Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
Important: php:7.4 security update
PHP version 8.4.21 (07 May 2026) Core: Fixed bug GH-19983 (GC assertion failure with fibers, generators and destructors). (iliaal) Fixed bug GH-21478 (Forward …
MGASA-2026-0127 - Updated php packages fix security vulnerabilities
PHP version 8.5.6 (07 May 2026) Core: Fixed bug GH-19983 (GC assertion failure with fibers, generators and destructors). (iliaal) Fixed ZEND_API mismatch on ze…
New php packages are available for Slackware 15.0 and -current to fix security issues.
It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable…
It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disc…
Several security issues were fixed in PHP.
Two vulnerabilities were discovered in php-dompdf, a PHP library to convert HTML to PDF. CVE-2021-3838 php-dompdf is vulnerable to PHAR deserialization due to …
MGASA-2025-0330 - Updated php packages fix security vulnerabilities
PHP version 8.4.16 (18 Dec 2025) Core: Sync all boost.context files with release 1.86.0. (mvorisek) Fixed bug GH-20435 (SensitiveParameter doesn't work for nam…
PHP version 8.4.16 (18 Dec 2025) Core: Sync all boost.context files with release 1.86.0. (mvorisek) Fixed bug GH-20435 (SensitiveParameter doesn't work for nam…
Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelector…
USN-7648-2 introduced a regression in PHP
Several security issues were fixed in PHP.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in server side request forgery or …
Several security issues were fixed in PHP.
