Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Composer ausnutzen, Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren oder Informationen auszulesen.
Product
Composer ist ein Open-Source-Abhängigkeitsmanager für PHP-Projekte.
Revision history
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
Composer GitHub vom 2026-10-29
https://github.com/composer/composer/security/advisories/GHSA-c968-33g3-wh7p
-
Composer GitHub vom 2026-10-29
https://github.com/composer/composer/security/advisories/GHSA-fm2w-xgf2-f9fh
-
Composer GitHub vom 2026-10-29
https://github.com/composer/composer/releases#release-2.2.31
-
Composer 2.11 Release Notes vom 2026-10-29
https://blog.packagist.com/composer-2-11-release/#security-fixes-and-choosing-a-cooldown-period
-
Fedora Security Advisory FEDORA-EPEL-2026-B48903DC27 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-b48903dc27
-
Fedora Security Advisory FEDORA-EPEL-2026-714697C191 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-714697c191
-
Fedora Security Advisory FEDORA-EPEL-2026-58E2FDC6D6 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-58e2fdc6d6
-
Fedora Security Advisory FEDORA-2026-FDC2AB47C1 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-fdc2ab47c1
-
Fedora Security Advisory FEDORA-2026-F2A72B9A61 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f2a72b9a61
-
Fedora Security Advisory FEDORA-EPEL-2026-8E8488D18D vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8e8488d18d