[ALSA-2026:87151] Important: php security update
Type:
security
Severity:
important
Release date:
2026-10-22
Description:
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 php-8.0.30-8.el9_8.1.aarch64.rpm 28cd7e9d004e1b42c770e0162e9ccc9b1bf6c6e738a402c48aaa1ac39d56879a
aarch64 php-gd-8.0.30-8.el9_8.1.aarch64.rpm 2ff6762b27355048d0a0d0d9d8515b98999052eed64802bbd81e8ea6b74c24c9
aarch64 php-ldap-8.0.30-8.el9_8.1.aarch64.rpm 5961120ed9d40560478160e611989dfb645f968bc7545b41e062f5d033423350
aarch64 php-opcache-8.0.30-8.el9_8.1.aarch64.rpm 779d07304cedbeb30944423d260ecad184b84680826aa12987f6053714e54055
aarch64 php-pgsql-8.0.30-8.el9_8.1.aarch64.rpm 89e272a94a1a5e8f87202d27e1246f0ed2aeb14df4fd9a694d986a67bd03dcd9
aarch64 php-intl-8.0.30-8.el9_8.1.aarch64.rpm 8dfd98e7eb637ab31208fbcda1775740536c96716a987265a624870ff9a7eee2
aarch64 php-embedded-8.0.30-8.el9_8.1.aarch64.rpm 935184aa7dedef5dad79c477e19f074dd7403687f9b1b28c7eb66a93fe49e146
aarch64 php-soap-8.0.30-8.el9_8.1.aarch64.rpm 963be66abcf26ecaea21098266a6f76e7d4528cfcbb2344d2394439a3b5e650c
aarch64 php-cli-8.0.30-8.el9_8.1.aarch64.rpm 9ae00fc6e615edca10d2fdb54893b4dd5b4954b4f9d21a65f0e70e2bf53d0b65
aarch64 php-bcmath-8.0.30-8.el9_8.1.aarch64.rpm 9e853c8f53dcabbcf48d086888275e8f5df36fcb2c6d36984996d5eb0c8334b1
aarch64 php-process-8.0.30-8.el9_8.1.aarch64.rpm 9ecfa5400ceb8f892a733d1ed03e2cedf06833d51e135391feb7ba24c948fa9b
aarch64 php-fpm-8.0.30-8.el9_8.1.aarch64.rpm a406964914bdf1c6ee187cfb3a7efc40b73e9a15583e2733fd92844a8bf58337
aarch64 php-snmp-8.0.30-8.el9_8.1.aarch64.rpm a74c00bfa9b1663f2193dba21c930a769f94becc6c44e2ed7936c58118386534
aarch64 php-gmp-8.0.30-8.el9_8.1.aarch64.rpm a9d5e9a645954aa5f1df46504895ac13c03254ea82f7dd76586ba4714ceaa4b5
aarch64 php-mbstring-8.0.30-8.el9_8.1.aarch64.rpm b0b974a0e6b0c437ccd5508af16c92cc93b036d7c646b7fec249d996dd5d7a6a
aarch64 php-ffi-8.0.30-8.el9_8.1.aarch64.rpm b720de4938f018b3b54102809e85ecd7675a9854b0f0ed3408ead46485d15392
aarch64 php-enchant-8.0.30-8.el9_8.1.aarch64.rpm c0ac5d48f900234679cf86b97ee3525f2fa064e38f0175c9f91fe2443d96dd8c
aarch64 php-devel-8.0.30-8.el9_8.1.aarch64.rpm c7538e7279fb55deaed629d716d5a05a7c231800f9034c86a1ef4b8ab6ba1551
aarch64 php-mysqlnd-8.0.30-8.el9_8.1.aarch64.rpm cd841345f0c76214b01185ebc279f5596bd43879c65a2f9a95bfbbdf1049bc80
aarch64 php-xml-8.0.30-8.el9_8.1.aarch64.rpm d6140df8c686b1049c5f7a01b99021d0b6d1e7d750ecaa065f0d17d40cb82472
aarch64 php-odbc-8.0.30-8.el9_8.1.aarch64.rpm dde7fa0de5768e0a3500efc5b0eb987b15cc27a53ff2168506bdfc50720dac95
aarch64 php-dbg-8.0.30-8.el9_8.1.aarch64.rpm eeacdf41aceb456e271bb7b5fac8804ecc41303c23e4bc87567a2329b4bad071
aarch64 php-pdo-8.0.30-8.el9_8.1.aarch64.rpm f21bffa5ab6d23f9c8be092bccbd5ea73cda109d25ddc9f07ad3390fe40b0a70
