SKYLINE Blog

Security advisories

Vulnerabilities, service outages and urgent notices that affect SKYLINE customers. Each advisory says how serious it is, what is affected and what you should do.

Follow advisories by RSS Need help? Open a support ticket

Browse by topic

All advisories

Reading language
All English العربية
  1. Severity: Low Status: Patched Vulnerability

    Debian sudo host option flaw (DSA-5954-1, CVE-2025-32462) and the chroot bug that skipped Debian

    DSA-5954-1 fixed sudo's -h/--host flaw on Debian 12. The KEV-listed chroot bug, CVE-2025-32463, never affected bookworm or trixie.

    Affected
    sudo in Debian 12 (bookworm) before 1.9.13p3-1+deb12u2 and 1 more
    Published
    Updated
  3. Severity: Medium Status: Patched Vulnerability

    PHP security releases of March 2025: 8.4.5, 8.3.19, 8.2.28 and 8.1.32

    PHP's 13 March 2025 releases fixed six CVEs in the HTTP stream wrapper, libxml and request shutdown. What changed and how to check your servers.

    Affected
    PHP 8.4 before 8.4.5 and 3 more
    Published
    Updated
  5. Severity: Critical Status: Patched Vulnerability

    rsync heap overflow and file-leak flaws (CVE-2024-12084 and five more): Debian DSA-5843-1 and DSA-5843-2

    Six rsync flaws from January 2025, one rated 9.8, were fixed in Debian 12 by DSA-5843-1; DSA-5843-2 fixed a -H regression. Check daemons and clients.

    Affected
    rsync in Debian 12 (bookworm) before 3.2.7-1+deb12u1 and 3 more
    Published
    Updated
  6. Severity: Critical Status: Patched Vulnerability

    Critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619: what Skyline customers need to know

    Two critical PHP flaws, known as "php2shell", can allow unauthenticated remote code execution. They are fixed in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Here is what Skyline updated on 22 October 2026 and what you need to...

    Affected
    PHP 8.5 before 8.5.12 and 5 more
    Published
    Updated

Get these advisories by email

Email me the alerts I ticked. I can unsubscribe at any time. We’ll email you a link to confirm. You aren’t subscribed until you click it. Privacy policy

How we rate severity
  • Severity: Critical Serious and exploitable now. Act immediately.
  • Severity: High Significant impact. Act as soon as you can.
  • Severity: Medium Limited impact or needs special conditions. Update in your next maintenance window.
  • Severity: Low Low risk. Update when convenient.
  • Severity: Informational For your information. No action needed.