[SECURITY] Fedora 44 Update: composer-2.9.7-1.fc44

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

Fedora 44 : pie (2026-7acc0ad1fc)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7acc0ad1fc advisory. Version 1.4.1 - Update bundled Composer to 2.9.7 ---- Version 1.4.0 New features! - Prompt to install missing system dependencies - Prompt to install build...

Fedora 44 : composer (2026-1140c02041)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1140c02041 advisory. Version 2.9.7 - 2026-04-14 Fixes regression calling custom script command aliases that are called a substring of a composer command 12802 ---- Versi...

GHSA-WG36-WVJ6-R67P vulnerabilities

Vulnerabilities for packages: composer...

GHSA-GQW4-4W2P-838Q vulnerabilities

Vulnerabilities for packages: composer...

CVE-2026-40176 vulnerabilities

Vulnerabilities for packages: composer...

CVE-2026-40261 vulnerabilities

Vulnerabilities for packages: composer...

CVE-2026-40261 vulnerabilities

Vulnerabilities for packages: composer...

CVE-2026-40176 vulnerabilities

Vulnerabilities for packages: composer...

GHSA-WG36-WVJ6-R67P vulnerabilities

Vulnerabilities for packages: composer...

GHSA-GQW4-4W2P-838Q vulnerabilities

Vulnerabilities for packages: composer...

MiracleLinux 9 : osbuild-composer-149-5.el9_7.ML.1 (AXSA:2026-493:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-493:06 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the MiracleLinu...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (April 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the April 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Composer Apach...

AlmaLinux 8 : osbuild-composer (ALSA-2026:8456)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:8456 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

CLSA-2026-1776954912 osbuild-composer: Fix of CVE-2026-25679

rebuild with newer golang 1.25.7-1.el96.tuxcare.els2 to fix CVE-2026-25679 net/url: reject IPv6 literal not at start of host...

[SECURITY] Fedora 42 Update: composer-2.9.7-1.fc42

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

Fedora 42 : pie (2026-3b2063832d)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3b2063832d advisory. Version 1.4.1 - Update bundled Composer to 2.9.7 ---- Version 1.4.0 New features! - Prompt to install missing system dependencies - Prompt to install build...

Fedora 42 : composer (2026-d91f313a63)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91f313a63 advisory. Version 2.9.7 - 2026-04-14 Fixes regression calling custom script command aliases that are called a substring of a composer command 12802 ---- Versi...

Fedora 43 : pie (2026-3f4283f831)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3f4283f831 advisory. Version 1.4.1 - Update bundled Composer to 2.9.7 ---- Version 1.4.0 New features! - Prompt to install missing system dependencies - Prompt to install build...

AlmaLinux 9 : osbuild-composer (ALSA-2026:9044)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:9044 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the AlmaLinux securi...