Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security vulnerabilities have been discovered in the MongoDB driver for PHP, which could result in information disclosure, PHP objection injection or …
PHP version 8.4.26 (24 Sep 2026) BCMath: Fixed out-of-bounds read in bc_is_zero_for_scale() when scale exceeds n_scale. (Ilia Alshanetsky) Core:
New php packages are available for Slackware 15.0 and -current to fix security issues.
Several security issues were fixed in PHP.
Oracle Linux has released updates for PHP and related packages in version 8.3.33 and various PHP extensions to address security vulnerabilities linked to speci…
Oracle Linux has released security updates for several packages, including libzip and php, addressing vulnerabilities and updating to the latest versions for i…
Fedora has released an update for php-phpseclib3 to version 3.0.56, addressing vulnerabilities CVE-2026-40194 and CVE-2026-44167, and it can be installed via t…
The Fedora 43 update for php-phpseclib3 to version 3.0.56 fixes vulnerabilities CVE-2026-40194 and CVE-2026-44167, improving security for the PHP Secure Commun…
A critical update for PHP on Rocky Linux 8 addresses SQL injection and denial of service vulnerabilities while also including various bug fixes and enhancement…
A significant update for PHP and various modules in Rocky Linux 9 addresses critical vulnerabilities, including SQL injection and denial of service issues, enh…
Fedora 44 has released an update for php-phpseclib to version 2.0.55, addressing CVE-2026-44167, which involves a denial of service due to untrusted ASN.1 file…
Fedora has released an update for php-phpseclib to version 2.0.55, addressing CVE-2026-44167, a denial of service vulnerability related to untrusted ASN.1 file…
The security release of php-pear-PHP-CodeSniffer version 4.0.4 addresses vulnerabilities and improves error messages, tokenizer support for PHP 8.5, and overal…
An update for PHP 8.2 in Rocky Linux 8 addresses low severity vulnerabilities, including a Denial of Service flaw, along with bug fixes and enhancements.
Rocky Linux 9 has received a low severity update for PHP 8.3, addressing a buffer allocation flaw and includes bug fixes and enhancements for various PHP modul…
A security update for PHP on Rocky Linux 10 addresses a denial of service vulnerability and includes bug fixes and enhancements, with detailed CVE information …
A security and enhancement update for PHP 8.2, addressing a denial of service vulnerability and various bug fixes, is now available for Rocky Linux 9 users.
A security update for PHP 7.4 has been released for Rocky Linux 8, addressing a denial of service vulnerability and including various bug fixes and enhancement…
Oracle Linux issued a security advisory with updated RPM packages for PHP and related modules, addressing various vulnerabilities and introducing version updat…
Updated php 8.5 packages in Mageia 10 address several security vulnerabilities, specifically CVE-2026-17544, CVE-2026-9672, CVE-2026-17543, and CVE-2026-7260.
The Fedora 43 update for PHP version 8.4.24 includes numerous bug fixes and security improvements, addressing vulnerabilities and enhancing various functionali…
Mageia released an update for version 9, addressing security vulnerabilities in php 8.2, specifically CVE-2026-7260 and CVE-2026-17543, by providing the latest…
Oracle Linux 8 has released security updates including PHP 8.2.32 and libzip 1.7.3, addressing CVE-2026-14355, with multiple related packages uploaded to the U…
Oracle Linux Security Advisory ELSA-2026-48170 announces updated RPM packages for PHP version 8.3.32 for x86_64 and aarch64 architectures, addressing vulnerabi…
