Priority MEDIUM 43
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8…
RHSA-2026:61259
php security, bug fix, and enhancement update
Released 2026-08-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) php-8.0.30-8.el9_8, php-bcmath-8.0.30-8.el9_8, php-cli-8.0.30-8.el9_8 +22
Fixes 3 records
Priority LOW 25
In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw.
Priority LOW 23
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.2…