Every CVE Search/ Get API key

CVE-2026-17543

SQL injection in ext-pgsql via E'...' backslash breakout

8.1 HighPublic exploitFix available

CVE-2026-17543 is a high vulnerability (CVSS 8.1) in Php, published July 30, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in php82 8.2.33-r0.

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.33%Down 0.1 points since Jul 31, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.1

SQL injection in ext-pgsql via E'...' backslash breakout

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
CVE-2026-17543
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U
Weakness
CWE-89
Updated
2026-11-02
EUVDEUVD-2026-51090 8.1

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
EUVD-2026-51090
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U
Updated
2026-11-02
NVD 8.1

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
CVE-2026-17543
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89
Updated
2026-11-02
OSVALPINE-CVE-2026-17543 9.8

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
ALPINE-CVE-2026-17543
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-17543 9.8
Record
BELL-CVE-2026-17543
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-17543 9.8

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
DEBIAN-CVE-2026-17543
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVOESA-2026-3475 9.8

php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Security Fix(es):

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.(CVE-2026-17543)

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.(CVE-2026-7260)

Record
OESA-2026-3475
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:47200 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:47200
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:56969 8.1

Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update

Record
RHSA-2026:56969
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57539 7.4

Red Hat Security Advisory: php:8.3 security, bug fix, and enhancement update

Record
RHSA-2026:57539
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:57574 7.4

Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Record
RHSA-2026:57574
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:61259 7.4

Red Hat Security Advisory: php security, bug fix, and enhancement update

Record
RHSA-2026:61259
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:61903 7.4

Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Record
RHSA-2026:61903
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62334 7.4

Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update

Record
RHSA-2026:62334
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62614 7.4

Red Hat Security Advisory: php security, bug fix, and enhancement update

Record
RHSA-2026:62614
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:56969 8.1

Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:Rocky Linux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:56969
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:57539 7.4

Important: php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:Rocky Linux-223944)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57539
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:57574 7.4

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 8.10.z (JIRA:Rocky Linux-223938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57574
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:61259 7.4

Low: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD (CVE-2026-14355)

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:Rocky Linux-192624)

  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:Rocky Linux-223940)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61259
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:61903 7.4

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:Rocky Linux-223942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61903
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:62334 7.4

Important: php:7.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 7.4 in 8.10.z (JIRA:Rocky Linux-223936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:62334
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:62614 7.4

Important: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 10.2.z (JIRA:Rocky Linux-223946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:62614
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-17543 8.1

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
UBUNTU-CVE-2026-17543
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:56969 No score

Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:AlmaLinux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:56969
Updated
2026-11-02
OSVALSA-2026:57539 No score

Important: php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223944)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57539
Updated
2026-11-02
OSVALSA-2026:57574 No score

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 8.10.z (JIRA:AlmaLinux-223938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57574
Updated
2026-11-02
OSVALSA-2026:61259 No score

Low: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD (CVE-2026-14355)
  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-192624)
  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-223940)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:61259
Updated
2026-11-02
OSVALSA-2026:61903 No score

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:61903
Updated
2026-11-02
OSVALSA-2026:62334 No score

Important: php:7.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 7.4 in 8.10.z (JIRA:AlmaLinux-223936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:62334
Updated
2026-11-02
OSVALSA-2026:62614 No score

Important: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 10.2.z (JIRA:AlmaLinux-223946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:62614
Updated
2026-11-02
OSVAZL-94178 No score

CVE-2026-17543 affecting package php for versions less than 8.3.33-1

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
AZL-94178
Updated
2026-11-02
OSVBIT-libphp-2026-17543 No score

SQL injection in ext-pgsql via E'...' backslash breakout

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
BIT-libphp-2026-17543
Updated
2026-11-02
OSVBIT-php-2026-17543 No score

SQL injection in ext-pgsql via E'...' backslash breakout

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
BIT-php-2026-17543
Updated
2026-11-02
OSVBIT-php-min-2026-17543 No score

