obsolete

composer-2.6.4-1.fc38

FEDORA-2023-dbe9d482a8 created by remi a year ago for Fedora 38

Version 2.6.4 - 2023-09-29

  • Security: Fixed possible remote code execution vulnerability if composer.phar is publicly accessible, executable as PHP, and register_argc_argv is enabled in php.ini (GHSA-jm6m-4632-36hf / CVE-2023-43655)
  • Fixed json output of abandoned packages in audit command (#11647)
  • Performance improvement in pool optimization step (#11638)
  • Performance improvement in show -a <packagename> (#11659)

This update has been submitted for testing by remi.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago
User Icon imabug provided feedback a year ago
karma

This update has been pushed to testing.

a year ago

remi edited this update.

a year ago

This update has been obsoleted by composer-2.6.5-1.fc38.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
low
Karma
1
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Thresholds
Minimum Karma
+1
Minimum Testing
7 days
Dates
submitted
a year ago
in testing
a year ago
modified
a year ago
BZ#2241496 CVE-2023-43655 composer: Remote Code Execution via web-accessible composer.phar
0
0
BZ#2241498 CVE-2023-43655 composer: Remote Code Execution via web-accessible composer.phar [fedora-all]
0
0

Automated Test Results