[ALSA-2026:87070] Important: php security update
Type:
security
Severity:
important
Release date:
2026-10-22
Description:
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 php-gd-8.3.36-1.el10_2.aarch64.rpm 02662ef226d2b85574107491788a5ffe218b563a0fe18cdf99163080ffe6e6c3
aarch64 php-mysqlnd-8.3.36-1.el10_2.aarch64.rpm 1a2c82b7f1c1b7ff3de14ae386b521ff069eac6b972fab3b80bd692c22c23b95
aarch64 php-opcache-8.3.36-1.el10_2.aarch64.rpm 233c413767153015583749c8d250734fbde4a5cd6d3ce12d55e991a492be1137
aarch64 php-dbg-8.3.36-1.el10_2.aarch64.rpm 289a4f0ef89f35b6ffff9c4b310dd345c7c45eae04012dc213c8df77aad9aade
aarch64 php-enchant-8.3.36-1.el10_2.aarch64.rpm 2b952db371296069559468e9805db88e5551e96e39d971e39976fa62d19172b8
aarch64 php-bcmath-8.3.36-1.el10_2.aarch64.rpm 2ee8123467974a07d226134f0cbebf07f6207e72ac6b9cf24fa3d5e9e279b8cb
aarch64 php-dba-8.3.36-1.el10_2.aarch64.rpm 3dbe7e2cddbb668b0992c1725b1a31530bb1d60067d28ff46df536ec26e2817c
aarch64 php-ffi-8.3.36-1.el10_2.aarch64.rpm 3fc0b7280079f7203717a5621965c1be60331730c0bb4473c8b085ac5abc8be1
aarch64 php-fpm-8.3.36-1.el10_2.aarch64.rpm 51ea75c36cc750e17acb2198ba5cd5eb2c98b1ded8e104eadb8bfa33e2ebfc3b
aarch64 php-snmp-8.3.36-1.el10_2.aarch64.rpm 5dbf789335761d55760b6e437b7b211a0ba36b22af00534d78e86b0d24215d20
aarch64 php-intl-8.3.36-1.el10_2.aarch64.rpm 6b3ba3334e95cf1d14a4a5590ba498bae7b820339ac3de266c17dd5536d6e063
aarch64 php-devel-8.3.36-1.el10_2.aarch64.rpm 6eaa1da101204e0c830831baf858c167fdd408c37bc0883bdf79b337644e6a90
aarch64 php-ldap-8.3.36-1.el10_2.aarch64.rpm 72cbfc9c528bc4bf01c9d481b0c5c5c8d87a341dc43f795aff023985ff1a493b
aarch64 php-odbc-8.3.36-1.el10_2.aarch64.rpm 76214e60665a6acfd0b86c86697d8f335b01b86f42957c37effbc0df7e604ac6
aarch64 php-mbstring-8.3.36-1.el10_2.aarch64.rpm 797d6a0eeace6575c3eca6201e85f4962ff77a1e5d931130386915c003195fd0
aarch64 php-embedded-8.3.36-1.el10_2.aarch64.rpm 84ddffb63ae51a9b8c3869160358d302187fbf06a235234ad47df30dbb9f71d7
aarch64 php-soap-8.3.36-1.el10_2.aarch64.rpm 95903436836ec35f6c4a4445d0fc76d8a91b09673e8f4de2e172d343d849b90f
aarch64 php-gmp-8.3.36-1.el10_2.aarch64.rpm dedf84ffeebe20a007f541373acbc2dc4f7a5d4109eafd494aedeeba0442d4d3
aarch64 php-xml-8.3.36-1.el10_2.aarch64.rpm e088b5b67758cdf22a3078f494e36c5626765ccd8fcfb8e2f3baaf6619e1f543
aarch64 php-process-8.3.36-1.el10_2.aarch64.rpm e72727a81dfb450b31a8a24c23c024962cba7da24e0963933c06474dae308a12
