[Git][security-tracker-team/security-tracker][master] initial tracking for latest PHP issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
43343261 by Moritz Mühlenhoff at 2026-10-21T15:49:27+02:00
initial tracking for latest PHP issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,11 @@
+CVE-2026-109619
+	- php8.4 <unfixed>
+	- php8.2 <removed>
+	NOTE: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
+CVE-2026-109618
+	- php8.4 <unfixed>
+	- php8.2 <removed>
+	NOTE: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
 CVE-2026-9869 (A stack-based buffer overflow vulnerability exists in the boa formTR06 ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2026-9827 (A arbitrary file write vulnerability exists in the boa formUploadFile  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43343261a68a7305fd2e4e0172583a627c2c7ebd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/43343261a68a7305fd2e4e0172583a627c2c7ebd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261021/b258d3f9/attachment.htm>