Every CVE Search/ Get API key

CVE-2026-7260

Stack overflow in phar with circular symlinks

5.4 MediumFix available

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Active

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.11%Down 0.1 points since Jul 31, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.4

Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
CVE-2026-7260
CVSS 4.0
5.4 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U
Weakness
CWE-121
Updated
2026-11-02
EUVDEUVD-2026-51092 5.4

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
EUVD-2026-51092
CVSS 4.0
5.4 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U
Updated
2026-11-02
NVD 5.4

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
CVE-2026-7260
CVSS 4.0
5.4 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-121
Updated
2026-11-02
OSVALPINE-CVE-2026-7260 5.5

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
ALPINE-CVE-2026-7260
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-7260 5.5
Record
BELL-CVE-2026-7260
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-7260 5.5

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
DEBIAN-CVE-2026-7260
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVOESA-2026-3475 9.8

php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Security Fix(es):

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.(CVE-2026-17543)

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.(CVE-2026-7260)

Record
OESA-2026-3475
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:47200 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:47200
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57539 7.4

Red Hat Security Advisory: php:8.3 security, bug fix, and enhancement update

Record
RHSA-2026:57539
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:57574 7.4

Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Record
RHSA-2026:57574
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:61259 7.4

Red Hat Security Advisory: php security, bug fix, and enhancement update

Record
RHSA-2026:61259
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:61903 7.4

Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Record
RHSA-2026:61903
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62334 7.4

Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update

Record
RHSA-2026:62334
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:62614 7.4

Red Hat Security Advisory: php security, bug fix, and enhancement update

Record
RHSA-2026:62614
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:57539 7.4

Important: php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:Rocky Linux-223944)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57539
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:57574 7.4

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 8.10.z (JIRA:Rocky Linux-223938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57574
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:61259 7.4

Low: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD (CVE-2026-14355)

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:Rocky Linux-192624)

  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:Rocky Linux-223940)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61259
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:61903 7.4

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:Rocky Linux-223942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61903
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:62334 7.4

Important: php:7.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 7.4 in 8.10.z (JIRA:Rocky Linux-223936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:62334
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:62614 7.4

Important: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 10.2.z (JIRA:Rocky Linux-223946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:62614
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-7260 5.4

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
UBUNTU-CVE-2026-7260
CVSS 4.0
5.4 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:56969 No score

Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:AlmaLinux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:56969
Updated
2026-11-02
OSVALSA-2026:57539 No score

Important: php:8.3 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223944)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57539
Updated
2026-11-02
OSVALSA-2026:57574 No score

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 8.10.z (JIRA:AlmaLinux-223938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57574
Updated
2026-11-02
OSVALSA-2026:61259 No score

Low: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD (CVE-2026-14355)
  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-192624)
  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:AlmaLinux-223940)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:61259
Updated
2026-11-02
OSVALSA-2026:61903 No score

Important: php:8.2 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223942)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:61903
Updated
2026-11-02
OSVALSA-2026:62334 No score

Important: php:7.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 7.4 in 8.10.z (JIRA:AlmaLinux-223936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:62334
Updated
2026-11-02
OSVALSA-2026:62614 No score

Important: php security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 10.2.z (JIRA:AlmaLinux-223946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:62614
Updated
2026-11-02
OSVAZL-94181 No score

CVE-2026-7260 affecting package php for versions less than 8.3.33-1

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
AZL-94181
Updated
2026-11-02
OSVBIT-libphp-2026-7260 No score

Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
BIT-libphp-2026-7260
Updated
2026-11-02
OSVBIT-php-2026-7260 No score

Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
BIT-php-2026-7260
Updated
2026-11-02
OSVBIT-php-min-2026-7260 No score

Stack overflow in phar with circular symlinks

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Record
BIT-php-min-2026-7260
Updated
2026-11-02
OSVCLSA-2026-1785500956 No score

Fix CVE(s): CVE-2026-17543

  • SECURITY UPDATE: fix stack exhaustion via circular symlinks in tar-based phar archives (GHSA-vc5h-9ppw-p5f3)
    • debian/patches/CVE-2026-7260.patch: fix stack exhaustion via circular symlinks in tar-based phar archives (GHSA-vc5h-9ppw-p5f3)
    • CVE-2026-7260
  • SECURITY UPDATE: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
    • debian/patches/CVE-2026-17543.patch: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
    • CVE-2026-17543
Record
CLSA-2026-1785500956
Updated
2026-11-02
OSVCLSA-2026-1785563367 No score

php: Fix of 2 CVEs

  • CVE-2026-17543: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
  • CVE-2026-7260: fix unbounded recursion on circular phar symlinks (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785563367
Updated
2026-11-02
OSVCLSA-2026-1785755669 No score

php: Fix of 3 CVEs

  • CVE-2026-17543: fix SQL injection in ext/pgsql via E'...' backslash breakout in php_pgsql_add_quotes() (GHSA-7qpv-r5mr-78m4)
  • CVE-2026-7260: fix stack exhaustion from circular symlinks in phar archives by replacing recursion in phar_get_link_source() with cycle detection (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785755669
Updated
2026-11-02
OSVCLSA-2026-1785836427 No score

