gpp_maybe Security update for php-composer2

SUSE-SLES-16.0-672

This update for php-composer2 fixes the following issues: - CVE-2025-67746: ANSI control characters injection in terminal output of various Composer commands via attacker controlled remote sources (bsc#1255768). - CVE-2026-40176: arbitrary command injection via malicious Perforce repository definition (bsc#1262254). - CVE-2026-40261: arbitrary command injection via malicious Perforce source reference/url (bsc#1262255).

• Release Date
  May 4 2026
• References
  Bugzilla: 1255768, 1262254, 1262255
  CVEs: CVE-2025-67746, CVE-2026-40176, CVE-2026-40261
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  php-composer2
  Dependency Management for PHP

  2.8.9-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  php-composer2
  Dependency Management for PHP

  2.8.9-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  php-composer2
  Dependency Management for PHP

  2.8.9-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  php-composer2
  Dependency Management for PHP

  2.8.9-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  php-composer2
  Dependency Management for PHP

  2.8.9-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  php-composer2
  Dependency Management for PHP

  2.8.9-160000.3.1 lock rpm