SQL injection in ext-pgsql via E'...' backslash breakout

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
BIT-php-min-2026-17543
Updated
2026-11-02
OSVCLSA-2026-1785500956 No score

Fix CVE(s): CVE-2026-17543

  • SECURITY UPDATE: fix stack exhaustion via circular symlinks in tar-based phar archives (GHSA-vc5h-9ppw-p5f3)
    • debian/patches/CVE-2026-7260.patch: fix stack exhaustion via circular symlinks in tar-based phar archives (GHSA-vc5h-9ppw-p5f3)
    • CVE-2026-7260
  • SECURITY UPDATE: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
    • debian/patches/CVE-2026-17543.patch: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
    • CVE-2026-17543
Record
CLSA-2026-1785500956
Updated
2026-11-02
OSVCLSA-2026-1785563367 No score

php: Fix of 2 CVEs

  • CVE-2026-17543: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
  • CVE-2026-7260: fix unbounded recursion on circular phar symlinks (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785563367
Updated
2026-11-02
OSVCLSA-2026-1785755669 No score

php: Fix of 3 CVEs

  • CVE-2026-17543: fix SQL injection in ext/pgsql via E'...' backslash breakout in php_pgsql_add_quotes() (GHSA-7qpv-r5mr-78m4)
  • CVE-2026-7260: fix stack exhaustion from circular symlinks in phar archives by replacing recursion in phar_get_link_source() with cycle detection (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785755669
Updated
2026-11-02
OSVCLSA-2026-1785836282 No score

Fix CVE(s): CVE-2026-17543

  • SECURITY UPDATE: SQL injection in ext/pgsql via E'...' backslash breakout
    • debian/patches/CVE-2026-17543.patch: drop the E'...' escape-string constant prefix in php_pgsql_add_quotes() so PQescapeStringConn()- escaped data lands in a plain '...' literal in ext/pgsql/pgsql.c
    • CVE-2026-17543
Record
CLSA-2026-1785836282
Updated
2026-11-02
OSVCLSA-2026-1785846081 No score

php: Fix of CVE-2026-17543

  • CVE-2026-17543: fix SQL injection in ext/pgsql by dropping the E prefix in php_pgsql_add_quotes (GHSA-7qpv-r5mr-78m4)
Record
CLSA-2026-1785846081
Updated
2026-11-02
OSVCLSA-2026-1785936981 No score

php: Fix of 2 CVEs

  • CVE-2026-17543: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
  • CVE-2026-7260: fix unbounded recursion on circular phar symlinks (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785936981
Updated
2026-11-02
OSVCLSA-2026-1786033722 No score

Fix CVE(s): CVE-2026-17543, CVE-2026-7260

  • SECURITY UPDATE: fix unbounded recursion on circular symlinks in phar archives (GHSA-vc5h-9ppw-p5f3)
    • debian/patches/CVE-2026-7260.patch: restore the path separator in phar_get_link_location() so the Floyd cycle walk stays idempotent in ext/phar/util.c
    • CVE-2026-7260
Record
CLSA-2026-1786033722
Updated
2026-11-02
OSVCLSA-2026-1786447403 No score

php: Fix of 4 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash
  • CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals
  • CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
Record
CLSA-2026-1786447403
Updated
2026-11-02
OSVCLSA-2026-1786447704 No score

php: Fix of 4 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash
  • CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals
  • CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
Record
CLSA-2026-1786447704
Updated
2026-11-02
OSVCLSA-2026-1786448352 No score

php: Fix of 3 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash
  • CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals
  • CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
Record
CLSA-2026-1786448352
Updated
2026-11-02
OSVCLSA-2026-1786603529 No score

Fix CVE(s): CVE-2026-17543, CVE-2026-7260

  • SECURITY UPDATE: unbounded recursion via circular symlinks in phar archives
    • debian/patches/CVE-2026-7260.patch: unbounded recursion via circular symlinks in phar archives
    • CVE-2026-7260
  • SECURITY UPDATE: SQL injection in ext/pgsql via E'...' backslash breakout
    • debian/patches/CVE-2026-17543.patch: SQL injection in ext/pgsql via E'...' backslash breakout
    • CVE-2026-17543
Record
CLSA-2026-1786603529
Updated
2026-11-02
OSVMGASA-2026-0322 No score

Updated php packages fix security vulnerabilities

This update brings the latest version of php 8.2 and fixes some security vulnerabilities.

