USN-8936-1: PHP vulnerabilities

Published Oct 19, 2026
·
Updated

It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2025-1218)

It was discovered that PHP incorrectly handled response buffer sizes in the SOAP HTTP client. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2025-14181)

It was discovered that PHP incorrectly handled certain TAR archive headers in the Phar extension. An attacker could possibly use this issue to inject arbitrary files into a crafted archive. (CVE-2026-6103)

It was discovered that PHP did not limit recursion depth when parsing certain SOAP requests. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2026-91765)

It was discovered that PHP incorrectly handled authentication headers when following HTTP redirects. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-91766)

It was discovered that PHP incorrectly handled wildcard names in TLS server certificates. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue did not affect Ubuntu 14.04 LTS. (CVE-2026-91767)

It was discovered that PHP incorrectly validated IPv6 client addresses in the FastCGI client access check. A remote attacker could possibly use this issue to bypass access restrictions. This issue did not affect Ubuntu 14.04 LTS. (CVE-2026-91768)

It was discovered that PHP incorrectly performed TLS peer name verification. A remote attacker could possibly use this issue to impersonate a trusted server. (CVE-2026-91769)

It was discovered that PHP incorrectly handled certain stream filter options. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-92842)

It was discovered that PHP incorrectly handled empty Location headers when following HTTP redirects. A malicious server could possibly use this issue to redirect the client to an unintended location. This issue did not affect Ubuntu 14.04 LTS. (CVE-2026-93682)

Affected Software

148 affected componentsFixes available
All of the following
ubuntu/libapache2-mod-php8.5<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/libphp8.5-embed<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-cgi<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-cli<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-common<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-fpm<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-litespeed<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-mysql<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-phpdbg<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/php8.5-soap<8.5.9-0ubuntu2
8.5.9-0ubuntu2
Ubuntu Ubuntu=26.10
All of the following
ubuntu/libapache2-mod-php8.5<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/libphp8.5-embed<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-cgi<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-cli<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-common<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-fpm<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-litespeed<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-mysql<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-phpdbg<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/php8.5-soap<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/libapache2-mod-php8.3<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libphp8.3-embed<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-cgi<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-cli<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-common<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-fpm<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-mysql<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-phpdbg<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/php8.3-soap<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libapache2-mod-php8.1<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libphp8.1-embed<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-cgi<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-cli<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-common<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-fpm<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-mysql<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-phpdbg<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/php8.1-soap<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libapache2-mod-php7.4<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libphp7.4-embed<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-cgi<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-cli<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-common<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-fpm<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-mysql<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-phpdbg<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/php7.4-soap<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libapache2-mod-php7.2<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libphp7.2-embed<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/php7.2-cgi<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/php7.2-cli<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/php7.2-common<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/php7.2-fpm<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/php7.2-phpdbg<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/php7.2-soap<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libapache2-mod-php7.0<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libphp7.0-embed<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/php7.0-cgi<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/php7.0-cli<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/php7.0-common<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/php7.0-fpm<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/php7.0-phpdbg<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/php7.0-soap<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libapache2-mod-php5<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/libapache2-mod-php5filter<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/libphp5-embed<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/php5-cgi<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/php5-cli<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/php5-common<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
All of the following
ubuntu/php5-fpm<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=14.04
ubuntu/php5<5.5.9+dfsg-1ubuntu4.29+esm17
5.5.9+dfsg-1ubuntu4.29+esm17
ubuntu/php7.0<7.0.33-0ubuntu0.16.04.16+esm21
7.0.33-0ubuntu0.16.04.16+esm21
ubuntu/php7.2<7.2.24-0ubuntu0.18.04.17+esm13
7.2.24-0ubuntu0.18.04.17+esm13
ubuntu/php7.4<7.4.3-4ubuntu2.29+esm4
7.4.3-4ubuntu2.29+esm4
ubuntu/php8.1<8.1.2-1ubuntu2.27
8.1.2-1ubuntu2.27
ubuntu/php8.3<8.3.6-0ubuntu0.24.04.12
8.3.6-0ubuntu0.24.04.12
ubuntu/php8.5<8.5.9-0ubuntu2
8.5.9-0ubuntu2
ubuntu/php8.5<8.5.4-0ubuntu1.4
8.5.4-0ubuntu1.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ubuntu/libapache2-mod-php8.5 to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  2. Upgrade

    Upgrade ubuntu/libphp8.5-embed to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  3. Upgrade

    Upgrade ubuntu/php8.5-cgi to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  4. Upgrade

    Upgrade ubuntu/php8.5-cli to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  5. Upgrade

    Upgrade ubuntu/php8.5-common to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  6. Upgrade

    Upgrade ubuntu/php8.5-fpm to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  7. Upgrade

    Upgrade ubuntu/php8.5-litespeed to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  8. Upgrade

    Upgrade ubuntu/php8.5-mysql to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  9. Upgrade

    Upgrade ubuntu/php8.5-phpdbg to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  10. Upgrade

    Upgrade ubuntu/php8.5-soap to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  11. Upgrade

    Upgrade ubuntu/libapache2-mod-php8.5 to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  12. Upgrade

    Upgrade ubuntu/libphp8.5-embed to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  13. Upgrade

    Upgrade ubuntu/php8.5-cgi to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  14. Upgrade

    Upgrade ubuntu/php8.5-cli to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  15. Upgrade

    Upgrade ubuntu/php8.5-common to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  16. Upgrade

    Upgrade ubuntu/php8.5-fpm to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  17. Upgrade

