Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 9: php Critical Memory Leak Buffer Overflow Vuln 2025-0330
MGASA-2025-0330 - Updated php packages fix security vulnerabilities
Fedora 42: PHP 8.4.16 Major Fixes for Heap Overflow and Information Leak
PHP version 8.4.16 (18 Dec 2025) Core: Sync all boost.context files with release 1.86.0. (mvorisek) Fixed bug GH-20435 (SensitiveParameter doesn't work for nam…
Recently Patched PHP Flaw Under Attack By TellYouThePass Ransomware
Researchers have detected active attacks from TellYouThePass ransomware that exploits the recently reported PHP flaw.…Recently Patched PHP Flaw Under Attack By…
PHP Maintainers Shared Update On PHP Source Code Compromi
The maintainers of the PHP programming language have issued an update regarding the security incident that came to light late last month , stating that the act…
PHP Site's User Database Was Hacked In Recent Source Code Backdoor Attack
The maintainers of the PHP programming language have issued an update regarding the security incident that came to light late last month, stating that the acto…
Backdoor In PHP Source Code Discovered
Unidentified attackers recently hacked the PHP Git server to inject the source code with a…Backdoor In PHP Source Code Discovered on Latest Hacking News
Fedora 31: php 2020-94763cb9
**PHP version 7.3.23** (01 Oct 2020) **Core:** * Fixed bug php#80048 (Bug php#69100 has not been fixed for Windows). (cmb) * Fixed bug php#80049 (Memleak when …
Fedora 32: php FEDORA-2020-3ea22534
**PHP version 7.4.6** (14 May 2020) **Core:** * Fixed bug php#78434 (Generator yields no items after valid() call). (Nikita) * Fixed bug php#79477 (casting obj…
Fedora 31: php FEDORA-2020-62ee541b
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid poi…
Fedora 30: php FEDORA-2020-96cb0120
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid poi…
PHP RCE flaw actively exploited to pop NGINX servers
A recently patched vulnerability (CVE-2019-11043) in PHP is being actively exploited by attackers to compromise NGINX web servers, threat intelligence firm Bad…
SUSE php-composer2 Critical Credential Leak and Code Exec Patch 2026-4283-1
An update that solves six vulnerabilities and has one security fix can now be installed.
Fedora Linux 39 RLSA-2024-14404 php-gd Critical Risk to Data Breach Issue
Important: git-lfs security update
Debian LTS: DLA-2350-1: php-horde-kronolith security upda
In Horde Groupware, there has been an XSS via the Name field during creation of a new Resource. This could have been leveraged for remote code execution after …
Fedora 31: php-horde-kronolith 2020-0fbd043b
**kronolith 4.2.29** * [mjr] Fix regresssion in event modification notifications (Bug #15022). ---- **kronolith 4.2.28** * [mjr] **SECURITY**: Don't leak priva…
Fedora 32: php-horde-kronolith 2020-2f88bad8
**kronolith 4.2.29** * [mjr] Fix regresssion in event modification notifications (Bug #15022). ---- **kronolith 4.2.28** * [mjr] **SECURITY**: Don't leak priva…
CVE-2024-4577: A Swiftly Weaponized Vulnerability for Ransomware Distribution
Security researchers recently issued an update detailing how attackers are exploiting a PHP code execution vulnerability to spread TellYouThePass ransomware . …
Debian LTS: DLA-3458-1: php7.3 security update
Niels Dossche and Tim D'¼sterhus discovered that PHP's implementation of the SOAP HTTP Digest authentication did not check for failures, which may result in a …
Debian: DSA-5425-1: php8.2 security update
It was discovered that PHP's implementation of SOAP HTTP Digest authentication performed insufficient error validation, which may result in a stack information…
Debian: DSA-5424-1: php7.4 security update
It was discovered that PHP's implementation of SOAP HTTP Digest authentication performed insufficient error validation, which may result in a stack information…
Securing a Linux Web Server: A Prim
Over the next couple of weeks and months, LinuxSecurity editors and contributors will be writing a series on Linux Web Server Security. This week, we're summar…
Debian LTS: DLA-1999-1: symfony security upda
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code executi…
Debian: DSA-4573-1: symfony security upda
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code executi…