Home / mailings [SECURITY] [DSA 6514-1] php8.4 security update
Posted on 25 September 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6514-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
September 25, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : php8.4
CVE ID : CVE-2025-1218 CVE-2025-14181 CVE-2026-6103 CVE-2026-91765
CVE-2026-91766 CVE-2026-91767 CVE-2026-91768 CVE-2026-91769
CVE-2026-92842 CVE-2026-93682
Multiple security issues were found in PHP, a widely-used open source
general purpose scripting language which could result in denial of
service, information disclosure, incorrect validation of
TLS certificates or bypass of access control restrictions,
For the stable distribution (trixie), these problems have been fixed in
version 8.4.26-1~deb13u1.
We recommend that you upgrade your php8.4 packages.
For the detailed security status of php8.4 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php8.4
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
