MGASA-2026-0530

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0530.html
Import Source
https://advisories.mageia.org/MGASA-2026-0530.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0530
Upstream
CVE (2)
  • CVE-2026-109618
  • CVE-2026-109619
Published
2026-10-22T04:25:57Z
Modified
2026-10-22T04:30:03Z
Summary
Updated php8.4 & php8.5 packages fix security vulnerabilities
Details

Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible.

References
Credits

Affected packages

Mageia:10 / php8.4

Package

Name
php8.4
Purl
pkg:rpm/mageia/php8.4?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.27-1.1.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0530.json"

Mageia:10 / php8.5

Package

Name
php8.5
Purl
pkg:rpm/mageia/php8.5?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.5.12-1.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0530.json"