openSUSE 15.4 php-composer2 Vulnerability Fix Addressed

An update for php-composer2 in openSUSE Leap 15.4 has been released to fix CVE-2025-67746, which involves ANSI control characters injection in terminal outputs of Composer commands. This vulnerability allows attackers to exploit remote sources to inject malicious control characters. The affected systems include openSUSE Leap 15.4, and users are advised to apply the patch immediately. The vulnerability was published on December 30, 2025, and has a low CVSS score indicating moderate severity. The patch can be installed using the recommended SUSE installation methods or via the command line. Users should ensure their systems are updated to mitigate potential risks associated with this vulnerability.

Key Points: • CVE-2025-67746 fixed in openSUSE Leap 15.4 for php-composer2. • Vulnerability allows ANSI control characters injection via remote sources. • Patch installation recommended using YaST or 'zypper patch' command.