Fix CVE(s): CVE-2026-7260

  • SECURITY UPDATE: restore path separator in phar_get_link_location() so the CVE-2026-7260 cycle walk stays idempotent (GHSA-vc5h-9ppw-p5f3)
    • debian/patches/CVE-2026-7260.patch: restore path separator in phar_get_link_location() so the CVE-2026-7260 cycle walk stays idempotent (GHSA-vc5h-9ppw-p5f3)
    • CVE-2026-7260
Record
CLSA-2026-1785836427
Updated
2026-11-02
OSVCLSA-2026-1785856885 No score

php: Fix of 2 CVEs

  • CVE-2026-7260: restore the path separator in phar_get_link_location() so the cycle walk stays idempotent (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785856885
Updated
2026-11-02
OSVCLSA-2026-1785936981 No score

php: Fix of 2 CVEs

  • CVE-2026-17543: fix SQL injection in ext-pgsql via E'...' backslash breakout (GHSA-7qpv-r5mr-78m4)
  • CVE-2026-7260: fix unbounded recursion on circular phar symlinks (GHSA-vc5h-9ppw-p5f3)
Record
CLSA-2026-1785936981
Updated
2026-11-02
OSVCLSA-2026-1786033722 No score

Fix CVE(s): CVE-2026-17543, CVE-2026-7260

  • SECURITY UPDATE: fix unbounded recursion on circular symlinks in phar archives (GHSA-vc5h-9ppw-p5f3)
    • debian/patches/CVE-2026-7260.patch: restore the path separator in phar_get_link_location() so the Floyd cycle walk stays idempotent in ext/phar/util.c
    • CVE-2026-7260
Record
CLSA-2026-1786033722
Updated
2026-11-02
OSVCLSA-2026-1786447403 No score

php: Fix of 4 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash
  • CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals
  • CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
Record
CLSA-2026-1786447403
Updated
2026-11-02
OSVCLSA-2026-1786447704 No score

php: Fix of 4 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash
  • CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals
  • CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
Record
CLSA-2026-1786447704
Updated
2026-11-02
OSVCLSA-2026-1786448352 No score

php: Fix of 3 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash
  • CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals
  • CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
Record
CLSA-2026-1786448352
Updated
2026-11-02
OSVCLSA-2026-1786449396 No score

Fix CVE(s): CVE-2026-7260

  • SECURITY UPDATE: uncontrolled recursion (stack-overflow DoS) in phar_get_link_source() on circular symlink chains in tar/phar archives
    • debian/patches/CVE-2026-7260.patch: replace the recursive phar_get_link_source() with Floyd cycle detection in ext/phar/util.c, and restore the phar path separator in phar_get_link_location() so the symlink walk stays idempotent
    • CVE-2026-7260
Record
CLSA-2026-1786449396
Updated
2026-11-02
OSVCLSA-2026-1786470878 No score

php: Fix of CVE-2026-7260

  • CVE-2026-7260: fix phar circular symlink crash by replacing recursive phar_get_link_source() with an iterative Floyd cycle-detection walk in ext/phar/util.c (GHSA-vc5h-9ppw-p5f3); add regression test ext/phar/tests/tar/ghsa-vc5h-9ppw-p5f3-symlink-circular.phpt
Record
CLSA-2026-1786470878
Updated
2026-11-02
OSVCLSA-2026-1786471115 No score

php: Fix of 2 CVEs

  • CVE-2026-7260: fix stack exhaustion on circular symlink chains in phar archives (GHSA-vc5h-9ppw-p5f3)
  • CVE-2026-9672: fix uninitialized stack read in the bundled libgd GIF LZW decoder
Record
CLSA-2026-1786471115
Updated
2026-11-02
OSVCLSA-2026-1786603529 No score

