[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20261022182526127053.34fd095b@r-a-c.de>
Date: Thu, 22 Oct 2026 18:25:26 +0200
From: "Goetz T. Fischer" <g.fischer@...-c.de>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2026-109619: PHP 8.2–8.5
RCE via stale global state
On Thu, 22 Oct 2026 08:45:47 +0200, Christian Fischer wrote:
> it might worth to mention that the subject as well as the text here
> could imply / be interpreted that only PHP 8.2-8.5 are affected (and
> older versions not).
>
> But at least https://www.php.net/archive/2026.php#2026-10-21-5 mentions
> the availability for backports down to PHP 7.4 which implies that at
> least versions down to 7.4 are affected as well:
affected is 5.4.0 and all newer ones.
--
R-A-C
Götz T. Fischer CertIT&Comp
+49(0)7225/98 98 79
g.fischer@...-c.de
r-a-c.de
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
