< back to search

gpp_maybe Security update for php-composer2

SUSE-SLE-Module-Web-Scripting-15-SP6-2024-2107

This update for php-composer2 fixes the following issues: - CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names (bsc#1226181). - CVE-2024-35242: Fixed command injection via specially crafted branch names during repository cloning (bsc#1226182).

Release Date

Jun 20 2024
References

Bugzilla: 1226181, 1226182
CVEs: CVE-2024-35241, CVE-2024-35242
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Web and Scripting Module 15.6 aarch64

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.3.1 lock rpm lock src

Web and Scripting Module 15.6 s390x

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.3.1 lock rpm lock src

Web and Scripting Module 15.6 x86_64

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.3.1 lock rpm lock src

Web and Scripting Module 15.6 ppc64le

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.3.1 lock rpm lock src