Record
MGASA-2026-0322
Updated
2026-11-02
OSVMGASA-2026-0329 No score

Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information.

Record
MGASA-2026-0329
Updated
2026-11-02
OSVMGASA-2026-0330 No score

Updated php8.5 packages fix security vulnerabilities

Updated php 8.5 packages fix some security vulnerabilities. For details see the references.

Record
MGASA-2026-0330
Updated
2026-11-02
OSVopenSUSE-SU-2026:11418-1 No score

php8-8.5.9-1.1 on GA media

These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11418-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21532-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
openSUSE-SU-2026:21532-1
Updated
2026-11-02
OSVSUSE-SU-2026:23121-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
SUSE-SU-2026:23121-1
Updated
2026-11-02
OSVSUSE-SU-2026:23144-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
SUSE-SU-2026:23144-1
Updated
2026-11-02
OSVSUSE-SU-2026:3509-1 No score

Security update for php8

This update for php8 fixes the following issues:

Update to version 8.3.33.

Security issues fixed:

  • CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077).
  • CVE-2026-9672: security issues in libgd (bsc#1273078).
  • CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL injection in ext-pgsql (bsc#1273075).
Record
SUSE-SU-2026:3509-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php82
Alpine:v3.22
 before 8.2.33-r0
8.2.33-r0
php83
Alpine:v3.22
 before 8.3.36-r0
8.3.36-r0
php83
Alpine:v3.23
 before 8.3.36-r0
8.3.36-r0
php83
Alpine:v3.24
 before 8.3.33-r0
8.3.33-r0
php84
Alpine:v3.22
 before 8.4.27-r0
8.4.27-r0
php84
Alpine:v3.23
 before 8.4.27-r0
8.4.27-r0
php84
Alpine:v3.24
 before 8.4.24-r0
8.4.24-r0
php85
Alpine:v3.23
 before 8.5.12-r0
8.5.12-r0
php85
Alpine:v3.24
 before 8.5.9-r0
8.5.9-r0
php8.4
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
php8.4-bcmath
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-cli
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-common
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-dba
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-dbg
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-devel
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-embedded
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-enchant
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-ffi
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-fpm
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-gd
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-gmp
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-intl
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-ldap
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-mbstring
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-mysqlnd
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-odbc
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-opcache
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-pdo
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-pgsql
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-process
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-snmp
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-soap
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-xml
AlmaLinux:10
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
apcu-panel
AlmaLinux:9
 before 5.1.23-1.module_el9.6.0+151+5f31e576
5.1.23-1.module_el9.6.0+151+5f31e576
php
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-bcmath
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-bcmath
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-cli
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-cli
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-common
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-common
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-dba
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-dbg
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-dbg
