The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The source package ocsinventory-server, a Hardware and software inventory tool has been updated to address the API change in php-cas due to CVE-2022-39369, see…
A vulnerability has been found in phpCAS, a Central Authentication Service client library in php, which may allow an attacker to gain access to a victim's acco…
The container bci/php was updated. The following patches have been included in this update:
PHP could be made to expose sensitive information.
The container bci/php was updated. The following patches have been included in this update:
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
**PHP version 8.2.7** (08 Jun 2023) **Core:** * Fixed bug [GH-11152](https://github.com/php/php-src/issues/11152) (Unable to alias namespaces containing reserv…
The container bci/php-apache was updated. The following patches have been included in this update:
It was recently discovered that PHP could be made to bypass password checking if a specially crafted input was provided (CVE-2023-0567).
The container bci/php was updated. The following patches have been included in this update:
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/php-apache was updated. The following patches have been included in this update:
An update for the php:8.1 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of…
Now more than ever, people, developers, and businesses alike consider PHP a dying language and that it might have no place in the IT/Dev World. However, PHP is…
The container bci/php-fpm was updated. The following patches have been included in this update:
**Version 1.7.0** - Bump to PHP 7.2 minimum - Allow psr/http-message v2 - Use copy-on-write for streams created from strings ---- **Version 1.6.1** - Security …
Researchers found active exploitation of the Eval PHP WordPress plugin to deploy backdoors on target…Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy…
## [3.1.48] - 2023-03-28 ### Security - Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. ### Fixed - Output buff…
Several security issues were fixed in PHP.