Fix CVE(s): CVE-2026-17543, CVE-2026-7260

  • SECURITY UPDATE: unbounded recursion via circular symlinks in phar archives
    • debian/patches/CVE-2026-7260.patch: unbounded recursion via circular symlinks in phar archives
    • CVE-2026-7260
  • SECURITY UPDATE: SQL injection in ext/pgsql via E'...' backslash breakout
    • debian/patches/CVE-2026-17543.patch: SQL injection in ext/pgsql via E'...' backslash breakout
    • CVE-2026-17543
Record
CLSA-2026-1786603529
Updated
2026-11-02
OSVCLSA-2026-1787229717 No score

php: Fix of 13 CVEs

  • CVE-2026-7260: fix stack exhaustion via unbounded recursion on circular symlinks in phar archives
  • CVE-2026-9672: fix use of uninitialised LZW table data in bundled libgd GIF decoder
Record
CLSA-2026-1787229717
Updated
2026-11-02
OSVMGASA-2026-0322 No score

Updated php packages fix security vulnerabilities

This update brings the latest version of php 8.2 and fixes some security vulnerabilities.

Record
MGASA-2026-0322
Updated
2026-11-02
OSVMGASA-2026-0329 No score

Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information.

Record
MGASA-2026-0329
Updated
2026-11-02
OSVMGASA-2026-0330 No score

Updated php8.5 packages fix security vulnerabilities

Updated php 8.5 packages fix some security vulnerabilities. For details see the references.

