gpp_maybe Security update for php-composer2
SUSE-SLE-Module-Web-Scripting-15-SP5-2024-592


This update for php-composer2 fixes the following issues: - CVE-2024-24821: Fixed potential arbitrary code execution when Composer is invoked within a directory with tampered files (bsc#1219757).

  • Release Date
    Feb 22 2024
  • References
    Bugzilla: 1219757
    CVEs: CVE-2024-24821
  • Type
    security
  • Severity
    important

cloud_download Downloads

Web and Scripting Module 15.5 x86_64
  • Packages
    php-composer2
    Dependency Management for PHP
    2.2.3-150400.3.9.1 lock rpm lock src
Web and Scripting Module 15.5 s390x
  • Packages
    php-composer2
    Dependency Management for PHP
    2.2.3-150400.3.9.1 lock rpm lock src
Web and Scripting Module 15.5 ppc64le
  • Packages
    php-composer2
    Dependency Management for PHP
    2.2.3-150400.3.9.1 lock rpm lock src
Web and Scripting Module 15.5 aarch64
  • Packages
    php-composer2
    Dependency Management for PHP
    2.2.3-150400.3.9.1 lock rpm lock src