)\n    - Desktop: allow this client to be identified via user-agent by\n      @djs55 (12212)\n    - Compose-go clean volume target to avoid ambiguous comparisons\n      by @ndeloof (12208)\n\n  * Dependencies\n\n    - Bump docker v27.3.1 by @ndeloof (12178)\n    - Build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 by\n      @dependabot (12189)\n    - Bump compose-go to v2.3.0 by @glours (12198)\n    - Bump compose-go to v2.4.0 by @glours (12231)\n    - Bump compose-go to v2.4.1 by @glours (12243)\n    - Build(deps): bump github.com/containerd/containerd from\n      1.7.22 to 1.7.23 by @dependabot (12211)\n    - Bump golang minimal version to 1.22 in go.mod by @glours\n      (12246)\n    - Bump go.uber.org/mock to v0.5.0 and google.golang.org/grpc to\n      v1.67.1 by @glours (12245)\n\nUpdate to version 2.29.7:\n\n  * revert commits link to mount API over bind changes\n\nUpdate to version 2.29.6:\n\n  * don't set propagation if target engine isn't linux\n  * build(deps): bump github.com/docker/docker v27.3.0-rc.2\n  * build(deps): bump github.com/docker/cli v27.3.0-rc.2\n\nUpdate to version 2.29.5:\n\n  * set propagation default\n  * Remove custom codeql workflow\n\nUpdate to version 2.29.4:\n\n  * fix import\n  * chore(watch): Add debug log when skipping service without build\n    context\n  * stop dependent containers before recreating diverged service\n  * Fixed possible `nil` pointer dereference\n  * bump github.com/docker/buildx v0.17.1\n  * build(deps): bump docker, docker/cli to v27.3.0-rc.1\n  * gha: test against docker engine v27.3.0\n\nUpdate to version 2.29.3:\n\n  * show sync files only in debug level\n  * chore(watch): Add changed files path/count to log\n  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0\n  * bump compose-go to version v2.2.0\n  * Restore compose v1 behavior to recreate containers when ran\n    with -V\n  * fix linting issues with golangci-lint 1.60.2\n  * bump golang to version 1.22.7\n  * bump dependencies versions, engine and cli v27.2.1 containerd\n    v1.7.22 buildx v0.17.0 buildkit v0.16.0\n  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0\n  * Fix typos\n  * Use logrus instead of direct output to stderr.\n  * attach: close streams when done\n  * Fix typo in pull.go\n  * Allow combination of bind mounts and 'rebuild' watches\n  * service hash must exlude depends_on\n  * prefer mount API over bind\n  * docs: duplicate documentation for root cmd\n  * docs(wait): Fix wait command description\n  * allow to add empty line in the logs when nav menu activated\n  * upgrade docker versions\n\nUpdate to version 2.29.2:\n\n  * initial sync files that modified after image creation\n  * initial sync for root directory\n  * Removes redundant condition from toAPIBuildOptions in build.go\n  * docs: Update docker compose kill usage\n  * Fix stop on file chane for sync-restart action\n  * bump engine and cli to v27.1.1, buildx to v0.16.1\n  * remove all dependabot update PRs for OTel dependencies\n  * gp.mod: github.com/gofrs/flock v0.12.1\n  * go.mod: golang.org/x/sys v0.22.0\n  * update to go1.21.12\n\nUpdate to version 2.29.1:\n\n  * Enhance JSON progress events with more fields.\n  * bump compose-go v2.1.5\n  * bump github.com/docker/cli v27.1.0\n  * bump github.com/docker/docker v27.1.0\n  * bump github.com/containerd/containerd v1.7.20\n  * gha: add docker 27.1.0\n  * fix(containers): fix sorting logic by adding secondary sorting\n    for one-off containers\n\nUpdate to version 2.29.0:\n\n  * update docs generation to avoid man pages generation\n  * bump compose-go to v2.1.4, buildx to v0.16.0, containerd to\n    v1.7.19 and buildx to v0.15.0\n  * restore setEnvWithDotEnv\n  * empty env variable with no value must be unset in container\n  * exclude unnecessary resources after services have been selected\n  * change time for stale bot\n  * Remove debug mode and run twice a week\n  * Add stale workflow\n  * update docs\n  * feat(watch): Add --prune option to docker-compose watch command\n  * Remove COMPOSE_MENU env from e2e tests\n  * Use rawjson for the build backend.\n  * Set logging format to JSON.\n  * Format errors as JSON when in JSON progress mode.