https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:43:16.039992+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7628 ALSA-2022:7628 — Moderate: php:7.4 security, bug fix, and enhancement update 2026-10-03T13:43:16.179620+00:00

Affected: AlmaLinux:8: apcu-panel, AlmaLinux:8: libzip, AlmaLinux:8: libzip-devel, AlmaLinux:8: libzip-tools, AlmaLinux:8: php, AlmaLinux:8: php-bcmath, AlmaLinux:8: php-cli, AlmaLinux:8: php-common, AlmaLinux:8: php-dba, AlmaLinux:8: php-dbg and 27 more

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

The following packages have been upgraded to a later upstream version: php (7.4.30), php-pear (1.10.13). (BZ#2055422)

Security Fix(es):

* php: Special character breaks path in xml parsing (CVE-2021-21707) * php: Use after free due to php_filter_float() failing for ints (CVE-2021-21708) * php-pear: Directory traversal vulnerability (CVE-2021-32610)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-05771 bdu:2021-05771 2026-10-03T13:43:16.179804+00:00 bdu:2021-05771 https://cve.radiocsirt.org/vuln/certfr-2021-avi-564 certfr-2021-avi-564 — Une vulnérabilité a été découverte dans Drupal core. Elle permet à un attaquant de provoquer une exécution de code arbi… 2026-10-03T13:43:16.179832+00:00 certfr-2021-avi-564 https://cve.radiocsirt.org/vuln/cleanstart-2024-pw74857 CLEANSTART-2024-PW74857 — In Archive_Tar before 1 2026-10-03T13:43:16.179861+00:00

Affected: CleanStart: drupal7

Security vulnerability affects the drupal7 package. In Archive_Tar before 1.

 https://cve.radiocsirt.org/vuln/euvd-2026-27973 EUVD-2026-27973 2026-10-03T13:43:16.179905+00:00 EUVD-2026-27973 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32610 fkie_cve-2021-32610 2026-10-03T13:43:16.179920+00:00

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

 https://cve.radiocsirt.org/vuln/ghsa-p8q8-jfcv-g2h2 GHSA-p8q8-jfcv-g2h2 — Directory Traversal in Archive_Tar 2026-10-03T13:43:16.179941+00:00

Affected: Packagist: pear/archive_tar

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

 https://cve.radiocsirt.org/vuln/gsd-2021-32610 gsd-2021-32610 2026-10-03T13:43:16.179961+00:00 gsd-2021-32610 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11168-1 openSUSE-SU-2024:11168-1 — php7-pear-1.10.21-1.2 on GA media 2026-10-03T13:43:16.179973+00:00

php7-pear-1.10.21-1.2 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:3198-2 SUSE-SU-2022:3198-2 — Security update for php8-pear 2026-10-03T13:43:16.179990+00:00

Security update for php8-pear

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32610 UBUNTU-CVE-2021-32610 2026-10-03T13:43:16.180006+00:00

Affected: Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: php-pear, Ubuntu:18.04:LTS: php-pear, Ubuntu:20.04:LTS: php-pear, Ubuntu:22.04:LTS: php-pear

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.