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-devel
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-devel
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-embedded
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-embedded
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-enchant
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-enchant
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-ffi
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-ffi
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-fpm
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-fpm
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-gd
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-gd
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-gmp
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-gmp
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-intl
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-ldap
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-ldap
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-mbstring
AlmaLinux:9
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php
Azure Linux:3
 before 8.3.33-1
8.3.33-1
php83
Alpaquita:25
 8.3.21-r0 up to 8.3.33-r0
8.3.33-r0
php83
Alpaquita:stream
 8.3.4-r2 up to 8.3.33-r0
8.3.33-r0
libphp
Bitnami
 8.2.0 up to 8.2.33, 8.3.0 up to 8.3.33, 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.2.338.3.338.4.248.5.9
php
Bitnami
 8.2.0 up to 8.2.33, 8.3.0 up to 8.3.33, 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.2.338.3.338.4.248.5.9
php-min
Bitnami
 8.2.0 up to 8.2.33, 8.3.0 up to 8.3.33, 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.2.338.3.338.4.248.5.9
libapache2-mod-php7.2
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
libphp7.2-embed
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-bcmath
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-bz2
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-cgi
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-cli
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-common
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-curl
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-dba
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-dev
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-enchant
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-fpm
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-gd
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-gmp
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-imap
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-interbase
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-intl
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-json
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-ldap
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-mbstring
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-mysql
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-odbc
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-opcache
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-pgsql
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-phpdbg
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-pspell
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-readline
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-recode
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-snmp
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-soap
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-sqlite3
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-sybase
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-tidy
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-xml
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-xmlrpc
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-xsl
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-zip
TuxCare:Ubuntu:18.04
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-bcmath
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-cli
