[ALSA-2026:87072] Important: php:8.2 security update
Type:
security
Severity:
important
Release date:
2026-10-22
Description:
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.aarch64.rpm 05bb102cd8ee46d60d0032dc5cb0a4732aae9d9175be28d76dec35a03a8d4559
aarch64 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.aarch64.rpm 80ebf9aa88db700eff529350fa497c2944b1dd4286afcbe6d2dc7e52e9401a18
aarch64 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.aarch64.rpm a262b91ea8e895720c4c91aa027600c4300870212e819210f0275e2cb127c419
aarch64 php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.aarch64.rpm a5fb88275b4ea3ec4c78cebe71e104657b4aa3da0cb49a41163be83d73fe0ff6
aarch64 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.aarch64.rpm b1a35d9609430f38948ba3ec5b884bc8aea7ec48cfe44f67fb31c4f867a64ec2
noarch apcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm 4bfe4f936e9b1f5bee1eb4b3d0c887f7d64513b629af9824df9c0c52da7b3921
ppc64le php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.ppc64le.rpm 18898fd5d009b982b0b98ce9d5a4dba202d9ac5e3e8c10a9c48fee187c461304
ppc64le php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.ppc64le.rpm 18913c4b77080423c704d31a3c4907f6e67b9118449723b3af39669acfe75e1e
ppc64le php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.ppc64le.rpm 38b24c1462bd2c2d5979384ebdcc4e0db7341a151ac5b6e5d63740c25aef24f6
ppc64le php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.ppc64le.rpm ad2d7522f24ceb69eacc3a3ee3398b9de5d0e2b0e39f0aa0a2658e96d28735cf
ppc64le php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.ppc64le.rpm bb6b1dc95d01a1991d42da4d127fcbead9cd8a16e9f8379f7289e4f0e48160c6
s390x php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.s390x.rpm 5b553811ce76e365f333f05af308acce947d19a48bafe82f02023b4b9de8b683
s390x php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.s390x.rpm 7febf476c58e0ac97a968fde5b92f0dd64ac7c932351ae9c689cc6ea9c8e787a
s390x php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm aee42951e556eb8ecf40f0c5fe40c53a1ae9f3285ee2bfa7a4169ff85ae7642c
s390x php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.s390x.rpm e6bab0e873b7c6300e4e9a467194aa281a3cd256394b4e29f718563c8ac738eb
s390x php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.s390x.rpm e9121b1ec8edb80b93180e40236eed42c16907d15021356dac19b0b85a7c349d
x86_64 php-pecl-rrd-2.0.3-4.module_el9.4.0+65+49ff6472.x86_64.rpm 80bb4cc233a150da737dcb6a0ec6c3b7723782464f2aac5248efb0c9ad9346ff
x86_64 php-pecl-apcu-devel-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm 96cc987054e929ded9dfb18f35b9c6912a9df307b6e6ffee3c409f85bafa2181
x86_64 php-pecl-zip-1.22.3-1.module_el9.4.0+65+49ff6472.x86_64.rpm a05a23d56973cbb28cd6df434887268ea519defa51e9176928b1f6859bdd33f8
x86_64 php-pecl-xdebug3-3.2.2-2.module_el9.4.0+65+49ff6472.x86_64.rpm a0c7dad446e919bbb42213de89f00d65f58b08c51e4e1ab382707c3324627f7a
x86_64 php-pecl-apcu-5.1.23-1.module_el9.4.0+65+49ff6472.x86_64.rpm d4536864003ca10535ac907cbcc199da8c73c8b16a66b52aaeb1431f587b1ea0
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.