Record
MGASA-2026-0330
Updated
2026-11-02
OSVopenSUSE-SU-2026:11418-1 No score

php8-8.5.9-1.1 on GA media

These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11418-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21532-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
openSUSE-SU-2026:21532-1
Updated
2026-11-02
OSVSUSE-SU-2026:23121-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
SUSE-SU-2026:23121-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php82
Alpine:v3.22
 before 8.2.33-r0
8.2.33-r0
php83
Alpine:v3.22
 before 8.3.36-r0
8.3.36-r0
php83
Alpine:v3.23
 before 8.3.36-r0
8.3.36-r0
php83
Alpine:v3.24
 before 8.3.33-r0
8.3.33-r0
php84
Alpine:v3.22
 before 8.4.27-r0
8.4.27-r0
php84
Alpine:v3.23
 before 8.4.27-r0
8.4.27-r0
php84
Alpine:v3.24
 before 8.4.24-r0
8.4.24-r0
php85
Alpine:v3.23
 before 8.5.12-r0
8.5.12-r0
php85
Alpine:v3.24
 before 8.5.9-r0
8.5.9-r0
php8.4
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
php8.4-bcmath
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-cli
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-common
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-dba
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-dbg
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-devel
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-embedded
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-enchant
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-ffi
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-fpm
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-gd
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-gmp
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-intl
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-ldap
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-mbstring
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-mysqlnd
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-odbc
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-opcache
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-pdo
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-pgsql
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-process
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-snmp
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-soap
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-xml
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
apcu-panel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 5.1.23-1.module_el9.6.0+151+5f31e576
5.1.23-1.module_el9.6.0+151+5f31e576
php
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-bcmath
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-bcmath
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-cli
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-cli
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-dba
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-dbg
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-dbg
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-embedded
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-embedded
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-enchant
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-enchant
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-ffi
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-ffi
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-fpm
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-fpm
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-gd
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-gd
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-gmp
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-gmp
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-intl
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php-ldap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+297+88e7f1bf
8.3.33-1.module_el9.8.0+297+88e7f1bf
php-ldap
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.3.33-1.module_el9.8.0+296+9aab6c42
8.3.33-1.module_el9.8.0+296+9aab6c42
php
Azure Linux:3
 before 8.3.33-1
8.3.33-1
php83
Alpaquita:25
 8.3.21-r0 up to 8.3.33-r0
8.3.33-r0
php83
Alpaquita:stream
 8.3.4-r2 up to 8.3.33-r0
8.3.33-r0
libphp
Bitnami
 8.2.0 up to 8.2.33, 8.3.0 up to 8.3.33, 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.2.338.3.338.4.248.5.9
php
Bitnami
 8.2.0 up to 8.2.33, 8.3.0 up to 8.3.33, 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.2.338.3.338.4.248.5.9
php-min
Bitnami
 8.2.0 up to 8.2.33, 8.3.0 up to 8.3.33, 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.2.338.3.338.4.248.5.9
libapache2-mod-php7.2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
libphp7.2-embed
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-bcmath
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-bz2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-cgi
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-cli
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-common
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-curl
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-dba
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-dev
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-enchant
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-fpm
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-gd
