Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Oracle Linux PHP 8.4 Important Bug Fix Advisory ELSA-2026-56969
Oracle Linux has released updates for PHP 8.4.24 addressing CVEs 2026-17543 and 2026-17544, with new RPMs for x86_64 and aarch64 architectures available via th…
Fedora 44 php-phpseclib Denial of Service Vulnerability Fix Advisory
Fedora 44 has released an update for php-phpseclib to version 2.0.55, addressing CVE-2026-44167, which involves a denial of service due to untrusted ASN.1 file…
Mageia 10 PHP 8.5 IMAP SSL Support Advisory for issue 2026-0092
An update for Mageia 10 fixes an import error that caused the php[8.4,8.5]-imap package to lack SSL support, which is now deprecated and should be replaced.
Rocky Linux Advisory RLSA-2026-40416 PHP 8.2 Low Denial of Service
A security and enhancement update for PHP 8.2, addressing a denial of service vulnerability and various bug fixes, is now available for Rocky Linux 9 users.
Oracle Linux PHP Bug Fix Advisory Low Severity ELSA-2026-48197
Oracle Linux issued a security advisory with updated RPM packages for PHP and related modules, addressing various vulnerabilities and introducing version updat…
Mageia 10 php-fpdf Bugfix Notification for Advisory 2026-0076
Mageia 10 has released an update to php-fpdf version 1.9.0, which resolves deprecated warnings in PHP 8.5 and a bug linked to PDF creation dates.
Oracle Linux 8 PHP 8.2 Low Bug Fix Advisory ELSA-2026-47749
Oracle Linux 8 has released security updates including PHP 8.2.32 and libzip 1.7.3, addressing CVE-2026-14355, with multiple related packages uploaded to the U…
Oracle Linux 10 php Low Advisory ELSA-2026-48170 CVE-2026-14355
Oracle Linux Security Advisory ELSA-2026-48170 announces updated RPM packages for PHP version 8.3.32 for x86_64 and aarch64 architectures, addressing vulnerabi…
Debian PHP 8.4 Critical Denial of Service SQL Injection Issues DSA-6406-1
Debian Security Advisory DSA-6406-1 addresses multiple vulnerabilities in PHP 8.4 that could lead to denial of service, SQL injection, and arbitrary code execu…
Rocky Linux PHP Important Security Advisories RLSA-2026-34354
Important: php:7.4 security update
Rocky Linux PHP Important Remote Code Exec DoS Advisory RLSA-2026-34354
Important: php:7.4 security update
Mageia 9 PHP Critical Security Advisory MGASA-2026-0127 CVE-2026-6735
MGASA-2026-0127 - Updated php packages fix security vulnerabilities
Ubuntu 20.04 LTS: PHP Security Advisory 7648-3 CVE-2025-1735 DoS Issue
USN-7648-2 introduced a regression in PHP
Ubuntu 20.04: USN-7648-2 Advisory on Critical PHP Security Issues
Several security issues were fixed in PHP.
Ubuntu 7049-3: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Debian LTS: DLA-4068-1: php-nesbot-carbon Security Advisory Updates
Arbitrary file include in Carbon::setLocale has been fixed in Carbon, a PHP API extension for DateTime. For Debian 11 bullseye, this problem has been fixed in …
Ubuntu 7157-3: PHP Security Advisory Updates
Several security issues were fixed in PHP.
Gentoo: GLSA-202501-11: PHP: Security Advisory Updates
Multiple vulnerabilities have been discovered in PHP, the worst of which could lead to arbitrary code execution.
Fedora 40: php-tcpdf 2024-d6b0e72e3d Security Advisory Updates
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
Fedora 41: php-tcpdf 2024-7d6412477b Security Advisory Updates
Version 6.8.0 (2024-12-23) Requires PHP 7.1+ and curl extension. Escape error message. Use strict time-constant function to compare TCPDF-tag hashes. Add K_CUR…
Debian LTS: DLA-3997-1: php-laravel-framework Security Advisory Updates
It was discovered that there was a remotely exploitable vulnerability in php-laravel-framework, a popular web application framework written in PHP.
Rocky Linux: RLSA-2024:10949 php Security Advisories Updates
Moderate: php:8.2 security update
Rocky Linux: RLSA-2024:10950 php Security Advisories Updates
Moderate: php:8.1 security update
Ubuntu 7157-2: PHP Security Advisory Updates
USN-7157-1 introduced a regression in PHP.