aarch64 php-8.3.36-1.el10_2.aarch64.rpm eb7494cfaeb6df32189d66160256d7d770c8e178738c7555e5ad32281a1d4057
aarch64 php-cli-8.3.36-1.el10_2.aarch64.rpm f3c4256e2d28537b3918c1d8d9e439c67a6578a39b1765b3c844b0bfa0677f3e
aarch64 php-pgsql-8.3.36-1.el10_2.aarch64.rpm f452eb9b9e23097782d5bc590f4501007f23dd01df6a885f0a2946e49b849cec
aarch64 php-pdo-8.3.36-1.el10_2.aarch64.rpm f494c9b645fa5cb9d02c407b56d22e2b31a33e8aa35f23620a05e102e500f959
aarch64 php-common-8.3.36-1.el10_2.aarch64.rpm f4e2b873c30127b95d74e9bd2de2e895c718a0687c497c4713bf402be9261d53
ppc64le php-gd-8.3.36-1.el10_2.ppc64le.rpm 1289e2f3e25b4cd8c57ac907388716bf65418a63a0e560f7c108adcea4078afd
ppc64le php-pdo-8.3.36-1.el10_2.ppc64le.rpm 17cb3103bdd9636f5fa9ae3f81e880f69ad81db999b08f29a2183594b0caf1e1
ppc64le php-xml-8.3.36-1.el10_2.ppc64le.rpm 24cf919248939b50339b76b76e092fbe5d7669e234091b4ec415ba8433ec9b78
ppc64le php-soap-8.3.36-1.el10_2.ppc64le.rpm 27c80bdcaa10f66070d59fb38786f66eb89484e4e7a70c262822d82edfa6cfac
ppc64le php-enchant-8.3.36-1.el10_2.ppc64le.rpm 377a8a929fd6527522919d69273254b0e4b2f0a72c100edb3da72a6dfd080461
ppc64le php-devel-8.3.36-1.el10_2.ppc64le.rpm 41453985c20a91c8901ef8eac63c28f4515c89b654cadd963fbb37bc798fe4b1
ppc64le php-odbc-8.3.36-1.el10_2.ppc64le.rpm 5017230c322e56b0311a2301fa6c56fdba52b20d82c89633732e10a2d2eca975
ppc64le php-snmp-8.3.36-1.el10_2.ppc64le.rpm 5606d3e4677deed45774daecd25d5e968044b6dabe556fbe251741ec0e9bc939
ppc64le php-dba-8.3.36-1.el10_2.ppc64le.rpm 58c343f99b7eac5ac8660b12a9e2da01308772d8b3c4f8c5a56481dd2cb9c3a7
ppc64le php-8.3.36-1.el10_2.ppc64le.rpm 6523173687b26385a0a56fc140ac272cb34aeceb18f1afaf821ab24ab4b4ab2e
ppc64le php-opcache-8.3.36-1.el10_2.ppc64le.rpm 6db00e7e819401a6c6786169f05429460bc5c14893283dd96381f029be02160d
ppc64le php-process-8.3.36-1.el10_2.ppc64le.rpm 6fec2f228c0b63eb332a8ac21881283d9b44e43ea8594328c7462fc0f20e93d4
ppc64le php-intl-8.3.36-1.el10_2.ppc64le.rpm 711eb8683b13ec56237d8270f83422c5f15245b09b0921d36ad3ce2192508516
ppc64le php-mbstring-8.3.36-1.el10_2.ppc64le.rpm 776967dbeeabebb4d894d646a6e8e2f452b83d9e70e6b146514a1f49f22e47bc
ppc64le php-bcmath-8.3.36-1.el10_2.ppc64le.rpm 790a49804409cc2b4e688362872166034e4a86c07572572466bb20e84deb9b9e
ppc64le php-ldap-8.3.36-1.el10_2.ppc64le.rpm 7c27272e4c3784d1cfdf3143c2cfb057de04e93f2f1c32b2e07efaf076aed8ff
