< back to search

gpp_maybe Security update for php-composer2

SUSE-SLE-Module-Web-Scripting-15-SP5-2024-2106

This update for php-composer2 fixes the following issues: - CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names (bsc#1226181). - CVE-2024-35242: Fixed command injection via specially crafted branch names during repository cloning (bsc#1226182).

Release Date

Jun 20 2024
References

Bugzilla: 1226182, 1226181
CVEs: CVE-2024-35241, CVE-2024-35242
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Web and Scripting Module 15.5 aarch64

Packages

php-composer2
Dependency Management for PHP

2.2.3-150400.3.12.1 lock rpm lock src

Web and Scripting Module 15.5 ppc64le

Packages

php-composer2
Dependency Management for PHP

2.2.3-150400.3.12.1 lock rpm lock src

Web and Scripting Module 15.5 x86_64

Packages

php-composer2
Dependency Management for PHP

2.2.3-150400.3.12.1 lock rpm lock src

Web and Scripting Module 15.5 s390x

Packages

php-composer2
Dependency Management for PHP

2.2.3-150400.3.12.1 lock rpm lock src