Priority MEDIUM 43
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8…
RHSA-2026:62614
php security, bug fix, and enhancement update
Released 2026-09-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) php-8.3.33-1.el10_2, php-bcmath-8.3.33-1.el10_2, php-cli-8.3.33-1.el10_2 +22
Fixes 2 records
Priority LOW 23
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.2…