ppc64le php-dbg-8.3.36-1.el10_2.ppc64le.rpm 9e67a39ecba7920e1da610981a6395e22bb095349adcabbc3e9e5cb46a7d4a8f
ppc64le php-cli-8.3.36-1.el10_2.ppc64le.rpm b158c1aa388305367a36d52a23bf0afa810082a4abd1680ab0459ae350198558
ppc64le php-fpm-8.3.36-1.el10_2.ppc64le.rpm b5e7b0a3ea32cc954e6aff207ae355939a16db628e7972f3e42c073653d69f38
ppc64le php-pgsql-8.3.36-1.el10_2.ppc64le.rpm bfec8aa020cd49cf7a4bd5f3da37f4051198ebfbee6e652a72f003f3db84fe1a
ppc64le php-common-8.3.36-1.el10_2.ppc64le.rpm d7500db906fd5e4bdc3ee517cfd049d9b86f85cd0e508aaf998865ef5189ac68
ppc64le php-mysqlnd-8.3.36-1.el10_2.ppc64le.rpm db09e7b263f5ff69b36f4fda3abdf05ee870afc44bafd7cb4adbe2909022ef52
ppc64le php-embedded-8.3.36-1.el10_2.ppc64le.rpm e24e76cd8e187489239782d567cec4f7f83d92042e4aa68dab0c30fd58310901
ppc64le php-ffi-8.3.36-1.el10_2.ppc64le.rpm fd82048d63e870bc97e4dcf4b4ea4b7af7eaccb10b4670b2e9f4cb96cd3dda54
ppc64le php-gmp-8.3.36-1.el10_2.ppc64le.rpm fef47f162b9a044b3c91c704ad619e767903523ce8cb05ad657d3101cdd659d8
s390x php-cli-8.3.36-1.el10_2.s390x.rpm 1059b9691a1d67e233b9630cce65be927d188cbd05651775360b7d630a26dd0e
s390x php-intl-8.3.36-1.el10_2.s390x.rpm 11fabb06d91c5f4fb00d96e804eb8d2a93c0ce42ee0545da3d47dc30e6bc10c1
s390x php-enchant-8.3.36-1.el10_2.s390x.rpm 16640f3c7b692f8835904d8b2ac4bdfa5fc4f88378fe0a60118b75dad4df5f09
s390x php-pgsql-8.3.36-1.el10_2.s390x.rpm 2906fda00a53ea1de56652f13e92932400ec8afc3e885ed6135e508c5e67a72e
s390x php-mbstring-8.3.36-1.el10_2.s390x.rpm 390b9a5394ae8dbff37ae10982d081d996fc1e5ab70fefe932df3ad59509537e
s390x php-soap-8.3.36-1.el10_2.s390x.rpm 3951aacd51fe15bae2c5428968b2f871a63ce91ef0ee326290abccb035a10d56
s390x php-8.3.36-1.el10_2.s390x.rpm 52e4470bfb5cc43e2ed44ba4700435559a451ea1aea658535fa7651158c9a5a1
s390x php-embedded-8.3.36-1.el10_2.s390x.rpm 541ba5afea9141f8c2a6a6621c89761704773980dfd50b69a3f0a0ef798d754e
s390x php-dbg-8.3.36-1.el10_2.s390x.rpm 57b63eab59e8b1ed4d0eed8281e0ee375792cf51f283423bdbd4f06373e3745f
s390x php-odbc-8.3.36-1.el10_2.s390x.rpm 818c08839e685e315fec33ad6082d96a4f1f3db366fa60204150e463885c7ae7
s390x php-pdo-8.3.36-1.el10_2.s390x.rpm 8d07603b531a73ba6bec52036a48cdeac9b7d5d0fea909bdabeaf33c0c0cbf43
s390x php-process-8.3.36-1.el10_2.s390x.rpm 9f0a9160192f33bcdf871e4cd4e57e892e95b1248e1b9a8078c0bc8e4637dffc