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-gmp
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-imap
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-interbase
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-intl
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-json
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-ldap
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-mbstring
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-mysql
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-odbc
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-opcache
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-pgsql
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-phpdbg
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-pspell
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-readline
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-recode
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-snmp
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-soap
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-sqlite3
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-sybase
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-tidy
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-xml
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-xmlrpc
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-xsl
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php7.2-zip
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 7.2.24-0ubuntu0.18.04.17+tuxcare.els16
7.2.24-0ubuntu0.18.04.17+tuxcare.els16
php
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-bcmath
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-cli
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-common
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-dba
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-dbg
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-embedded
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-enchant
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-ffi
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-fpm
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-gd
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-gmp
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-intl
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-json
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php-ldap
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
7.4.6-4.module_el8.4.0+2457+cd54dc85.tuxcare.els29
php8.2
Debian:12
 before 8.2.33-1~deb12u1, plus listed versions
8.2.10-18.2.10-28.2.12-18.2.16-18.2.16-2
Show 23 moreShow less
8.2.17-18.2.18-18.2.18-1~deb12u18.2.20-1~deb12u18.2.20-28.2.20-38.2.21-18.2.23-18.2.24-18.2.24-1~deb12u18.2.26-1~deb12u18.2.26-48.2.27-18.2.28-1~deb12u18.2.29-1~deb12u18.2.30-1~deb12u18.2.31-1~deb12u18.2.32-1~deb12u18.2.5-28.2.7-18.2.7-1.18.2.7-1.28.2.7-1~deb12u1
8.2.33-1~deb12u1
php8.4
Debian:13
 before 8.4.24-1~deb13u1, plus listed versions
8.4.11-18.4.16-18.4.16-1~deb13u18.4.20-18.4.21-1
Show 4 moreShow less
8.4.21-1~deb13u18.4.22-18.4.23-18.4.23-1~deb13u1
8.4.24-1~deb13u1
php8.4
Debian:14
 before 8.4.24-1, plus listed versions
8.4.11-18.4.16-18.4.16-1~deb13u18.4.20-18.4.21-1
Show 5 moreShow less
8.4.21-1~deb13u18.4.22-18.4.23-18.4.23-1~deb13u18.4.24-1~deb13u1
8.4.24-1
php
Mageia:9
From an advisory covering 2 CVEs
 before 8.2.33-1.mga9
8.2.33-1.mga9
php8.4
Mageia:10
From an advisory covering 4 CVEs
 before 8.4.24-1.1.mga10
8.4.24-1.1.mga10
php8.5
Mageia:10
From an advisory covering 4 CVEs
 before 8.5.9-1.mga10
8.5.9-1.mga10
php
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 8.0.30-16.oe2003sp4
8.0.30-16.oe2003sp4
php
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 8.0.30-16.oe2203sp4
8.0.30-16.oe2203sp4
php
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 8.3.33-1.oe2403sp1
8.3.33-1.oe2403sp1
php
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 8.3.33-1.oe2403sp3
8.3.33-1.oe2403sp3
php
openEuler:24.03-LTS-SP4
From an advisory covering 2 CVEs
 before 8.3.33-1.oe2403sp4
8.3.33-1.oe2403sp4
php
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-bcmath
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-cli
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-common
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-dba
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-dbg
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-embedded
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-enchant
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-ffi
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-fpm
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-gd
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-gmp
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-intl
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-ldap
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-mbstring
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-mysqlnd
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-odbc
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo-dblib
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo-firebird
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pgsql
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-process
