ALT-PU-2026-12285

Высокий

ALT-PU-2026-12285: package php8.5 update to version 8.5.9-alt1

Источник

errata.altlinux.org

Дата публикации

12.08.2026

Дата обновления

12.08.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades php8.5 to version 8.5.9-alt1.

Устраненные уязвимости3

CVE-2026-17543

Критический 9.8

Дата публикации: 30.07.2026

CWE-89

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2026-17543 https://nvd.nist.gov/vuln/detail/CVE-2026-17543

Ссылки2

ALT-PU-2026-12285 https://errata.altlinux.org/ALT-PU-2026-12285

CVE-2026-9672 https://nvd.nist.gov/vuln/detail/CVE-2026-9672

Связанные уязвимости

ALT-PU-2026-12843

CVSS3: 9.8

altlinux

3 месяца назад

ALT-PU-2026-12843: package `php8.5-soap` update to version 8.5.9-alt1

ALT-PU-2026-12842

CVSS3: 9.8

altlinux

3 месяца назад

ALT-PU-2026-12842: package `php8.4-soap` update to version 8.4.24-alt1

ALT-PU-2026-12287

CVSS3: 9.8

altlinux

3 месяца назад

ALT-PU-2026-12287: package `php8.4` update to version 8.4.24-alt1

openSUSE-SU-2026:21532-1

suse-cvrf

3 месяца назад

Security update for php8

RLSA-2026:56969

rocky

3 месяца назад

Important: php8.4 security, bug fix, and enhancement update