Security update for php8
This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).
- Actualiza a 8.2.35-150600.3.39.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de php8-fastcgi
Vulnerabilidades publicadas para php8-fastcgi en los últimos 30 días: 2. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 3
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). - CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). - CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). - CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). - CVE-2026-91768: Access control byp
- Actualiza a 8.2.34-150600.3.36.1
Publicación ActualizaciónSecurity update for php8
This update for php8 fixes the following issues: Update to version 8.2.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security issues in `libgd` (bsc#1273078). - CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL injection in `ext-pgsql` (bsc#1273075). - CVE-2026-14355: buffer allocation flaw in the AES-WRAP-PAD algorithm implementation can lead to heap metadata corruption and an application abort (bsc#1270351).
- Actualiza a 8.2.33-150600.3.33.1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.