\n  * Pass 'plain' instead of 'json' to build backend\n  * Add JSON stream progress writer\n  * go.mod: docker/cli, docker/docker v27.0.3\n  * gha: test against docker v27.0.3\n  * go.mod: docker/cli, docker/docker v27.0.2\n\nUpdate to version 2.28.1:\n\n  * Remove `console.Terminal` check and use `IsTerminal` from\n    `streams.Out`\n\nUpdate to version 2.28.0:\n\n  * go.mod: github.com/compose-spec/compose-go v2.1.3\n  * go.mod: docker/docker and docker/cli v27.0.1-rc.1\n\nUpdate to version 2.27.3:\n\n  * build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1\n  * build(deps): bump github.com/docker/buildx from 0.15.0 to\n    0.15.1\n\nUpdate to version 2.27.2:\n\n  * using as flag of the up command, watch was blocking process\n    shutdown This happened when sunsetting the application from\n    docker compose down command\n  * Add open watch docs in up menu\n  * bump buildkit to v0.14.0 and buildx to v0.15.0\n  * stop watch process when associated up process is stopped\n  * build(deps): bump github.com/docker/docker\n  * build(deps): bump github.com/containerd/containerd from 1.7.17\n    to 1.7.18\n  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0\n  * build(deps): bump github.com/hashicorp/go-version from 1.6.0 to\n    1.7.0\n  * build: replace uses of archive.CanonicalTarNameForPath\n  * update gh actions versions, update engine matrix, bump golang\n    to 1.21.11\n  * enforce keyboard.Close is always executed to restore terminal\n  * config --environment\n  * Readd event\n  * remove unreachable code\n  * Fix dot env file to define COMPOSE_* variables\n  * return an error when --detach and --watch are used together in\n    up command\n  * Correct 'cancellation' typo in comment\n  * Fix: change append to use slice index in ps.go\n  * COMPOSE_PROFILES can be set by .env file\n  * prevent concurrent map write relying on project immutability\n\nUpdate to version 2.27.1:\n  * build(deps): bump github.com/containerd/containerd from 1.7.16\n    to 1.7.17\n  * build(deps): bump github.com/docker/buildx from 0.14.0 to\n    0.14.1\n  * drop COMPOSE_EXPERIMENTAL_OTEL as docker/cli has opentelemetry\n    in\n  * add gui/composeview as part of available commands\n  * fix opentelemetry\n  * bump compose-go to version v2.1.1\n  * Set endpoint-specific DriverOpts\n  * Bump compose-go version to latest main\n  * Backport OpenBSD patches\n  * add new navigation menu to open Compose app configuration in\n    Docker Desktop\n  * build(deps): bump github.com/fsnotify/fsevents from 0.1.1 to\n    0.2.0\n  * build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0\n  * fix --resolve-image-digests\n  * allow a local .env file to override compose.yaml sibling .env\n  * Bump docker engine and cli to version 26.1.3\n  * Bump docker to v26.1.2\n  * Add documentation for --menu up option and COMPOSE_MENU\n    environemnt variable\n  * chore(deps): bump docker to v26.1.1 (#11794)\n\nUpdate to version 2.27.0:\n  * fix: overlapping logs and menu navigation (#11765)\n  * build(deps): bump github.com/moby/buildkit\n  * chore(e2e): fix flaky cascade failure test\n  * use v2.26.1 tag for moby and Docker cli\n  * chore(deps): update to Moby v26.1 & buildx v0.14\n  * bump compose-go version to v2.1.0\n  * fix support for --context=foo\n  * Fix #11710: Avoid to try to close channel twice after hitting\n    Ctrl-C on compose up (#11719)\n  * fix(desktop): remove overly-aggressive feature flag check\n    (#11748)\n  * chore: fix typo in comment\n  * bump dependencies\n  * fix: do not try to create file shares for non-directories\n  * check container_name is not in use by another service we will\n    create\n  * don't clear line when navigation is disabled\n  * fix: return correct exit code with `--exit-code-from` (#11715)\n  * progress for resource can be restarted after more Working event\n    comes\n  * Revert \"Stop the resource timer after last expected event\"\n  * Revert change to allow trying to kill again if a kill fails\n  * Handle errors and allow to send multiple kills if one failed\n  * Ignore errors when killing on second Ctrl-C\n  * docker compose up always kills the containers on second Ctrl-C\n  * read COMPOSE_REMOVE_ORPHANS from .env\n  * Set Required false to depends_on containers for compose -p\n    stop/down\n  * Ignore missing containers when compose stop -p\n  * Ignore missing containers when compose down -p\n  * Introduce support for build.entitlements\n  * Remove dead url reference.