s390x php-gmp-8.3.36-1.el10_2.s390x.rpm ad6acfc601a0fbdffda7153c412c20ceda648cae79ca3f2c9a72b19620fa6360
s390x php-xml-8.3.36-1.el10_2.s390x.rpm b342c6e717142a36510b7a5bbd7fc3fb42d516036f2af9f50f8591b1da616bbf
s390x php-ffi-8.3.36-1.el10_2.s390x.rpm b4fd91221f006fdd45448ba2e9f2d4171359405f59b22acea4e23fc78808674f
s390x php-dba-8.3.36-1.el10_2.s390x.rpm bb18a6220ba6b578b8244b8ff9759c29829e151bc444ff53c348288aefd620d9
s390x php-mysqlnd-8.3.36-1.el10_2.s390x.rpm bd29e1348b35e9da68f857b0a8acd5e2aa161afd3063ee8654cb559c5bda1500
s390x php-common-8.3.36-1.el10_2.s390x.rpm bde5f319f70f2ec87fce263900186277f107b0a04778a6e3bd5d09b529fc35c3
s390x php-snmp-8.3.36-1.el10_2.s390x.rpm bfa5fefbda7c8f7e9f64f6b0fd6feada629eebd1732e4762cf334e11eb08d5dd
s390x php-opcache-8.3.36-1.el10_2.s390x.rpm c43fa1f90b28c11ca8173becd277e48bcb3eefd8c7c2177920958869604acaba
s390x php-fpm-8.3.36-1.el10_2.s390x.rpm d247480a7b406883c0d3c039dff501ad7db964d91de3efa90d20e3000f49751e
s390x php-bcmath-8.3.36-1.el10_2.s390x.rpm dbd5b77b1473fa98cf330798afd37cfa6d2f4b5d18428ebfbc14129eeda06b09
s390x php-gd-8.3.36-1.el10_2.s390x.rpm e880d86e8fd33d6665707dc2865b94b9ef2449a0bb708a6cbe84787e5550c6f1
s390x php-ldap-8.3.36-1.el10_2.s390x.rpm ebfca012eb8899ab955b257e9e553dd168fdc4acbcea27307003be6bb585e429
s390x php-devel-8.3.36-1.el10_2.s390x.rpm fc6b475cdc64971adbfcc47579652bff70b5c71796012931d5b584434d95cad1
x86_64 php-ldap-8.3.36-1.el10_2.x86_64.rpm 12578c34bbb8395e21fea68847432165def314f8d33c7004370c3fafc27fff1a
x86_64 php-pgsql-8.3.36-1.el10_2.x86_64.rpm 23e985ebbccad98e75f1527cbecc3374aa6be5c7620dfe39ce12c2576b834383
x86_64 php-opcache-8.3.36-1.el10_2.x86_64.rpm 28bb9f4c5d1190c60d8f70e153716c733778af4477c2b5d3cdd7f6e9bef7fba9
x86_64 php-8.3.36-1.el10_2.x86_64.rpm 364244af06da4d9ffd50b774114710e327ed6a9bd23eef3e29f51a2ecd43bf88
x86_64 php-intl-8.3.36-1.el10_2.x86_64.rpm 38feaf96cde13bb0eded0dd0e22ac1c894a3984facb746f2c7afe9b21b20c5aa
x86_64 php-ffi-8.3.36-1.el10_2.x86_64.rpm 39a6c8128068e658f0ccbe93d5a9240d783eca513e7b0ecd1c9f39eb3e82b738
x86_64 php-process-8.3.36-1.el10_2.x86_64.rpm 4c7efe320170c219dd63885f50670ba0e37b89b9c9634f02fc53d0542f50f0db
x86_64 php-soap-8.3.36-1.el10_2.x86_64.rpm 4c82bae9f8330652f51697493851cc08e7c0706abfcc4df4bfe995083d453fb5
x86_64 php-fpm-8.3.36-1.el10_2.x86_64.rpm 6010ccd9b630ce25369fccf2a092e8ee6bb5ce0d104f4248516e669d9ab05da6
