This update for phpunit fixes the following issues:

version 9.6.34:

- CVE-2026-24765: prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage (boo#1257381)


              

References

---

• CVE: CVE-2026-24765
• Bugzilla: 1257381 VUL-0: CVE-2026-24765: phpunit: PHPUnit: Arbitrary code execution via unsafe deserialization of code coverage files

Packages

---

• php7-phpunit-9.6.34-bp157.2.3.1

• php8-phpunit-9.6.34-bp157.2.3.1