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-common
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-dba
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-dbg
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-devel
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-embedded
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-enchant
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-ffi
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-fpm
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-gd
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-gmp
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-intl
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-json
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-ldap
TuxCare:CentOS:8.4
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php8.2
Debian:12
 before 8.2.33-1~deb12u1, plus listed versions
8.2.10-18.2.10-28.2.12-18.2.16-18.2.16-2
Show 23 moreShow less
8.2.17-18.2.18-18.2.18-1~deb12u18.2.20-1~deb12u18.2.20-28.2.20-38.2.21-18.2.23-18.2.24-18.2.24-1~deb12u18.2.26-1~deb12u18.2.26-48.2.27-18.2.28-1~deb12u18.2.29-1~deb12u18.2.30-1~deb12u18.2.31-1~deb12u18.2.32-1~deb12u18.2.5-28.2.7-18.2.7-1.18.2.7-1.28.2.7-1~deb12u1
8.2.33-1~deb12u1
php8.4
Debian:13
 before 8.4.24-1~deb13u1, plus listed versions
8.4.11-18.4.16-18.4.16-1~deb13u18.4.20-18.4.21-1
Show 4 moreShow less
8.4.21-1~deb13u18.4.22-18.4.23-18.4.23-1~deb13u1
8.4.24-1~deb13u1
php8.4
Debian:14
 before 8.4.24-1, plus listed versions
8.4.11-18.4.16-18.4.16-1~deb13u18.4.20-18.4.21-1
Show 5 moreShow less
8.4.21-1~deb13u18.4.22-18.4.23-18.4.23-1~deb13u18.4.24-1~deb13u1
8.4.24-1
php
Mageia:9
 before 8.2.33-1.mga9
8.2.33-1.mga9
php8.4
Mageia:10
 before 8.4.24-1.1.mga10
8.4.24-1.1.mga10
php8.5
Mageia:10
 before 8.5.9-1.mga10
8.5.9-1.mga10
php
openEuler:20.03-LTS-SP4
 before 8.0.30-16.oe2003sp4
8.0.30-16.oe2003sp4
php
openEuler:22.03-LTS-SP4
 before 8.0.30-16.oe2203sp4
8.0.30-16.oe2203sp4
php
openEuler:24.03-LTS-SP1
 before 8.3.33-1.oe2403sp1
8.3.33-1.oe2403sp1
php
openEuler:24.03-LTS-SP3
 before 8.3.33-1.oe2403sp3
8.3.33-1.oe2403sp3
php
openEuler:24.03-LTS-SP4
 before 8.3.33-1.oe2403sp4
8.3.33-1.oe2403sp4
php
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-bcmath
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-cli
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-common
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-dba
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-dbg
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-devel
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-embedded
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-enchant
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-ffi
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-fpm
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-gd
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-gmp
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-intl
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-ldap
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-mbstring
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-mysqlnd
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-odbc
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo-dblib
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo-firebird
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pgsql
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-process
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-snmp
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-soap
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-sodium
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-tidy
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-xml
Red Hat:hummingbird:1
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php8.4
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-bcmath
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-bcmath-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-cli
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-cli-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-common
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-common-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dba
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dba-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dbg
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dbg-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-debugsource
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-devel
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-embedded
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-embedded-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-enchant
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-enchant-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-ffi
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-ffi-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-fpm
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-fpm-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gd
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gd-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gmp
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gmp-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4
Rocky Linux:10
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php-pecl-apcu
Rocky Linux:9
 before 0:5.1.23-1.module+el9.7.0+40004+bf50a568
0:5.1.23-1.module+el9.7.0+40004+bf50a568
php-pecl-apcu
Rocky Linux:9
 before 0:5.1.23-1.module+el9.7.0+40005+715283ec
0:5.1.23-1.module+el9.7.0+40005+715283ec
php-pecl-redis6
Rocky Linux:9
 before 0:6.1.0-3.module+el9.8.0+40203+35cc8ffc
0:6.1.0-3.module+el9.8.0+40203+35cc8ffc
php-pecl-rrd
Rocky Linux:9
 before 0:2.0.3-4.module+el9.7.0+40005+715283ec
0:2.0.3-4.module+el9.7.0+40005+715283ec
php-pecl-rrd
Rocky Linux:9
 before 0:2.0.3-4.module+el9.7.0+40003+454ed3c4
0:2.0.3-4.module+el9.7.0+40003+454ed3c4
php-pecl-rrd
Rocky Linux:9
 before 0:2.0.3-4.module+el9.7.0+40004+bf50a568
0:2.0.3-4.module+el9.7.0+40004+bf50a568
php-pecl-xdebug3
Rocky Linux:9
 before 0:3.3.1-1.module+el9.7.0+40005+715283ec
0:3.3.1-1.module+el9.7.0+40005+715283ec
php-pecl-zip
Rocky Linux:9
 before 0:1.22.3-1.module+el9.7.0+40004+bf50a568
0:1.22.3-1.module+el9.7.0+40004+bf50a568
php-pecl-zip
Rocky Linux:9
 before 0:1.22.3-1.module+el9.7.0+40005+715283ec
0:1.22.3-1.module+el9.7.0+40005+715283ec
libzip
Rocky Linux:8
 before 0:1.7.3-1.module+el8.10.0+1596+477f03f8
0:1.7.3-1.module+el8.10.0+1596+477f03f8
libzip
Rocky Linux:8
 before 0:1.7.3-1.module+el8.10.0+1911+f499711e
0:1.7.3-1.module+el8.10.0+1911+f499711e
libzip
Rocky Linux:8
 before 0:1.7.3-1.module+el8.10.0+1605+02e07af7
0:1.7.3-1.module+el8.10.0+1605+02e07af7
php-pear
Rocky Linux:8
 before 1:1.10.14-1.module+el8.10.0+1596+477f03f8
1:1.10.14-1.module+el8.10.0+1596+477f03f8
php-pear
Rocky Linux:8
 before 1:1.10.14-1.module+el8.10.0+1911+f499711e
1:1.10.14-1.module+el8.10.0+1911+f499711e
php-pecl-apcu
Rocky Linux:8
 before 0:5.1.23-1.module+el8.10.0+1596+477f03f8
0:5.1.23-1.module+el8.10.0+1596+477f03f8
php-pecl-apcu
Rocky Linux:8
 before 0:5.1.23-1.module+el8.10.0+1911+f499711e
0:5.1.23-1.module+el8.10.0+1911+f499711e
php-pecl-rrd
Rocky Linux:8
 before 0:2.0.3-1.module+el8.10.0+1911+f499711e
0:2.0.3-1.module+el8.10.0+1911+f499711e
php-pecl-rrd
Rocky Linux:8
 before 0:2.0.3-1.module+el8.10.0+1605+02e07af7
0:2.0.3-1.module+el8.10.0+1605+02e07af7
php-pecl-rrd
Rocky Linux:8
 before 0:2.0.3-1.module+el8.10.0+1596+477f03f8
0:2.0.3-1.module+el8.10.0+1596+477f03f8
php-pecl-xdebug3
Rocky Linux:8
 before 0:3.2.2-2.module+el8.10.0+1596+477f03f8
0:3.2.2-2.module+el8.10.0+1596+477f03f8
php-pecl-xdebug3
Rocky Linux:8
 before 0:3.2.2-2.module+el8.10.0+1911+f499711e
0:3.2.2-2.module+el8.10.0+1911+f499711e
php-pecl-zip
Rocky Linux:8
 before 0:1.22.3-1.module+el8.10.0+1911+f499711e
0:1.22.3-1.module+el8.10.0+1911+f499711e
