< back to search

gpp_maybe Security update for php-composer2

SUSE-SLE-Module-Web-Scripting-15-SP7-2026-1784

This update for php-composer2 fixes the following issues: - CVE-2026-40176: arbitrary command injection via malicious Perforce repository definition (bsc#1262254). - CVE-2026-40261: arbitrary command injection via malicious Perforce source reference/url (bsc#1262255).

Release Date

May 8 2026
References

Bugzilla: 1262255, 1262254
CVEs: CVE-2026-40261, CVE-2026-40176
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Web and Scripting Module 15.7 x86_64

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.9.1 lock rpm lock src

Web and Scripting Module 15.7 ppc64le

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.9.1 lock rpm lock src

Web and Scripting Module 15.7 s390x

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.9.1 lock rpm lock src

Web and Scripting Module 15.7 aarch64

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.9.1 lock rpm lock src