aarch64 php-dba-8.0.30-8.el9_8.1.aarch64.rpm fc960a4b1b647e021173b626cf851246e30bef4fa4e5b7a97abe6094a9c9587f
ppc64le php-process-8.0.30-8.el9_8.1.ppc64le.rpm 111e886feab76e459736423124a18ba484fa352ccf98d42cfe65ea538c4fb5ca
ppc64le php-cli-8.0.30-8.el9_8.1.ppc64le.rpm 1c6371ff504bb348f919e89d7aab9a40c79a8e22e22590c2d38cd362f3fd243d
ppc64le php-dba-8.0.30-8.el9_8.1.ppc64le.rpm 1dbadb8bdc02bc6068385b26e5a7b4dd8545d09a3f8c71373ee237edc9304bbe
ppc64le php-pgsql-8.0.30-8.el9_8.1.ppc64le.rpm 27071cb7d586265150619f9bdadce35fc19c3b578e5b181a872c51ad2f667459
ppc64le php-snmp-8.0.30-8.el9_8.1.ppc64le.rpm 2d85fb10a13c5d159c6e8f28ebfe0a73fb99ef63025d508de1ebb008620d592b
ppc64le php-gd-8.0.30-8.el9_8.1.ppc64le.rpm 2df645763904d7fd54776fdfa3476f4b57a6a1967f284677c9aa768b86834de6
ppc64le php-odbc-8.0.30-8.el9_8.1.ppc64le.rpm 3c4b4e6ba9beb0e0526351d198c14c37cd8df31c9a2be9e5a2a7a2fb7170d74d
ppc64le php-fpm-8.0.30-8.el9_8.1.ppc64le.rpm 3e3777f1381849f7124df6c73182bf03037078f44c0dccc1dce32639d390a977
ppc64le php-enchant-8.0.30-8.el9_8.1.ppc64le.rpm 40722acb85e2b5839f53b3a3bf3c8291b82e1e01ddd43ad2698169e1594b8f73
ppc64le php-8.0.30-8.el9_8.1.ppc64le.rpm 4ec37008fe9e303f70148b342ade82ab89515e3914167a977349f9542cdbf301
ppc64le php-intl-8.0.30-8.el9_8.1.ppc64le.rpm 4ff82fb879578a28937bd1876184f593fb06988dc05e25dc1100b57dd74d7fe5
ppc64le php-common-8.0.30-8.el9_8.1.ppc64le.rpm 5ad7700158deff3da086abee3ff708464fa2bfb4a1292e3fe1734e3d5060ee07
ppc64le php-ldap-8.0.30-8.el9_8.1.ppc64le.rpm 780e1ebe8fe5c72e73e9560f5d3b4816259a8714e90b4646d5c8de2589391978
ppc64le php-ffi-8.0.30-8.el9_8.1.ppc64le.rpm 88c4378de0729cde6df424351d5beefb5dbe7d92b6843a6467e71c493d9e37df
ppc64le php-pdo-8.0.30-8.el9_8.1.ppc64le.rpm 8c73594370503bb72dc531a639903d6a5ebc3e05c50d2cc002d4ef2aafd9b0eb
ppc64le php-mbstring-8.0.30-8.el9_8.1.ppc64le.rpm a020f36bdf12efcf78e2b8d499744f99108f99376fbd6a1fcc30a701fae5525c
ppc64le php-soap-8.0.30-8.el9_8.1.ppc64le.rpm bd844310f7b28b85000c265930443e320cfcc2237d75a463a08ca4f995b1802a
ppc64le php-dbg-8.0.30-8.el9_8.1.ppc64le.rpm c390bfc5c9148cdc26f139b110cc451bab150ab5d0cd2c2bd55d2978dc15781d
ppc64le php-devel-8.0.30-8.el9_8.1.ppc64le.rpm c8ce884bbc13e84ed586328e94c8569f1fa2a005b42b108e099e366191785c11
ppc64le php-xml-8.0.30-8.el9_8.1.ppc64le.rpm cb08bc9dc27b319bc905a8288ca30e30b0d05f4100a020e9ea2fb7038dbf7469
ppc64le php-embedded-8.0.30-8.el9_8.1.ppc64le.rpm d156be3486924d955c40d2ac0e2c2386751ffed03caf3391e943278205f4b6bc
ppc64le php-gmp-8.0.30-8.el9_8.1.ppc64le.rpm d303d9f8f2729022bff96af214f1ea58a41717cabee1133ffcc2f6b67a1a547a
ppc64le php-bcmath-8.0.30-8.el9_8.1.ppc64le.rpm ec322721510c62f533011e24b488d5da416ef69395804cebe1daf7ef2db2bbe9
ppc64le php-opcache-8.0.30-8.el9_8.1.ppc64le.rpm f2e0262fe0dff9ae2256909b24ef613f959ba0c4991659c2934fc221a5b97d28
