Skip to content
OpenAdvisories
Medium DSA-4935-1 2 CVEs

php7.3 - security update

Published Jul 5, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 php7.3 7.3.29-1~deb10u1

Vulnerabilities 2

  • Medium 5.0

    Multiple vulnerabilities in Firebird client extension

    In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute(), execute(), fetch() and others by ret…

  • Medium 4.3

    Incorrect URL validation in FILTER_VALIDATE_URL

    In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to t…