< back to search

shield Security update for php-composer2

SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4288

This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).

Release Date

Sep 22 2026
References

Bugzilla: 1279898, 1280019
CVEs: CVE-2026-45793, CVE-2026-59944, CVE-2026-59947
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Web and Scripting Module 15.7 aarch64

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.23.1 lock rpm lock src

Web and Scripting Module 15.7 ppc64le

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.23.1 lock rpm lock src

Web and Scripting Module 15.7 s390x

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.23.1 lock rpm lock src

Web and Scripting Module 15.7 x86_64

Packages

php-composer2
Dependency Management for PHP

2.6.4-150600.3.23.1 lock rpm lock src