[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DSA 6514-1] php8.4 security update



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6514-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
September 25, 2026                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : php8.4
CVE ID         : CVE-2025-1218  CVE-2025-14181 CVE-2026-6103  CVE-2026-91765 
                 CVE-2026-91766 CVE-2026-91767 CVE-2026-91768 CVE-2026-91769 
                 CVE-2026-92842 CVE-2026-93682

Multiple security issues were found in PHP, a widely-used open source
general purpose scripting language which could result in denial of
service, information disclosure, incorrect validation of
TLS certificates or bypass of access control restrictions, 

For the stable distribution (trixie), these problems have been fixed in
version 8.4.26-1~deb13u1.

We recommend that you upgrade your php8.4 packages.

For the detailed security status of php8.4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php8.4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Ghpp
-----END PGP SIGNATURE-----


Reply to: