SUSE-CU-2026:11122-1: Security update of bci/php

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: bci/php
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2026:11122-1
Container Tags        : bci/php:8 , bci/php:8-sles15 , bci/php:8.3.33 , bci/php:8.3.33-28.2 , bci/php:latest
Container Release     : 28.2
Severity              : moderate
Type                  : security
References            : 1279898 1280019 CVE-2026-45793 CVE-2026-59944 CVE-2026-59947
-----------------------------------------------------------------

The container bci/php was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2026:4288-1
Released:    Tue Sep 22 18:09:47 2026
Summary:     Security update for php-composer2
Type:        security
Severity:    moderate
References:  1279898,1280019,CVE-2026-45793,CVE-2026-59944,CVE-2026-59947
This update for php-composer2 fixes the following issues:

- CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).


The following package changes have been done:

- php-composer2-2.6.4-150600.3.23.1 updated