Verified Commit df9a2fa3 authored by Dave Long's avatar Dave Long
Browse files

Issue #3421371 by Spokje: Security update composer/composer (CVE-2023-43655)

parent ef82260b

composer.json

+1 −1
Original line number Diff line number Diff line
@@ -19,7 +19,7 @@ 
        "behat/mink-browserkit-driver": "^2.1",

        "behat/mink-selenium2-driver": "^1.4",

        "colinodell/psr-testlogger": "^1.2",

        "composer/composer": "^2.6.4",

        "composer/composer": "^2.7",

        "drupal/coder": "^8.3.10",

        "instaclick/php-webdriver": "^1.4.1",

        "justinrainbow/json-schema": "^5.2",

composer.lock

+11 −11
Original line number Diff line number Diff line
@@ -4,7 +4,7 @@ 
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",

        "This file is @generated automatically"

    ],

    "content-hash": "8817574eb861631d2d3562adf1af8480",

    "content-hash": "91f79e00c47ca8c6909c7d6aae5e6514",

    "packages": [

        {

            "name": "asm89/stack-cors",
@@ -4868,16 +4868,16 @@ 
        },

        {

            "name": "composer/composer",

            "version": "2.6.6",

            "version": "2.7.1",

            "source": {

                "type": "git",

                "url": "https://github.com/composer/composer.git",

                "reference": "683557bd2466072777309d039534bb1332d0dda5"

                "reference": "aaf6ed5ccd27c23f79a545e351b4d7842a99d0bc"

            },

            "dist": {

                "type": "zip",

                "url": "https://api.github.com/repos/composer/composer/zipball/683557bd2466072777309d039534bb1332d0dda5",

                "reference": "683557bd2466072777309d039534bb1332d0dda5",

                "url": "https://api.github.com/repos/composer/composer/zipball/aaf6ed5ccd27c23f79a545e351b4d7842a99d0bc",

                "reference": "aaf6ed5ccd27c23f79a545e351b4d7842a99d0bc",

                "shasum": ""

            },

            "require": {
@@ -4895,7 +4895,7 @@ 
                "seld/jsonlint": "^1.4",

                "seld/phar-utils": "^1.2",

                "seld/signal-handler": "^2.0",

                "symfony/console": "^5.4.11 || ^6.0.11",

                "symfony/console": "^5.4.11 || ^6.0.11 || ^7",

                "symfony/filesystem": "^5.4 || ^6.0 || ^7",

                "symfony/finder": "^5.4 || ^6.0 || ^7",

                "symfony/polyfill-php73": "^1.24",
@@ -4909,7 +4909,7 @@ 
                "phpstan/phpstan-phpunit": "^1.0",

                "phpstan/phpstan-strict-rules": "^1",

                "phpstan/phpstan-symfony": "^1.2.10",

                "symfony/phpunit-bridge": "^6.0 || ^7"

                "symfony/phpunit-bridge": "^6.4.1 || ^7.0.1"

            },

            "suggest": {

                "ext-openssl": "Enabling the openssl extension allows you to access https URLs for repositories and packages",
@@ -4922,7 +4922,7 @@ 
            "type": "library",

            "extra": {

                "branch-alias": {

                    "dev-main": "2.6-dev"

                    "dev-main": "2.7-dev"

                },

                "phpstan": {

                    "includes": [
@@ -4962,7 +4962,7 @@ 
                "irc": "ircs://irc.libera.chat:6697/composer",

                "issues": "https://github.com/composer/composer/issues",

                "security": "https://github.com/composer/composer/security/policy",

                "source": "https://github.com/composer/composer/tree/2.6.6"

                "source": "https://github.com/composer/composer/tree/2.7.1"

            },

            "funding": [

                {
@@ -4978,7 +4978,7 @@ 
                    "type": "tidelift"

                }

            ],

            "time": "2023-12-08T17:32:26+00:00"

            "time": "2024-02-09T14:26:28+00:00"

        },

        {

            "name": "composer/metadata-minifier",
@@ -9633,5 +9633,5 @@ 
    "platform-overrides": {

        "php": "8.1.0"

    },

    "plugin-api-version": "2.3.0"

    "plugin-api-version": "2.6.0"

}

composer/Metapackage/DevDependencies/composer.json

+1 −1
Original line number Diff line number Diff line
@@ -11,7 +11,7 @@ 
        "behat/mink-browserkit-driver": "^2.1",

        "behat/mink-selenium2-driver": "^1.4",

        "colinodell/psr-testlogger": "^1.2",

        "composer/composer": "^2.6.4",

        "composer/composer": "^2.7",

        "drupal/coder": "^8.3.10",

        "instaclick/php-webdriver": "^1.4.1",

        "justinrainbow/json-schema": "^5.2",

composer/Metapackage/PinnedDevDependencies/composer.json

+1 −1
Original line number Diff line number Diff line
@@ -14,7 +14,7 @@ 
        "colinodell/psr-testlogger": "v1.3.0",

        "composer/ca-bundle": "1.3.7",

        "composer/class-map-generator": "1.1.0",

        "composer/composer": "2.6.6",

        "composer/composer": "2.7.1",

        "composer/metadata-minifier": "1.0.0",

        "composer/pcre": "3.1.1",

        "composer/spdx-licenses": "1.5.8",