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-snmp
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-soap
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-sodium
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-tidy
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-xml
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
apcu-panel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:5.1.23-1.module+el9.8.0+24343+756b4fcd
0:5.1.23-1.module+el9.8.0+24343+756b4fcd
php
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-bcmath
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-bcmath-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-cli
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-cli-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-common-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-dba
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-dba-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-dbg
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-dbg-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-embedded
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-embedded-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-enchant
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-enchant-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-ffi
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-ffi-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-fpm
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-fpm-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-gd
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-gd-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.3.33-1.module+el9.8.0+24633+17f8e765
0:8.3.33-1.module+el9.8.0+24633+17f8e765
php-pecl-apcu
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:5.1.23-1.module+el9.7.0+40004+bf50a568
0:5.1.23-1.module+el9.7.0+40004+bf50a568
php-pecl-apcu
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:5.1.23-1.module+el9.7.0+40005+715283ec
0:5.1.23-1.module+el9.7.0+40005+715283ec
php-pecl-redis6
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:6.1.0-3.module+el9.8.0+40203+35cc8ffc
0:6.1.0-3.module+el9.8.0+40203+35cc8ffc
php-pecl-rrd
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.0.3-4.module+el9.7.0+40005+715283ec
0:2.0.3-4.module+el9.7.0+40005+715283ec
php-pecl-rrd
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.0.3-4.module+el9.7.0+40003+454ed3c4
0:2.0.3-4.module+el9.7.0+40003+454ed3c4
php-pecl-rrd
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.0.3-4.module+el9.7.0+40004+bf50a568
0:2.0.3-4.module+el9.7.0+40004+bf50a568
php-pecl-xdebug3
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.3.1-1.module+el9.7.0+40005+715283ec
0:3.3.1-1.module+el9.7.0+40005+715283ec
php-pecl-zip
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.22.3-1.module+el9.7.0+40004+bf50a568
0:1.22.3-1.module+el9.7.0+40004+bf50a568
php-pecl-zip
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.22.3-1.module+el9.7.0+40005+715283ec
0:1.22.3-1.module+el9.7.0+40005+715283ec
libzip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.7.3-1.module+el8.10.0+1596+477f03f8
0:1.7.3-1.module+el8.10.0+1596+477f03f8
libzip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.7.3-1.module+el8.10.0+1911+f499711e
0:1.7.3-1.module+el8.10.0+1911+f499711e
libzip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.7.3-1.module+el8.10.0+1605+02e07af7
0:1.7.3-1.module+el8.10.0+1605+02e07af7
php-pear
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.10.14-1.module+el8.10.0+1596+477f03f8
1:1.10.14-1.module+el8.10.0+1596+477f03f8
php-pear
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.10.14-1.module+el8.10.0+1911+f499711e
1:1.10.14-1.module+el8.10.0+1911+f499711e
php-pecl-apcu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:5.1.23-1.module+el8.10.0+1596+477f03f8
0:5.1.23-1.module+el8.10.0+1596+477f03f8
php-pecl-apcu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:5.1.23-1.module+el8.10.0+1911+f499711e
0:5.1.23-1.module+el8.10.0+1911+f499711e
php-pecl-rrd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.0.3-1.module+el8.10.0+1911+f499711e
0:2.0.3-1.module+el8.10.0+1911+f499711e
php-pecl-rrd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.0.3-1.module+el8.10.0+1605+02e07af7
0:2.0.3-1.module+el8.10.0+1605+02e07af7
php-pecl-rrd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.0.3-1.module+el8.10.0+1596+477f03f8
0:2.0.3-1.module+el8.10.0+1596+477f03f8
php-pecl-xdebug3
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.2.2-2.module+el8.10.0+1596+477f03f8
0:3.2.2-2.module+el8.10.0+1596+477f03f8
php-pecl-xdebug3
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.2.2-2.module+el8.10.0+1911+f499711e
0:3.2.2-2.module+el8.10.0+1911+f499711e
php-pecl-zip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.22.3-1.module+el8.10.0+1911+f499711e
0:1.22.3-1.module+el8.10.0+1911+f499711e
php-pecl-zip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.22.3-1.module+el8.10.0+1596+477f03f8
0:1.22.3-1.module+el8.10.0+1596+477f03f8
php
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:8.0.30-8.el9_8
0:8.0.30-8.el9_8
php
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:8.2.33-1.module+el9.8.0+40305+0c876ebe
0:8.2.33-1.module+el9.8.0+40305+0c876ebe
