Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 9: DLA-2654-1 Critical Code Execution in Composer

debian lts
Calendar Grey May 11, 2021
Dist Debian Esm H88
Enhance your project dependencies to avert the potential for unauthorized code execution via unsanitized Git URLs. Discover more details here.
It was discovered that composer, a dependency manager for PHP, did not properly sanitize Mercurial URLs, which could lead to arbitrary code execution
Topics%20covered

Topics Covered

security advisory update critical code execution debian composer

Summary

For Debian 9 stretch, this problem has been fixed in version
1.2.2-1+deb9u1.

We recommend that you upgrade your composer packages.

For the detailed security status of composer please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/composer

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: composer
Version: 1.2.2-1+deb9u1
CVE ID: CVE-2021-29472

Topics%20covered

Topics Covered

security advisory update critical code execution debian composer

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here