ppc64le php-mysqlnd-8.0.30-8.el9_8.1.ppc64le.rpm fd5c3846d37a84ba4ce06df23c475defa38271ecad0e80a99acbd85f4d06663e
s390x php-mysqlnd-8.0.30-8.el9_8.1.s390x.rpm 03d0bf02d124189cb65d282c56104a1f45be5a39979141a9a180147f05553be8
s390x php-snmp-8.0.30-8.el9_8.1.s390x.rpm 09bf24f39582113885a3fc251056b65c8ec2f8cbbc5d5dacefc02a6184f2732b
s390x php-intl-8.0.30-8.el9_8.1.s390x.rpm 0a178f339ae32b15de538d6ccc50e597c1d9ff4f3b2ce0cda12ce8eaf62a5764
s390x php-soap-8.0.30-8.el9_8.1.s390x.rpm 0aff910eabc15f9b45bb2fe33ee828f5d8880f0070e46e1f671cc02f64bb3962
s390x php-process-8.0.30-8.el9_8.1.s390x.rpm 0e9fd6461999a57e94ec264122bf2acb7c64387874eccefeb6ec3407b0114bf5
s390x php-embedded-8.0.30-8.el9_8.1.s390x.rpm 185cda9096592a396295425c7765621822fcc42a0e5b083f64dd76bc05f09080
s390x php-pdo-8.0.30-8.el9_8.1.s390x.rpm 1a78be2e430e397844d010ceac4ac2c651c2a22c33aef9bf879f70b320006dc5
s390x php-ldap-8.0.30-8.el9_8.1.s390x.rpm 1b244994429860e86ddb3b5f0bb4ad878a91a730d9bc27db136a2087fa88f3c8
s390x php-ffi-8.0.30-8.el9_8.1.s390x.rpm 2b2850652858745cff917403282c3dac7ebc78bb0658bd11609c9edf0859ba83
s390x php-8.0.30-8.el9_8.1.s390x.rpm 3641090f2a4e3679496720a4d5b4675bf876475ea23ac46df56c18a793b79614
s390x php-bcmath-8.0.30-8.el9_8.1.s390x.rpm 45a5b47ce9af44069a2a02c1ffeea90401f2155e78e5883f4d65e9f81391e2d4
s390x php-pgsql-8.0.30-8.el9_8.1.s390x.rpm 4f02dc51f7221dee8b1cc2d5ccd2aade14370b0a0201e49d9e5a00828e9d5219
s390x php-common-8.0.30-8.el9_8.1.s390x.rpm 681414c1f9467c76e01f47d30c14d9a550cef8b379f0c1f0d8691b5da485fe1e
s390x php-opcache-8.0.30-8.el9_8.1.s390x.rpm 6a5f19762345dffbf56e161d5977020975da21b517215e2adaec064b793c29bc
s390x php-gd-8.0.30-8.el9_8.1.s390x.rpm 73e2ca9b48f9a79f9ca90c33b351335e48097c9590cc8efe5416d1124e457f89
s390x php-devel-8.0.30-8.el9_8.1.s390x.rpm 831e9d7d04a17e90d74a85f0d2d3469c264bc65d011a9c17bbd4c05201619acf
s390x php-dbg-8.0.30-8.el9_8.1.s390x.rpm 8411d9622b75006b532c71b09cf79d27a46091a95b7d7a42fb426ff0cac69752
s390x php-mbstring-8.0.30-8.el9_8.1.s390x.rpm 9545baa364bb47641ce1967d5e12c8393081a72bab4f4c28fecbf6b641dbf25b
s390x php-xml-8.0.30-8.el9_8.1.s390x.rpm a51224f258954837fd53e295d7d7a9b3eb09e5c935c4ba86773f2c0affd6d35f
s390x php-cli-8.0.30-8.el9_8.1.s390x.rpm afecf93082d2aaeda3acc7f5afea8b65e0f55ebe99aa11899714883b478d717b
s390x php-odbc-8.0.30-8.el9_8.1.s390x.rpm bf774c0d6cc0455cac6561966304edacc6774f65c624e9cb6fc4819151ac40a7
s390x php-fpm-8.0.30-8.el9_8.1.s390x.rpm c85701865f897a52eff91dae8783ae9b85e39140dde8a09062246cbdf39cafd4
s390x php-enchant-8.0.30-8.el9_8.1.s390x.rpm d317e03c90d8666f8e87cc4fcb285ab0c78b06f975376017eafd5c50e206243a
s390x php-gmp-8.0.30-8.el9_8.1.s390x.rpm e84d352f48f83b3a02ff19a640789e12b87cb62b227a66ee5a56c79a5c56fa72
s390x php-dba-8.0.30-8.el9_8.1.s390x.rpm fd199a7c7ea5cd9d615cd98d7bf4cd394096a45793e72ed25ae067cf4dc9f3e5