php-pecl-xdebug3
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.2.2-2.module+el9.7.0+40004+bf50a568
0:3.2.2-2.module+el9.7.0+40004+bf50a568
libzip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.6.1-1.module+el8.10.0+1912+72767185
0:1.6.1-1.module+el8.10.0+1912+72767185
libzip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.6.1-1.module+el8.10.0+1604+6558efc7
0:1.6.1-1.module+el8.10.0+1604+6558efc7
php
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:7.4.33-6.module+el8.10.0+40307+aa085b19
0:7.4.33-6.module+el8.10.0+40307+aa085b19
php-pear
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.10.13-1.module+el8.10.0+1605+02e07af7
1:1.10.13-1.module+el8.10.0+1605+02e07af7
php-pear
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.10.13-1.module+el8.10.0+1604+6558efc7
1:1.10.13-1.module+el8.10.0+1604+6558efc7
php-pear
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.10.13-1.module+el8.10.0+1912+72767185
1:1.10.13-1.module+el8.10.0+1912+72767185
php-pecl-apcu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:5.1.18-1.module+el8.10.0+1604+6558efc7
0:5.1.18-1.module+el8.10.0+1604+6558efc7
php-pecl-apcu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:5.1.18-1.module+el8.10.0+1912+72767185
0:5.1.18-1.module+el8.10.0+1912+72767185
php-pecl-rrd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.0.1-1.module+el8.10.0+1604+6558efc7
0:2.0.1-1.module+el8.10.0+1604+6558efc7
php-pecl-rrd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.0.1-1.module+el8.4.0+414+2e7afcdd
0:2.0.1-1.module+el8.4.0+414+2e7afcdd
php-pecl-rrd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.0.1-1.module+el8.10.0+1912+72767185
0:2.0.1-1.module+el8.10.0+1912+72767185
php-pecl-xdebug
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.9.5-1.module+el8.10.0+1912+72767185
0:2.9.5-1.module+el8.10.0+1912+72767185
php-pecl-xdebug
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.9.5-1.module+el8.10.0+1604+6558efc7
0:2.9.5-1.module+el8.10.0+1604+6558efc7
php-pecl-zip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.18.2-1.module+el8.10.0+1604+6558efc7
0:1.18.2-1.module+el8.10.0+1604+6558efc7
php-pecl-zip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.18.2-1.module+el8.10.0+1912+72767185
0:1.18.2-1.module+el8.10.0+1912+72767185
php
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:8.3.33-1.el10_2
0:8.3.33-1.el10_2
apache2-mod_php8
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
apache2-mod_php8
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
apache2-mod_php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-embed
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-fastcgi
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-fpm
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-test
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
apache2-mod_php7
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-embed
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-test
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.2
7.4.33-150400.4.68.2
apache2-mod_php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fastcgi
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php7-fpm
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
apache2-mod_php7
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 3 CVEs
 before 7.4.33-150400.4.68.1
7.4.33-150400.4.68.1
php5
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1
Show 44 moreShow less
5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu45.5.9+dfsg-1ubuntu4.15.5.9+dfsg-1ubuntu4.25.5.9+dfsg-1ubuntu4.35.5.9+dfsg-1ubuntu4.45.5.9+dfsg-1ubuntu4.55.5.9+dfsg-1ubuntu4.65.5.9+dfsg-1ubuntu4.75.5.9+dfsg-1ubuntu4.95.5.9+dfsg-1ubuntu4.115.5.9+dfsg-1ubuntu4.125.5.9+dfsg-1ubuntu4.135.5.9+dfsg-1ubuntu4.145.5.9+dfsg-1ubuntu4.165.5.9+dfsg-1ubuntu4.175.5.9+dfsg-1ubuntu4.195.5.9+dfsg-1ubuntu4.205.5.9+dfsg-1ubuntu4.215.5.9+dfsg-1ubuntu4.225.5.9+dfsg-1ubuntu4.235.5.9+dfsg-1ubuntu4.245.5.9+dfsg-1ubuntu4.255.5.9+dfsg-1ubuntu4.265.5.9+dfsg-1ubuntu4.275.5.9+dfsg-1ubuntu4.295.5.9+dfsg-1ubuntu4.29+esm15.5.9+dfsg-1ubuntu4.29+esm25.5.9+dfsg-1ubuntu4.29+esm35.5.9+dfsg-1ubuntu4.29+esm45.5.9+dfsg-1ubuntu4.29+esm55.5.9+dfsg-1ubuntu4.29+esm65.5.9+dfsg-1ubuntu4.29+esm85.5.9+dfsg-1ubuntu4.29+esm105.5.9+dfsg-1ubuntu4.29+esm115.5.9+dfsg-1ubuntu4.29+esm125.5.9+dfsg-1ubuntu4.29+esm135.5.9+dfsg-1ubuntu4.29+esm145.5.9+dfsg-1ubuntu4.29+esm155.5.9+dfsg-1ubuntu4.29+esm165.5.9+dfsg-1ubuntu4.29+esm175.5.9+dfsg-1ubuntu4.29+esm18
 None known
php7.0
Ubuntu:Pro:16.04:LTS
 before 7.0.33-0ubuntu0.16.04.16+esm20, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 45 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.157.0.33-0ubuntu0.16.04.167.0.33-0ubuntu0.16.04.16+esm17.0.33-0ubuntu0.16.04.16+esm27.0.33-0ubuntu0.16.04.16+esm37.0.33-0ubuntu0.16.04.16+esm47.0.33-0ubuntu0.16.04.16+esm57.0.33-0ubuntu0.16.04.16+esm67.0.33-0ubuntu0.16.04.16+esm77.0.33-0ubuntu0.16.04.16+esm87.0.33-0ubuntu0.16.04.16+esm97.0.33-0ubuntu0.16.04.16+esm10
7.0.33-0ubuntu0.16.04.16+esm20
php7.2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
7.2.1-1ubuntu27.2.2-1ubuntu17.2.2-1ubuntu27.2.3-1ubuntu17.2.5-0ubuntu0.18.04.1
Show 37 moreShow less
