RLSA-2026:1409

Synopsis

Important: php:8.2 security update

Description

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: pgsql extension does not check for errors during escaping (CVE-2025-1735)

* php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)

* php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)

* php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

* php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images (CVE-2025-14177)

* php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement (CVE-2025-14180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2378689 2378690 2379792 2425625 2425626 2425627

CVEs

CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491

Affected packages

Rocky Linux 9 x86_64 - AppStream

apcu-panel-0:5.1.23-1.module+el9.7.0+40005+715283ec.noarch.rpm apcu-panel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.noarch.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.x86_64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.x86_64.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.x86_64.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-xdebug3-debuginfo-0:3.2.2-2.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-xdebug3-debugsource-0:3.2.2-2.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40004+bf50a568.x86_64.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40005+715283ec.x86_64.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40004+bf50a568.x86_64.rpm

Rocky Linux 9 aarch64 - AppStream

apcu-panel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.noarch.rpm apcu-panel-0:5.1.23-1.module+el9.7.0+40005+715283ec.noarch.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.aarch64.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.src.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.aarch64.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.aarch64.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-xdebug3-debuginfo-0:3.2.2-2.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-xdebug3-debugsource-0:3.2.2-2.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40005+715283ec.aarch64.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40004+bf50a568.aarch64.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40005+715283ec.aarch64.rpm

Rocky Linux 9 s390x - AppStream

apcu-panel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.noarch.rpm apcu-panel-0:5.1.23-1.module+el9.7.0+40005+715283ec.noarch.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.s390x.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.src.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.s390x.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.s390x.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-xdebug3-debuginfo-0:3.2.2-2.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-xdebug3-debugsource-0:3.2.2-2.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40005+715283ec.s390x.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40004+bf50a568.s390x.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40005+715283ec.s390x.rpm

Rocky Linux 9 ppc64le - AppStream

apcu-panel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.noarch.rpm apcu-panel-0:5.1.23-1.module+el9.7.0+40005+715283ec.noarch.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-apcu-0:5.1.23-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-apcu-debuginfo-0:5.1.23-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-apcu-debugsource-0:5.1.23-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-apcu-devel-0:5.1.23-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.ppc64le.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-rrd-0:2.0.3-4.module+el9.7.0+40005+715283ec.src.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.ppc64le.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-rrd-debuginfo-0:2.0.3-4.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-rrd-debugsource-0:2.0.3-4.module+el9.7.0+40003+454ed3c4.ppc64le.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-xdebug3-0:3.2.2-2.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-xdebug3-debuginfo-0:3.2.2-2.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-xdebug3-debugsource-0:3.2.2-2.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40005+715283ec.src.rpm php-pecl-zip-0:1.22.3-1.module+el9.7.0+40004+bf50a568.src.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-zip-debuginfo-0:1.22.3-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40005+715283ec.ppc64le.rpm php-pecl-zip-debugsource-0:1.22.3-1.module+el9.7.0+40004+bf50a568.ppc64le.rpm