The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
PHP version 8.2.18 (11 Apr 2024) Core: Fixed bug GH-13612 (Corrupted memory in destructor with weak references). (nielsdos) Fixed bug GH-13784 (AX_GCC_FUNC_ATT…
Three security issues were discovered in php-svg-lib, a PHP library to read, parse and export to PDF SVG files, which could result in denial of service, restri…
Security issues were discovered in php-phpseclib, a PHP library for arbitrary-precision integer arithmetic, which could lead to Denial of Service.
An header injection issue was fixed in php-nyholm-psr7.
Several header injection issues were fixed in php-guzzlehttp-psr7.
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
It was discovered that php-phpseclib, a PHP library for arbitrary-precision integer arithmetic, was vulnerable to the so-called Terrapin Attack.
The container bci/php-fpm was updated. The following patches have been included in this update:
LinuxSecurity.com has been using the open-source Joomla content management system (CMS) and PHP scripting language for nearly three decades and recently comple…
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
Two major security vulnerabilities were recently discovered in PHP. It was discovered that PHP incorrectly handled certain XML files ( CVE-2023-3823 ) and cert…
The container bci/php-fpm was updated. The following patches have been included in this update:
**PHP version 8.1.22** (03 Aug 2023) **Build:** * Fixed bug [GH-11522](https://github.com/php/php-src/issues/11522) (PHP version check fails with '-' separator…
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
Multiple vulnerabilies were fixed in php-dompdf a CSS 2.1 compliant HTML to PDF converter, written in PHP. CVE-2021-3838