php-pecl-zip
Rocky Linux:8
 before 0:1.22.3-1.module+el8.10.0+1596+477f03f8
0:1.22.3-1.module+el8.10.0+1596+477f03f8
php
Rocky Linux:9
 before 0:8.0.30-8.el9_8
0:8.0.30-8.el9_8
php
Rocky Linux:9
 before 0:8.2.33-1.module+el9.8.0+40305+0c876ebe
0:8.2.33-1.module+el9.8.0+40305+0c876ebe
php-pecl-xdebug3
Rocky Linux:9
 before 0:3.2.2-2.module+el9.7.0+40004+bf50a568
0:3.2.2-2.module+el9.7.0+40004+bf50a568
libzip
Rocky Linux:8
 before 0:1.6.1-1.module+el8.10.0+1912+72767185
0:1.6.1-1.module+el8.10.0+1912+72767185
libzip
Rocky Linux:8
 before 0:1.6.1-1.module+el8.10.0+1604+6558efc7
0:1.6.1-1.module+el8.10.0+1604+6558efc7
php
Rocky Linux:8
 before 0:7.4.33-6.module+el8.10.0+40307+aa085b19
0:7.4.33-6.module+el8.10.0+40307+aa085b19
php-pear
Rocky Linux:8
 before 1:1.10.13-1.module+el8.10.0+1605+02e07af7
1:1.10.13-1.module+el8.10.0+1605+02e07af7
php-pear
Rocky Linux:8
 before 1:1.10.13-1.module+el8.10.0+1604+6558efc7
1:1.10.13-1.module+el8.10.0+1604+6558efc7
php-pear
Rocky Linux:8
 before 1:1.10.13-1.module+el8.10.0+1912+72767185
1:1.10.13-1.module+el8.10.0+1912+72767185
php-pecl-apcu
Rocky Linux:8
 before 0:5.1.18-1.module+el8.10.0+1604+6558efc7
0:5.1.18-1.module+el8.10.0+1604+6558efc7
php-pecl-apcu
Rocky Linux:8
 before 0:5.1.18-1.module+el8.10.0+1912+72767185
0:5.1.18-1.module+el8.10.0+1912+72767185
php-pecl-rrd
Rocky Linux:8
 before 0:2.0.1-1.module+el8.10.0+1604+6558efc7
0:2.0.1-1.module+el8.10.0+1604+6558efc7
php-pecl-rrd
Rocky Linux:8
 before 0:2.0.1-1.module+el8.4.0+414+2e7afcdd
0:2.0.1-1.module+el8.4.0+414+2e7afcdd
php-pecl-rrd
Rocky Linux:8
 before 0:2.0.1-1.module+el8.10.0+1912+72767185
0:2.0.1-1.module+el8.10.0+1912+72767185
php-pecl-xdebug
Rocky Linux:8
 before 0:2.9.5-1.module+el8.10.0+1912+72767185
0:2.9.5-1.module+el8.10.0+1912+72767185
php-pecl-xdebug
Rocky Linux:8
 before 0:2.9.5-1.module+el8.10.0+1604+6558efc7
0:2.9.5-1.module+el8.10.0+1604+6558efc7
php-pecl-zip
Rocky Linux:8
 before 0:1.18.2-1.module+el8.10.0+1604+6558efc7
0:1.18.2-1.module+el8.10.0+1604+6558efc7
php-pecl-zip
Rocky Linux:8
 before 0:1.18.2-1.module+el8.10.0+1912+72767185
0:1.18.2-1.module+el8.10.0+1912+72767185
php
Rocky Linux:10
 before 0:8.3.33-1.el10_2
0:8.3.33-1.el10_2
apache2-mod_php8
SUSE:Linux Enterprise Server 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
SUSE:Linux Enterprise Server 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
SUSE:Linux Enterprise Server 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
SUSE:Linux Enterprise Server 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
SUSE:Linux Enterprise Server 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
apache2-mod_php8
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
apache2-mod_php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-embed
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-fastcgi
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-fpm
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-test
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
apache2-mod_php7
SUSE:Linux Enterprise Module for Legacy 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Module for Legacy 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-embed
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-test
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 7.4.33-150400.4.68.2
7.4.33-150400.4.68.2
apache2-mod_php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php5
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 44 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.275.5.9+dfsg-1ubuntu4.295.5.9+dfsg-1ubuntu4.29+esm15.5.9+dfsg-1ubuntu4.29+esm25.5.9+dfsg-1ubuntu4.29+esm35.5.9+dfsg-1ubuntu4.29+esm45.5.9+dfsg-1ubuntu4.29+esm55.5.9+dfsg-1ubuntu4.29+esm65.5.9+dfsg-1ubuntu4.29+esm85.5.9+dfsg-1ubuntu4.29+esm105.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm125.5.9+dfsg-1ubuntu4.29+esm135.5.9+dfsg-1ubuntu4.29+esm145.5.9+dfsg-1ubuntu4.29+esm155.5.9+dfsg-1ubuntu4.29+esm165.5.9+dfsg-1ubuntu4.29+esm175.5.9+dfsg-1ubuntu4.29+esm18
