SUSE-CU-2026:10111-1: Security update of bci/php

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/php
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:10111-1
Container Tags        : bci/php:8 , bci/php:8-sles15 , bci/php:8.3.33 , bci/php:8.3.33-26.4 , bci/php:latest
Container Release     : 26.4
Severity              : important
Type                  : security
References            : 1278257 CVE-2026-84361 
-----------------------------------------------------------------

The container bci/php was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4059-1
Released:    Tue Sep  8 08:59:57 2026
Summary:     Security update for php-composer2
Type:        security
Severity:    important
References:  1278257,CVE-2026-84361
This update for php-composer2 fixes the following issue:

- CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL (bsc#1278257).


The following package changes have been done:

- php-composer2-2.6.4-150600.3.18.1 updated
- container:bci-bci-base-15.7-2cca9950fcbe26e5f70a49f9e6f035e27fd7bad46e0133996b8c557bcafe453b-0 updated
- container:registry.suse.com-bci-bci-base-15.7-2cca9950fcbe26e5f70a49f9e6f035e27fd7bad46e0133996b8c557bcafe453b-0 updated