Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 7157-1: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Fedora 41: php 2024-3891a08c9e Security Advisory Updates
PHP version 8.3.14 (21 Nov 2024) CLI: Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang). (ilutov) Fixed bug G…
Slackware: 2024-327-01: php Security Advisory Update
New php packages are available for Slackware 15.0 and -current to fix security issues.
Fedora 41: php-bartlett-PHP-CompatInfo 2024-16a71b7cf5 Security Advisory Updates
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Fedora 40: php-bartlett-PHP-CompatInfo 2024-727ecb90c7 Security Advisory Updates
bartlett/php-compatinfo-db 6.12.0 - 2024-10-29 Added db:show command is now able to display deprecations on all components PHP 8.2.25 support PHP 8.3.13 support
Ubuntu 7049-2: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Fedora 40: php-tcpdf 2024-afeeca72ce Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 41: php-tcpdf 2024-b00678c08a Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 39: php-tcpdf 2024-0b2854c95b Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Debian LTS: DLA-3924-1: php-horde-mime-viewer Security Advisory Updates
It was discovered that there was a potential XSS vulnerability in php-horde-mime-viewer, a MIME viewer library for the Horde groupware platform.
Debian LTS: DLA-3923-1: php-horde-turba Security Advisory Updates
It was discovered that there was an arbitrary object deserialization vulnerability in php-horde-turba, an address book component for the Horde groupware suite.
Fedora 39: php 2024-7c800c4df7 Security Advisory Updates
PHP version 8.2.24 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fedora 40: php 2024-2b429e720e Security Advisory Updates
PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Fedora 41: php 2024-a03b06dbd0 Security Advisory Updates
PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fi…
Ubuntu 7049-1: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Debian: DSA-5771-1: php-twig Security Advisory Updates
Fabien Potencier discovered that under some conditions the sandbox mechanism of Twig, a template engine for PHP, could by bypassed. For the stable distribution…
Debian LTS: DLA-3888-1: php-twig Security Advisory Updates
A possible sandbox bypass has been fixed in php-twig, a template engine for PHP For Debian 11 bullseye, this problem has been fixed in version
Ubuntu 6841-2: PHP Security Advisory Updates
PHP could be made to accept invalid URLs.
Gentoo: GLSA-202408-32: PHP: Security Advisory Updates
Multiple vulnerabilities have been discovered in PHP, the worst of which can lead to a denial of service.
Mageia 2024-0262: php Security Advisory Updates
This update ships the latest version of php 8.2. It brings fixed security issues and the usual bug fixes. Vulnerability: A code logic error, filtering function…
Fedora 39: php 2024-52c23ef1ec Security Advisory Updates
PHP version 8.2.20 (06 Jun 2024) CGI: Fixed buffer limit on Windows, replacing read call usage by _read. (David Carlier) Fixed bug GHSA-3qgc-jrrr-25jv (Bypass …
Fedora 40: php 2024-49aba7b305 Security Advisory Updates
PHP version 8.3.8 (06 Jun 2024) CGI: Fixed buffer limit on Windows, replacing read call usage by _read. (David Carlier) Fixed bug GHSA-3qgc-jrrr-25jv (Bypass o…
Slackware: 2024-158-01: php Security Advisory Update
New php packages are available for Slackware 15.0 and -current to fix security issues.
Ubuntu 6757-2: PHP Security Advisory Updates
Several security issues were fixed in PHP.