    Upgrade ubuntu/php8.5-litespeed to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  18. Upgrade

    Upgrade ubuntu/php8.5-mysql to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  19. Upgrade

    Upgrade ubuntu/php8.5-phpdbg to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  20. Upgrade

    Upgrade ubuntu/php8.5-soap to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  21. Upgrade

    Upgrade ubuntu/libapache2-mod-php8.3 to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  22. Upgrade

    Upgrade ubuntu/libphp8.3-embed to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  23. Upgrade

    Upgrade ubuntu/php8.3-cgi to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  24. Upgrade

    Upgrade ubuntu/php8.3-cli to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  25. Upgrade

    Upgrade ubuntu/php8.3-common to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  26. Upgrade

    Upgrade ubuntu/php8.3-fpm to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  27. Upgrade

    Upgrade ubuntu/php8.3-mysql to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  28. Upgrade

    Upgrade ubuntu/php8.3-phpdbg to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  29. Upgrade

    Upgrade ubuntu/php8.3-soap to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  30. Upgrade

    Upgrade ubuntu/libapache2-mod-php8.1 to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  31. Upgrade

    Upgrade ubuntu/libphp8.1-embed to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  32. Upgrade

    Upgrade ubuntu/php8.1-cgi to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  33. Upgrade

    Upgrade ubuntu/php8.1-cli to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  34. Upgrade

    Upgrade ubuntu/php8.1-common to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  35. Upgrade

    Upgrade ubuntu/php8.1-fpm to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  36. Upgrade

    Upgrade ubuntu/php8.1-mysql to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  37. Upgrade

    Upgrade ubuntu/php8.1-phpdbg to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  38. Upgrade

    Upgrade ubuntu/php8.1-soap to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  39. Upgrade

    Upgrade ubuntu/libapache2-mod-php7.4 to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  40. Upgrade

    Upgrade ubuntu/libphp7.4-embed to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  41. Upgrade

    Upgrade ubuntu/php7.4-cgi to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  42. Upgrade

    Upgrade ubuntu/php7.4-cli to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  43. Upgrade

    Upgrade ubuntu/php7.4-common to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  44. Upgrade

    Upgrade ubuntu/php7.4-fpm to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  45. Upgrade

    Upgrade ubuntu/php7.4-mysql to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  46. Upgrade

    Upgrade ubuntu/php7.4-phpdbg to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  47. Upgrade

    Upgrade ubuntu/php7.4-soap to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  48. Upgrade

    Upgrade ubuntu/libapache2-mod-php7.2 to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  49. Upgrade

    Upgrade ubuntu/libphp7.2-embed to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  50. Upgrade

    Upgrade ubuntu/php7.2-cgi to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  51. Upgrade

    Upgrade ubuntu/php7.2-cli to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  52. Upgrade

    Upgrade ubuntu/php7.2-common to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  53. Upgrade

    Upgrade ubuntu/php7.2-fpm to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  54. Upgrade

    Upgrade ubuntu/php7.2-phpdbg to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  55. Upgrade

    Upgrade ubuntu/php7.2-soap to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  56. Upgrade

    Upgrade ubuntu/libapache2-mod-php7.0 to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  57. Upgrade

    Upgrade ubuntu/libphp7.0-embed to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  58. Upgrade

    Upgrade ubuntu/php7.0-cgi to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  59. Upgrade

    Upgrade ubuntu/php7.0-cli to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  60. Upgrade

    Upgrade ubuntu/php7.0-common to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  61. Upgrade

    Upgrade ubuntu/php7.0-fpm to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  62. Upgrade

    Upgrade ubuntu/php7.0-phpdbg to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  63. Upgrade

    Upgrade ubuntu/php7.0-soap to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  64. Upgrade

    Upgrade ubuntu/libapache2-mod-php5 to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  65. Upgrade

    Upgrade ubuntu/libapache2-mod-php5filter to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  66. Upgrade

    Upgrade ubuntu/libphp5-embed to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  67. Upgrade

    Upgrade ubuntu/php5-cgi to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  68. Upgrade

    Upgrade ubuntu/php5-cli to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  69. Upgrade

    Upgrade ubuntu/php5-common to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  70. Upgrade

    Upgrade ubuntu/php5-fpm to a version that resolves this vulnerability.

    Fixed in Ubuntu Pro
  71. Upgrade

    Upgrade ubuntu/php5 to a version that resolves this vulnerability.

    Fixed in 5.5.9+dfsg-1ubuntu4.29+esm17
  72. Upgrade

    Upgrade ubuntu/php7.0 to a version that resolves this vulnerability.

    Fixed in 7.0.33-0ubuntu0.16.04.16+esm21
  73. Upgrade

    Upgrade ubuntu/php7.2 to a version that resolves this vulnerability.

    Fixed in 7.2.24-0ubuntu0.18.04.17+esm13
  74. Upgrade

    Upgrade ubuntu/php7.4 to a version that resolves this vulnerability.

    Fixed in 7.4.3-4ubuntu2.29+esm4
  75. Upgrade

    Upgrade ubuntu/php8.1 to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.27
  76. Upgrade

    Upgrade ubuntu/php8.3 to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.12
  77. Upgrade

    Upgrade ubuntu/php8.5 to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2
  78. Upgrade

    Upgrade ubuntu/php8.5 to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.4
  79. Upgrade

    Upgrade PHP to a version that resolves this vulnerability.

    Patch USN-8936-1

Event History

Oct 19, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·01:25 PM
Data Sourced
via OSV·01:25 PM
DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203