x86_64 php-gmp-8.0.30-8.el9_8.1.x86_64.rpm 0444fc3ec25e3c0d67c9785d246551e07967f32f401c8acd749ac0dfebd6c8cc
x86_64 php-8.0.30-8.el9_8.1.x86_64.rpm 0e6eaedb98b3392974d5c0c5b1c3c1fc2c3855ca5ebc33fa5ae2c731cf27c891
x86_64 php-bcmath-8.0.30-8.el9_8.1.x86_64.rpm 1cc7cfa784c2afc47f4f6d8224c85137f75c838cd6c31a6d4748c226615fdca0
x86_64 php-cli-8.0.30-8.el9_8.1.x86_64.rpm 1e3096aba2bac297c40ef3bef2ae0eac3c29544f19ea7ab6f5a1d202c55c70d4
x86_64 php-odbc-8.0.30-8.el9_8.1.x86_64.rpm 513467920006194e91fbed03c29c314e360c916c1dfdf152f8e2bfd3ae7f6c6f
x86_64 php-xml-8.0.30-8.el9_8.1.x86_64.rpm 66c2bc88e3b694a81d9ddc86f5b707f20b7d6528f9d1ab9189522c4b516a6dec
x86_64 php-enchant-8.0.30-8.el9_8.1.x86_64.rpm 67defd14672650103ae964633119eb9f0a1087d292621b88389efec3292c36f9
x86_64 php-fpm-8.0.30-8.el9_8.1.x86_64.rpm 68f7e738fbdfde9ff167b11fb1c26f58af55bcda320b2c4eeecbd0981ef9cf1a
x86_64 php-snmp-8.0.30-8.el9_8.1.x86_64.rpm 771f605abcc406bca87df956203df90fc2f17f28e3c7479d1bcd64ba59f57686
x86_64 php-devel-8.0.30-8.el9_8.1.x86_64.rpm 7e880ec69480d48108fd51d0f4b5e0cd72e8074405f5be9047baebada3ffb275
x86_64 php-opcache-8.0.30-8.el9_8.1.x86_64.rpm 88a101f5e416f187d444e9624b7f0f3a4c465201c61b9822cc3d94c9c9823d2c
x86_64 php-mbstring-8.0.30-8.el9_8.1.x86_64.rpm 9a7cc4ba0cf8c20b2265823ee12cf448d7e47d4ca0ea74e5b2fb115202927f2c
x86_64 php-mysqlnd-8.0.30-8.el9_8.1.x86_64.rpm a1569c7c884d9b0a9237c78448cf15382458b0387d39ff383accec91523fd419
x86_64 php-pdo-8.0.30-8.el9_8.1.x86_64.rpm a395bf9be18abbd6ee424fcf0e20dd7942d5b8e56b49234eccef1fcb50ec0a52
x86_64 php-gd-8.0.30-8.el9_8.1.x86_64.rpm b19efb42690aa24fdd25ea8e51890f1175ffbdcb09df1738584b8963e0f47abe
x86_64 php-dbg-8.0.30-8.el9_8.1.x86_64.rpm b3a03c8e44c30784af97358f5c65ce8f55a64aac09817d9260e15e0c9e397e74
x86_64 php-embedded-8.0.30-8.el9_8.1.x86_64.rpm c198c6bb1ebb4eaac767149a872e9f9b451389e276eaf6b2c5eab414010334aa
x86_64 php-dba-8.0.30-8.el9_8.1.x86_64.rpm d7f7834aa7b89186fbae312742dbc0a58597c5d4045c30039c328e014ced5729
x86_64 php-common-8.0.30-8.el9_8.1.x86_64.rpm d91655aca79bc91e51f3e07fb340df7c7c0e6ff4b21e42e9e195f47e419d8c31
x86_64 php-soap-8.0.30-8.el9_8.1.x86_64.rpm e0161cf310fb8aa8eed7bf6ac0881de4f8340594b80ac04ebab7f20db17da598
x86_64 php-intl-8.0.30-8.el9_8.1.x86_64.rpm eb15468a3931a1140ecc5d4114a2eb4c84e3a80f1c34dae0eeb8302d383c13c7
x86_64 php-pgsql-8.0.30-8.el9_8.1.x86_64.rpm f2ae91ac32b220df30d27c97b31796452b793d4113e122792b2f454aa27ca23f
x86_64 php-process-8.0.30-8.el9_8.1.x86_64.rpm fb99315956ef4206f2e3dfa1c4960ec267f309e78f21c6b2e69411848b11a7c2
x86_64 php-ffi-8.0.30-8.el9_8.1.x86_64.rpm fcf0a113f9f7d60179b734589928bd8c48f390aefbf222bf79cdf53d9bf1c9d0
x86_64 php-ldap-8.0.30-8.el9_8.1.x86_64.rpm ff6cd16ee72b02c46b05c4b4258b3238a1a58cbd830391967eb53545351c7f0c
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.