 None known
php7.0
Ubuntu:Pro:16.04:LTS
 before 7.0.33-0ubuntu0.16.04.16+esm20, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 45 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.157.0.33-0ubuntu0.16.04.167.0.33-0ubuntu0.16.04.16+esm17.0.33-0ubuntu0.16.04.16+esm27.0.33-0ubuntu0.16.04.16+esm37.0.33-0ubuntu0.16.04.16+esm47.0.33-0ubuntu0.16.04.16+esm57.0.33-0ubuntu0.16.04.16+esm67.0.33-0ubuntu0.16.04.16+esm77.0.33-0ubuntu0.16.04.16+esm87.0.33-0ubuntu0.16.04.16+esm97.0.33-0ubuntu0.16.04.16+esm10
7.0.33-0ubuntu0.16.04.16+esm20
php7.2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 37 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.27.2.17-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.17.2.24-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.37.2.24-0ubuntu0.18.04.47.2.24-0ubuntu0.18.04.67.2.24-0ubuntu0.18.04.77.2.24-0ubuntu0.18.04.87.2.24-0ubuntu0.18.04.97.2.24-0ubuntu0.18.04.107.2.24-0ubuntu0.18.04.117.2.24-0ubuntu0.18.04.127.2.24-0ubuntu0.18.04.137.2.24-0ubuntu0.18.04.157.2.24-0ubuntu0.18.04.167.2.24-0ubuntu0.18.04.177.2.24-0ubuntu0.18.04.17+esm17.2.24-0ubuntu0.18.04.17+esm27.2.24-0ubuntu0.18.04.17+esm37.2.24-0ubuntu0.18.04.17+esm47.2.24-0ubuntu0.18.04.17+esm57.2.24-0ubuntu0.18.04.17+esm67.2.24-0ubuntu0.18.04.17+esm77.2.24-0ubuntu0.18.04.17+esm87.2.24-0ubuntu0.18.04.17+esm97.2.24-0ubuntu0.18.04.17+esm107.2.24-0ubuntu0.18.04.17+esm117.2.24-0ubuntu0.18.04.17+esm127.2.24-0ubuntu0.18.04.17+esm137.2.24-0ubuntu0.18.04.17+esm14
 None known
php7.4
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
Show 27 moreShow less
7.4.3-4ubuntu2.47.4.3-4ubuntu2.57.4.3-4ubuntu2.67.4.3-4ubuntu2.77.4.3-4ubuntu2.87.4.3-4ubuntu2.97.4.3-4ubuntu2.107.4.3-4ubuntu2.117.4.3-4ubuntu2.127.4.3-4ubuntu2.137.4.3-4ubuntu2.157.4.3-4ubuntu2.167.4.3-4ubuntu2.177.4.3-4ubuntu2.187.4.3-4ubuntu2.197.4.3-4ubuntu2.207.4.3-4ubuntu2.227.4.3-4ubuntu2.237.4.3-4ubuntu2.247.4.3-4ubuntu2.267.4.3-4ubuntu2.287.4.3-4ubuntu2.297.4.3-4ubuntu2.29+esm17.4.3-4ubuntu2.29+esm27.4.3-4ubuntu2.29+esm37.4.3-4ubuntu2.29+esm47.4.3-4ubuntu2.29+esm5
 None known
php8.1
Ubuntu:22.04:LTS
 before 8.1.2-1ubuntu2.26, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 21 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.158.1.2-1ubuntu2.178.1.2-1ubuntu2.188.1.2-1ubuntu2.198.1.2-1ubuntu2.208.1.2-1ubuntu2.218.1.2-1ubuntu2.228.1.2-1ubuntu2.238.1.2-1ubuntu2.248.1.2-1ubuntu2.25
8.1.2-1ubuntu2.26
php8.3
Ubuntu:24.04:LTS
 before 8.3.6-0ubuntu0.24.04.11, plus listed versions
8.3.0-18.3.0-1ubuntu18.3.4-18.3.4-1build18.3.6-0maysync1
Show 10 moreShow less
8.3.6-0ubuntu0.24.04.18.3.6-0ubuntu0.24.04.28.3.6-0ubuntu0.24.04.38.3.6-0ubuntu0.24.04.48.3.6-0ubuntu0.24.04.58.3.6-0ubuntu0.24.04.68.3.6-0ubuntu0.24.04.78.3.6-0ubuntu0.24.04.88.3.6-0ubuntu0.24.04.98.3.6-0ubuntu0.24.04.10
8.3.6-0ubuntu0.24.04.11
php8.5
Ubuntu:26.04:LTS
 before 8.5.4-0ubuntu1.3, plus listed versions
8.5.2-0ubuntu18.5.4-0ubuntu18.5.4-0ubuntu1.18.5.4-0ubuntu1.2
8.5.4-0ubuntu1.3
php8
openSUSE:Tumbleweed
 before 8.5.9-1.1
8.5.9-1.1
apache2-mod_php8
openSUSE:Leap 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
openSUSE:Leap 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
openSUSE:Leap 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
openSUSE:Leap 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
openSUSE:Leap 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-test
openSUSE:Leap 16.0
 before 8.4.24-160000.1.1
8.4.24-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubpratham220/CVE-2026-17543-PHP-Exposure-Validator2026-08-04

History

History
WhenChangedSources
2026-11-03exploits, factsPoC in GitHub
2026-11-03affected, aliases, exploits, referencesOSV
2026-11-02createdCVE List, EUVD, NVD, OSV, PoC in GitHub

References

Show 110 moreShow less
This page doesn't list everything

Left out here: 935 package rows and 9 versions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 5 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open