7.2.7-0ubuntu0.18.04.17.2.7-0ubuntu0.18.04.27.2.10-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.17.2.15-0ubuntu0.18.04.27.2.17-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.17.2.19-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.17.2.24-0ubuntu0.18.04.27.2.24-0ubuntu0.18.04.37.2.24-0ubuntu0.18.04.47.2.24-0ubuntu0.18.04.67.2.24-0ubuntu0.18.04.77.2.24-0ubuntu0.18.04.87.2.24-0ubuntu0.18.04.97.2.24-0ubuntu0.18.04.107.2.24-0ubuntu0.18.04.117.2.24-0ubuntu0.18.04.127.2.24-0ubuntu0.18.04.137.2.24-0ubuntu0.18.04.157.2.24-0ubuntu0.18.04.167.2.24-0ubuntu0.18.04.177.2.24-0ubuntu0.18.04.17+esm17.2.24-0ubuntu0.18.04.17+esm27.2.24-0ubuntu0.18.04.17+esm37.2.24-0ubuntu0.18.04.17+esm47.2.24-0ubuntu0.18.04.17+esm57.2.24-0ubuntu0.18.04.17+esm67.2.24-0ubuntu0.18.04.17+esm77.2.24-0ubuntu0.18.04.17+esm87.2.24-0ubuntu0.18.04.17+esm97.2.24-0ubuntu0.18.04.17+esm107.2.24-0ubuntu0.18.04.17+esm117.2.24-0ubuntu0.18.04.17+esm127.2.24-0ubuntu0.18.04.17+esm137.2.24-0ubuntu0.18.04.17+esm14
 None known
php7.4
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
7.4.3-4build17.4.3-4build27.4.3-4ubuntu17.4.3-4ubuntu1.17.4.3-4ubuntu2.2
Show 27 moreShow less
7.4.3-4ubuntu2.47.4.3-4ubuntu2.57.4.3-4ubuntu2.67.4.3-4ubuntu2.77.4.3-4ubuntu2.87.4.3-4ubuntu2.97.4.3-4ubuntu2.107.4.3-4ubuntu2.117.4.3-4ubuntu2.127.4.3-4ubuntu2.137.4.3-4ubuntu2.157.4.3-4ubuntu2.167.4.3-4ubuntu2.177.4.3-4ubuntu2.187.4.3-4ubuntu2.197.4.3-4ubuntu2.207.4.3-4ubuntu2.227.4.3-4ubuntu2.237.4.3-4ubuntu2.247.4.3-4ubuntu2.267.4.3-4ubuntu2.287.4.3-4ubuntu2.297.4.3-4ubuntu2.29+esm17.4.3-4ubuntu2.29+esm27.4.3-4ubuntu2.29+esm37.4.3-4ubuntu2.29+esm47.4.3-4ubuntu2.29+esm5
 None known
php8.1
Ubuntu:22.04:LTS
 before 8.1.2-1ubuntu2.26, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 21 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.158.1.2-1ubuntu2.178.1.2-1ubuntu2.188.1.2-1ubuntu2.198.1.2-1ubuntu2.208.1.2-1ubuntu2.218.1.2-1ubuntu2.228.1.2-1ubuntu2.238.1.2-1ubuntu2.248.1.2-1ubuntu2.25
8.1.2-1ubuntu2.26
php8.3
Ubuntu:24.04:LTS
 before 8.3.6-0ubuntu0.24.04.11, plus listed versions
8.3.0-18.3.0-1ubuntu18.3.4-18.3.4-1build18.3.6-0maysync1
Show 10 moreShow less
8.3.6-0ubuntu0.24.04.18.3.6-0ubuntu0.24.04.28.3.6-0ubuntu0.24.04.38.3.6-0ubuntu0.24.04.48.3.6-0ubuntu0.24.04.58.3.6-0ubuntu0.24.04.68.3.6-0ubuntu0.24.04.78.3.6-0ubuntu0.24.04.88.3.6-0ubuntu0.24.04.98.3.6-0ubuntu0.24.04.10
8.3.6-0ubuntu0.24.04.11
php8.5
Ubuntu:26.04:LTS
 before 8.5.4-0ubuntu1.3, plus listed versions
8.5.2-0ubuntu18.5.4-0ubuntu18.5.4-0ubuntu1.18.5.4-0ubuntu1.2
8.5.4-0ubuntu1.3
php7.0
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 7.0.33-0ubuntu0.16.04.16+esm20, plus listed versions
7.0.1-57.0.1-67.0.2-17.0.2-37.0.2-4
Show 45 moreShow less
7.0.2-57.0.3-27.0.3-37.0.3-9ubuntu17.0.4-5ubuntu17.0.4-5ubuntu27.0.4-7ubuntu17.0.4-7ubuntu27.0.4-7ubuntu2.17.0.8-0ubuntu0.16.04.17.0.8-0ubuntu0.16.04.27.0.8-0ubuntu0.16.04.37.0.13-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.17.0.15-0ubuntu0.16.04.27.0.15-0ubuntu0.16.04.47.0.18-0ubuntu0.16.04.17.0.22-0ubuntu0.16.04.17.0.25-0ubuntu0.16.04.17.0.28-0ubuntu0.16.04.17.0.30-0ubuntu0.16.04.17.0.32-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.17.0.33-0ubuntu0.16.04.27.0.33-0ubuntu0.16.04.37.0.33-0ubuntu0.16.04.47.0.33-0ubuntu0.16.04.57.0.33-0ubuntu0.16.04.67.0.33-0ubuntu0.16.04.77.0.33-0ubuntu0.16.04.97.0.33-0ubuntu0.16.04.117.0.33-0ubuntu0.16.04.127.0.33-0ubuntu0.16.04.147.0.33-0ubuntu0.16.04.157.0.33-0ubuntu0.16.04.167.0.33-0ubuntu0.16.04.16+esm17.0.33-0ubuntu0.16.04.16+esm27.0.33-0ubuntu0.16.04.16+esm37.0.33-0ubuntu0.16.04.16+esm47.0.33-0ubuntu0.16.04.16+esm57.0.33-0ubuntu0.16.04.16+esm67.0.33-0ubuntu0.16.04.16+esm77.0.33-0ubuntu0.16.04.16+esm87.0.33-0ubuntu0.16.04.16+esm97.0.33-0ubuntu0.16.04.16+esm10
7.0.33-0ubuntu0.16.04.16+esm20
php8.1
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 8.1.2-1ubuntu2.26, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 21 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.158.1.2-1ubuntu2.178.1.2-1ubuntu2.188.1.2-1ubuntu2.198.1.2-1ubuntu2.208.1.2-1ubuntu2.218.1.2-1ubuntu2.228.1.2-1ubuntu2.238.1.2-1ubuntu2.248.1.2-1ubuntu2.25
8.1.2-1ubuntu2.26
php8.3
Ubuntu:24.04:LTS
From an advisory covering 3 CVEs
 before 8.3.6-0ubuntu0.24.04.11, plus listed versions
8.3.0-18.3.0-1ubuntu18.3.4-18.3.4-1build18.3.6-0maysync1
Show 10 moreShow less
8.3.6-0ubuntu0.24.04.18.3.6-0ubuntu0.24.04.28.3.6-0ubuntu0.24.04.38.3.6-0ubuntu0.24.04.48.3.6-0ubuntu0.24.04.58.3.6-0ubuntu0.24.04.68.3.6-0ubuntu0.24.04.78.3.6-0ubuntu0.24.04.88.3.6-0ubuntu0.24.04.98.3.6-0ubuntu0.24.04.10
8.3.6-0ubuntu0.24.04.11
php8.5
Ubuntu:26.04:LTS
From an advisory covering 3 CVEs
 before 8.5.4-0ubuntu1.3, plus listed versions
8.5.2-0ubuntu18.5.4-0ubuntu18.5.4-0ubuntu1.18.5.4-0ubuntu1.2
8.5.4-0ubuntu1.3
php8
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 8.5.9-1.1
8.5.9-1.1
apache2-mod_php8
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-test
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1

History

History
RecordedChangedSources
affectedOSV
factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-7260 is a medium vulnerability (CVSS 5.4) in Php, published July 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.11%, the 1st percentile. Fixed in php82 8.2.33-r0.

References

Show 125 moreShow less
This page doesn't list everything

Left out here: 1,047 package rows and 18 versions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open