Linuxsecurity Critical SQL Injection Vulnerabilities in Rocky Linux PHP Modules
Article Content
- •Critical SQL injection vulnerabilities found in Rocky Linux PHP modules.
- •Affected systems include Rocky Linux 8 and 9 with specific RPM packages.
- •Immediate patching is recommended to prevent potential DoS attacks.
Rocky Linux has released advisories for critical SQL injection vulnerabilities affecting PHP modules in both Rocky Linux 8 and 9. The vulnerabilities allow for Denial of Service (DoS) attacks through SQL injection methods. The affected components include php, module.php-pecl-rrd, module.php-pecl-apcu, and others. The updates are crucial for maintaining system security and mitigating potential exploits. The Common Vulnerability Scoring System (CVSS) scores for these vulnerabilities indicate a high severity level, emphasizing the urgency of applying the patches. Users of Rocky Linux 8 and 9 are advised to update their systems immediately. Specific RPM packages affected include various versions of php and libzip. The advisories are available for review on Linuxsecurity.com.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…