Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6757-1: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Fedora 38: php 2024-39d50cc975 Security Advisory Updates
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
Fedora 39: php 2024-b46619f761 Security Advisory Updates
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
Mageia 10 PHP 8.5 Bugfix Advisory Updated for 2026-0145 Release
Security update
Mageia Issues Urgent Advisory 2026-0458 Due to Critical PHP Vulnerabilities
Security update
Oracle Linux 9 PHP 8.2 Low Bug Fix Advisory ELSA-2026-40416
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 8 php Important XSS Fix Advisory ELSA-2026-34354
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 9 php Important ELSA-2026-22143 Security Advisory
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Mageia 2025-0059: php-tcpdf Security Advisory Updates
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. (CVE-2024-56519) An issue was discovered in TCPDF …
Fedora 40: php-phpseclib 2025-b38cbff99d Security Advisory Updates
Security fix for CVE-2023-52892, CVE-2024-27354
Oracle9: ELSA-2024-10949: php:8.2 security Moderate Security Advisory Updates
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Mageia 2024-0328: php Security Advisory Updates
HTTP_REDIRECT_STATUS might be controlled via user request FPM log output might be modified by an attacker HTTP POST can be modified by an attacker For other bu…
Ubuntu 6305-3: PHP Security Advisory Updates
USN-6305-2 caused a regression in parsing XML.
SUSE: 2024:2106-1 important: php-composer2 Security Advisory Updates
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
SUSE: 2024:2107-1 important: php-composer2 Security Advisory Updates
* bsc#1226181 * bsc#1226182 Cross-References: * CVE-2024-35241
Fedora 40: php-wikimedia-cdb 2024-2c564b942d Security Advisory Updates
https://www.mediawiki.org/wiki/Release_notes/1.41
Fedora 40: php-tcpdf 2024-27eafd0e65 Security Advisory Updates
Version 6.7.5 (2024-04-20) Update GitHub actions fix: CSV-2024-22640 (#712)
Mageia 2024-0132: php Security Advisory Updates
Core: - Corrupted memory in destructor with weak references - GC does not scale well with a lot of objects created in destructor DOM: - Add some missing ZPP ch…
Fedora 32: php-phpmailer6 FEDORA-2020-d67df93a
This is a security release, with some other minor changes. For full details, refer to the [advisory](https://github.com/PHPMailer/PHPMailer/security/advisories…
Fedora 31: php-phpmailer6 FEDORA-2020-6d2e1105
This is a security release, with some other minor changes. For full details, refer to the [advisory](https://github.com/PHPMailer/PHPMailer/security/advisories…
Debian php8.2 Security Advisory DLA-4819-1 CVE-2025-1218 Denial of Service
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in in denial of service, informati…
Debian LTS php8.2 Critical Denial of Service SQL Injection Vuln 2026-7260
Debian has released a security advisory for PHP 8.2, addressing vulnerabilities that could lead to denial of service and SQL injection. Users are urged to upgr…
Mageia php8.4 Security Advisory Vuln CVE-2026-17544 CVE-2026-9672
Mageia 10 has released updates for php 8.4 to address multiple security vulnerabilities, as identified by CVEs CVE-2026-17544, CVE-2026-9672, CVE-2026-17543, a…
Oracle PHP8.4 Minor Bug Fix Advisory Announcement ELSA-2026-49914
Oracle Linux 10 has updated RPM packages for PHP 8.4.23, addressing CVE-2026-14355, and is available for both x86_64 and aarch64 architectures through the Unbr…