Lucene search

K
suseSuseOPENSUSE-SU-2022:0132-1
HistoryMay 10, 2022 - 12:00 a.m.

Security update for php-composer (important)

2022-05-1000:00:00
lists.opensuse.org
31
php-composer
update
vulnerabilities
command injection
hgdriver
gitdriver

EPSS

0.004

Percentile

73.7%

An update that fixes two vulnerabilities is now available.

Description:

This update for php-composer fixes the following issues:

php-composer was updated to version 1.10.26:

  • Security: Fixed command injection vulnerability in HgDriver/GitDriver:
    CVE-2022-24828 boo#1198494

Update to version 1.10.25

  • Fix regression with PHP 8.1.0 and 8.1.1

Update to version 1.10.24

  • Fixed PHP 8.1 compatibility

Update to version 1.10.23

  • Security: Fixed command injection vulnerability CVE-2021-41116

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Backports SLE-15-SP3:

    zypper in -t patch openSUSE-2022-132=1