\n  * e2e test for --all-resources\n  * introduce --all-resources to _not_ exclude resources not used\n    by services\n  * Introduce --abort-on-container-failure\n  * bump golang version to 1.21.9\n  * don't use ansi espace sequence when disabled\n\nUpdate to version 2.26.1:\n  * Does not start keyboard manager if there is no tty\n  * Change menu information text to dim\n  * Handle --no-build and --watch args\n  * build(deps): bump github.com/opencontainers/image-spec\n  * Unwrap error message.\n  * Include error message in pull warning/errors\n\nUpdate to version 2.26.0:\n  * chore(desktop): revised feature detection for file shares\n  * Add Navigation Menu to compose up\n  * Add support for volume Subpath option\n  * Bump docker v26.0.0\n  * introduce config --variables to list compose model variables\n  * Fix docs on default build image name\n  * Bump compose-go to v2.0.2\n  * add support for annotations\n  * Revert \"Bump compose-go to v2.0.1\"\n  * Bump compose-go to v2.0.1\n  * feat(desktop): synchronized file share integration (#11614)\n  * feat(experiments): add experimental feature state (#11633)\n  * reduce timeout of the Otel tracing command\n  * fix `compose config --format json`\n\nUpdate to version 2.25.0:\n  * Bump compose-go v2.0.0\n  * services shell completion bugfix\n  * fix TestBuildPlatformsWithCorrectBuildxConfig\n  * only use ToModel when --no-interpolate is set\n  * feat(desktop): add Docker Desktop detection and client skeleton\n    (#11593)\n\nUpdate to version 2.24.7:\n  * chore(deps): upgrade go to 1.21.8 (#11578)\n  * ci(deps): bump moby/moby & docker/cli to v25.0.4 (#11566)\n  * Add test summary for test jobs in ci\n  * make code simpler\n  * avoid duplicated \"xx exited with code 0\" message\n  * introduce --watch\n  * move code into small functions for better readability\n  * restore support for `config --no-interpolate`\n  * remove docker cli step in ci.yml\n  * get log to manage `attach`\n  * bump compose-go to version v2.0.0-rc.8\n  * use an dedicated compose file --quiet-pull e2e test\n  * Add a fallback check of Watch pid on Windows False positives\n    were detected when checking the previous watch process state\n  * add support of QuietOption to create command\n  * pass QuietOption when starting dependencies from run command\n  * when ran with ANSI disabled, force progress=plain\n  * Issue-11374: Modified compose up command to respect\n    COMPOSE_REMOVE_ORPHANS environment variable\n  * ci: bump engine version to `25.0.3`\n  * sort containers to optimize scale down\n  * discard stdout for laaarge log test\n\nUpdate to version 2.24.6:\n\n  * use listeners to collect include metrics\n  * docs: update cli reference link\n  * docs: unify no trailing dots in docstrings and help (#11301)\n  * Use listener for file metadata\n  * fix deadlock collecting large logs\n  * chore(watch): remove old `docker cp` implementation\n  * ci(deps): bump docker/cli to v25.0.3 (#11481)\n  * pass All option to backend api.Service when length statuses is\n    not equal to zero\n  * Add OTEL specs: build, depends_on, capabilities (gpu/tpu)\n  * build(deps): bump github.com/opencontainers/image-spec\n  * feat(tracing): add project hash attr\n  * chore(load): ensure context passed to load\n  * Include all networks in ContainerCreate call if API >= 1.44\n  * bump compose-go to v2.0.0-rc.4\n  * CI: docker engine version matrix\n  * build(deps): bump github.com/docker/cli\n  * Fix load .env from project directory when project file is set\n    by COMPOSE_FILE\n\n","id":"SUSE-SU-2025:20385-1","modified":"2025-06-10T11:31:50Z","published":"2025-06-10T11:31:50Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520385-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1217070"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-47108"}],"related":["CVE-2023-47108"],"summary":"Security update for docker-compose","upstream":["CVE-2023-47108"]}