openSUSE-SU-2026:10054-1

csafDEsuse_csaf

php-composer2-2.9.3-1.1 on GA media

view advisory published 2026-01-15

php-composer2-2.9.3-1.1 on GA media

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-67746USmedium4.3—
Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some w…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • Fixedphp-composer2-0:2.9.3-1.1.aarch64 as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-composer2-0:2.9.3-1.1.ppc64le as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-composer2-0:2.9.3-1.1.s390x as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedphp-composer2-0:2.9.3-1.1.x86_64 as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan