php:8.2 security, bug fix, and enhancement update

An update is available for module.libzip, php, module.php-pecl-rrd, php-pecl-apcu, module.php-pecl-apcu, libzip, php-pecl-zip, module.php-pecl-zip, php-pecl-rrd, module.php, php-pear, module.php-pear, php-pecl-xdebug3, module.php-pecl-xdebug3. This update affects Rocky Linux 8. A Common...

OESA-2026-3475 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

BIT-LIBPHP-2026-7260 Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

Debian dla-4733 : libapache2-mod-php7.4 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4733 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4733-1 [email protected]...

Debian dla-4732 : libapache2-mod-php8.2 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4732 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4732-1 [email protected]...

[SECURITY] [DLA 4733-1] php7.4 security update

Debian LTS Advisory DLA-4733-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 11, 2026 https://wiki.debian.org/LTS Package : php7.4 Version : 7.4.33-1+deb11u12 CVE ID : CVE-2026-7260 CVE-2026-17543 Debian Bug : 1143153 Security issues were found in PHP, a...

[SECURITY] [DLA 4732-1] php8.2 security update

Debian LTS Advisory DLA-4732-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 11, 2026 https://wiki.debian.org/LTS Package : php8.2 Version : 8.2.33-1deb12u1 CVE ID : CVE-2026-7260 CVE-2026-17543 Debian Bug : 1143153 Security issues were found in PHP, a...

Stack overflow in phar with circular symlinks

...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3509-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3509-1 advisory. Update to version 8.3.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded...

Critical: php8.2

Issue Overview: Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9. CVE-2026-17543 Circular symbolic links in phar archives cou...

Amazon Linux 2023 : php8.4, php8.4-bcmath, php8.4-cli (ALAS2023-2026-2042)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2042 advisory. Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24...

Critical: php8.5

Issue Overview: Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9. CVE-2026-17543 Attacker-provided inputs to bccomp could lea...

php8-8.5.9-1.1 on GA media (moderate)

php8-8.5.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11418-1 Rating: moderate Cross-References: CVE-2026-17543 CVE-2026-17544 CVE-2026-7260 CVE-2026-9672 CVSS scores: CVE-2026-17543 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-17543 SUSE : 9.3...

[SECURITY] [DSA 6406-1] php8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6406-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 31, 2026 https://www.debian.org/security/faq -...

Debian dsa-6406 : libapache2-mod-php8.4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6406 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6406-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-7260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. befor...

CVE-2016-7260

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:32+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:56+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:12+00:00| seen|...

CVE-2019-7260

Linear eMerge E3-Series devices have Cleartext Credentials in a Database...

ECHO-7260-2C5D-ABF2

Bulletin has no description...

CVE-2025-7260

IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...