x86_64 php-pdo-8.3.36-1.el10_2.x86_64.rpm 61793577d62bb5abc6c68146bb36a49e0fc734e3953974624b7ad2133c7edd9a
x86_64 php-odbc-8.3.36-1.el10_2.x86_64.rpm 6a30c89ef9c59b72095526ed09d200da9973bd72e57d798a89b7ffdd1dfd8848
x86_64 php-snmp-8.3.36-1.el10_2.x86_64.rpm 6e276d893ccf7a32defc30980052a953c3ebe1e43776805228d0514dcb5a79dd
x86_64 php-gd-8.3.36-1.el10_2.x86_64.rpm 6e35b669c23db4cc5c43d71941fd88d9a1c960434ed0d56f7cc2d192a8ffd675
x86_64 php-enchant-8.3.36-1.el10_2.x86_64.rpm 81fde3c87c049ac12c13643f49207d3814eb39af02bf299d8cef305b6af85a85
x86_64 php-dbg-8.3.36-1.el10_2.x86_64.rpm 82e822b9c6c0c6a851d086771abc86b262b6f73c5c1d971ff906f568d0bdbfe6
x86_64 php-cli-8.3.36-1.el10_2.x86_64.rpm 9173988150edb564c4ffeb3cab60a92545333dae1d35d6e4eb8071818be5703c
x86_64 php-gmp-8.3.36-1.el10_2.x86_64.rpm 9befa3c1a7decf3f353963412853c509b39d8c0ae413773765ed2f4892b0b197
x86_64 php-xml-8.3.36-1.el10_2.x86_64.rpm 9df1f1f8f32a25fcc02f7dbc3b2130c28a415b51a89e2f5e32ad706067ffc19c
x86_64 php-dba-8.3.36-1.el10_2.x86_64.rpm a2764c8c85bec2afdff41f481687972e9abc5617fdd48b75bee39f87b8bb47f9
x86_64 php-devel-8.3.36-1.el10_2.x86_64.rpm a2e2e433559eeb3a02dea1cd5402b69a1321a2a573dd2b48b35597b8ad0eb382
x86_64 php-embedded-8.3.36-1.el10_2.x86_64.rpm b62242aeb003a8628d10197cfe4444916f0e8ac5ab8d816446c680e82c621441
x86_64 php-bcmath-8.3.36-1.el10_2.x86_64.rpm c58310294262248d4db40056cc353fd16f71a5865a40f39f80b415e49cd135a0
x86_64 php-mysqlnd-8.3.36-1.el10_2.x86_64.rpm eb27f7f36f1848838863a9154fae6cb67d75fc31bfe957a20a0922fba20580b0
x86_64 php-common-8.3.36-1.el10_2.x86_64.rpm ecc2f2c81e2686da114ba0bad9346e69441acc9b5319766e35a096a2c37838f5
x86_64 php-mbstring-8.3.36-1.el10_2.x86_64.rpm fc4bc779f9da2be318c7bee33004a3c6ec89d2064e61e195ef74107f6464d571
x86_64_v2 php-process-8.3.36-1.el10_2.x86_64_v2.rpm 01ebeaaec4d8edd1b672f2d68a431ee4199bb02d1b65932d41c6394d3669199b
x86_64_v2 php-pgsql-8.3.36-1.el10_2.x86_64_v2.rpm 0858d7c3539d04d54c7061106c9ffb02a087cc7b49bf2ed9307b9fc1f89b8f59
x86_64_v2 php-8.3.36-1.el10_2.x86_64_v2.rpm 13f8fc398c98d974ebd84bfc224ad5c8b526e5c52e65e5d1f1cc6786c177e934
x86_64_v2 php-intl-8.3.36-1.el10_2.x86_64_v2.rpm 1b18580c6b2d5c01c74a66df7ab4f144de05b76b95b0d1aed88bd8a6c0c648ea
x86_64_v2 php-pdo-8.3.36-1.el10_2.x86_64_v2.rpm 1d4a13f96d47d7c723ef8ab1a7ffc196246d2625f461464dd63daddd3669bd30
