php8-8.5.11-1.1 on GA media (moderate)

php8-8.5.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11901-1 Rating: moderate Cross-References: CVE-2025-1218 CVE-2025-14181 CVE-2026-17545 CVE-2026-6103 CVE-2026-91765 CVE-2026-91766 CVE-2026-91767 CVE-2026-91768 CVE-2026-91769 CVE-2026-92842 CVE-2026-93682 CVSS scores: CVE-2025-1218 SU...

OPENSUSE-SU-2026:11901-1 php8-8.5.11-1.1 on GA media

These are all security issues fixed in the php8-8.5.11-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2026:23121-1 Security update for php8

This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout bsc1273075. - CVE-2026-17544:...

SUSE-SU-2026:23144-1 Security update for php8

This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout bsc1273075. - CVE-2026-17544:...

PT-2026-68021

Name of the Vulnerable Software and Affected Versions Pluck CMS versions prior to 4.7.22 Description The admin file-management feature fails to properly restrict dangerous file uploads. The system uses a fixed blacklist in data/inc/files.php that checks the last 4-5 characters of a filename but...

OPENSUSE-SU-2026:11418-1 php8-8.5.9-1.1 on GA media

These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES16: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:22635-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22635-1 advisory. This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm...

MINI-F44G-WFGP-PHP8

Bulletin has no description...

OPENSUSE-SU-2026:10595-1 php8-8.5.5-1.1 on GA media

These are all security issues fixed in the php8-8.5.5-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for php8 (moderate)

openSUSE security update: security update for php8 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20113-1 Rating: moderate References: bsc1255043 bsc1255710 bsc1255711 bsc1255712 Cross-References: CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVSS...

openSUSE 15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:0071-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0071-1 advisory. Security fixes: - CVE-2025-14177: getimagesize function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk...

EUVD-2023-2702

Malicious code in bioql PyPI...

MINI-7V2Q-CXXP-PHP8

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2025:02474-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:02463-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2025:02474-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02474-1 advisory. Version update to 8.2.29: - CVE-2025-1220: Fixed null byte termination in hostnames bsc1246167 - CVE-2025-1735: Fixe...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2025:02462-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02462-1 advisory. Version update to 8.3.23: - CVE-2025-1220: Fixed null byte termination in hostnames bsc1246167 - CVE-2025-1735: Fixed pgsql...

CVE-2023-29009

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

openSUSE Security Advisory (SUSE-SU-2025:1012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : php8 (SUSE-SU-2025:1012-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1012-1 advisory. - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers bsc1239664 - CVE-2024-11235:...