Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
php: underflow in env_path_info in fpm_main.c (CVE-2019-11043) SL7 x86_64 php-5.4.16-46.1.el7_7.x86_64.rpm php-bcmath-5.4.16-46.1.el7_7.x86_64.rpm php-cli-5.4.…
An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Co…
An update for php is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Co…
**PHP version 7.3.11** (24 Oct 2019) **Core:** * Fixed bug php#78535 (auto_detect_line_endings value not parsed as bool). (bugreportuser) * Fixed bug php#78620…
Updated php and pcre2 packages fix security vulnerabilities: - FPM (#78599) env_path_info underflow in fpm_main.c can lead to RCE. (CVE-2019-11043) - MBStri…
The PHP development team has fixed a bug that could allow remote code execution in some setups of the programming language. Get the details:
PHP could be made to run programs if it received specially crafted network traffic.
PHP could be made to run programs if it received specially crafted network traffic.
A recently patched vulnerability (CVE-2019-11043) in PHP is being actively exploited by attackers to compromise NGINX web servers, threat intelligence firm Bad…
The package php before version 7.3.11-1 is vulnerable to arbitrary code execution.
If you're running any PHP based website on NGINX server and have PHP-FPM feature enabled for better performance, then beware of a newly disclosed vulnerability…
A vulnerability in PHP might allow an attacker to execute arbitrary code.
An update that solves one vulnerability can now be installed.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "…
Version 2.1.12 Release Highlights PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON PHPC-276: Enforce the decode nesting limit for CodeWScope…
Version 2.1.12 Release Highlights PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON PHPC-276: Enforce the decode nesting limit for CodeWScope…
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619
The headline-grabbing bugs known colloquially as PHP2Shell are giving cyber analysts a lot to track — and a lot to debunk.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
An update that solves two vulnerabilities can now be installed.
