RLSA-2025:7431 Moderate: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: Header parser of http stream wrapper does not handle folded headers CVE-2025-1217 php: Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 php: Streams HTTP wrapper...

EUVD-2025-8347

Malicious code in bioql PyPI...

EUVD-2025-0128

Malicious code in bioql PyPI...

EUVD-2022-2763

Malicious code in bioql PyPI...

EUVD-2024-31701

Malicious code in bioql PyPI...

EUVD-2022-28908

Malicious code in bioql PyPI...

EUVD-2025-10437

Malicious code in bioql PyPI...

EUVD-2025-12616

Malicious code in bioql PyPI...

EUVD-2021-29152

Malicious code in bioql PyPI...

EUVD-2025-0203

Malicious code in bioql PyPI...

EUVD-2023-12609

Malicious code in bioql PyPI...

EUVD-2022-7652

Malicious code in bioql PyPI...

EUVD-2022-29574

Malicious code in bioql PyPI...

EUVD-2025-10943

Malicious code in bioql PyPI...

EUVD-2024-41607

Malicious code in bioql PyPI...

EUVD-2023-0628

Malicious code in bioql PyPI...

CVE-2025-1220 affecting package php for versions less than 8.1.33-1

CVE-2025-1220 affecting package php for versions less than 8.1.33-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: php (CVE-2025-6491)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6491 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML...

Linux Distros Unpatched Vulnerability : CVE-2024-3096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP version 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, if a password stored with passwordhash starts with a null byte \x00, testing a blank...

Amazon Linux 2023 : php8.3, php8.3-bcmath, php8.3-cli (ALAS2023-2025-1114)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1114 advisory. fsockopen doesn't regard hostname as well, hostname is terminated at the null byte. This can cause Server Side Request Forgery in general case. CVE-2025-1220 Missing error checking could resul...