x86_64_v2 php-fpm-8.3.36-1.el10_2.x86_64_v2.rpm 244bd507f720baa6377c4a26f623414948ee16aa855b3abef0eb0bd21c2ab160
x86_64_v2 php-embedded-8.3.36-1.el10_2.x86_64_v2.rpm 38245972abaf9ea7e3591eae9924a0191aa38313368c3fae182c7554f9abc366
x86_64_v2 php-gd-8.3.36-1.el10_2.x86_64_v2.rpm 44572c4ee6b4f1eb9666d43bdcfaeff6701b167bd1d3f6ce4c175b93fbe6c64b
x86_64_v2 php-gmp-8.3.36-1.el10_2.x86_64_v2.rpm 65ff923643b405e6e27cd91cf01cedb56fab5da0b4c033f273a5c676d3c57be5
x86_64_v2 php-devel-8.3.36-1.el10_2.x86_64_v2.rpm 69a35d34baf0320187009793cb8a1b25ee3ce3ce41cc6e57401a9239a702679f
x86_64_v2 php-mysqlnd-8.3.36-1.el10_2.x86_64_v2.rpm 7367fa939b054eaa2a5a60885db63c9f4d59aecaf1098942c78ffee9e7b3a10a
x86_64_v2 php-ffi-8.3.36-1.el10_2.x86_64_v2.rpm 886d8ec48fb6364d853915609877164de8ae626d6dddeb3f504298f482b155fe
x86_64_v2 php-dbg-8.3.36-1.el10_2.x86_64_v2.rpm 918d9c564f5703853ce910618f8bfacb2583cc4756a14e2ee31e3c4234c6a00a
x86_64_v2 php-opcache-8.3.36-1.el10_2.x86_64_v2.rpm 9fc3024b35b8aa9f9490bb604d746ad757f1f9789ce4345da3006cb480ad1ea8
x86_64_v2 php-soap-8.3.36-1.el10_2.x86_64_v2.rpm 9fef8d00280ba98674bd7aff031c9bc7ae990d173941c376674d19be89b435fa
x86_64_v2 php-xml-8.3.36-1.el10_2.x86_64_v2.rpm a7f4af04c909e78368dc8e8c3d3e67281da02fc4a9c080d7b77c30646078b9a4
x86_64_v2 php-cli-8.3.36-1.el10_2.x86_64_v2.rpm b51647d35d8e7ce2f0edbb322741f80f7d2b8b0f75cda0544f7718924922c5b1
x86_64_v2 php-bcmath-8.3.36-1.el10_2.x86_64_v2.rpm b65d8d9effc589784d659d4db9a2793336cf78cb9ebeb4cf5fb57c1bf05a9063
x86_64_v2 php-odbc-8.3.36-1.el10_2.x86_64_v2.rpm be86e8c2e17b7173488bda04ee36cacfb71b4998e2228479a7ed8f8fdeea15c1
x86_64_v2 php-ldap-8.3.36-1.el10_2.x86_64_v2.rpm bf1f8afb7c77369985f3cef0b64a0c7a040f1719b11acaf536e1f8d2da2e7f83
x86_64_v2 php-snmp-8.3.36-1.el10_2.x86_64_v2.rpm c16212d056c7678cdb3e675fc743776aa46c7b493874e75330658615973f9935
x86_64_v2 php-dba-8.3.36-1.el10_2.x86_64_v2.rpm cf0a559b3a2374211ae7115ac34126bdccdcea46532959c93e99ff91222956e2
x86_64_v2 php-mbstring-8.3.36-1.el10_2.x86_64_v2.rpm d65d26a90106097727a3116e6b66903ed2352528a0ff124494a80cd7f854ad35
x86_64_v2 php-common-8.3.36-1.el10_2.x86_64_v2.rpm e65eee05de25e5cd7bd0779643bec6a90a557c8384d138b04c2c1b7131790b2e
x86_64_v2 php-enchant-8.3.36-1.el10_2.x86_64_v2.rpm ffc7298dc0284aa12f78d8416b000437b05636f9f14bef13ee38084cf3e12012
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.