RLSA-2026:23388

Security

Mirrored from RHSA-2026:23388

Issued at: 2026-06-06

Updated at: 2026-06-06

Synopsis

Important: php security update

Description

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258)

* PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735)

* php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() (CVE-2026-7259)

* php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262)

* php: signed integer overflow in metaphone() (CVE-2026-7568)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2468564

2468561

2468566

2468562

2468565

CVEs

CVE-2026-6735

CVE-2026-7258

CVE-2026-7259

CVE-2026-7262

CVE-2026-7568

Affected packages

Rocky Linux 10 ppc64le - AppStream

php-embedded-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-enchant-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-opcache-0:8.3.31-1.el10_2.ppc64le.rpm

php-pdo-0:8.3.31-1.el10_2.ppc64le.rpm

php-intl-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-intl-0:8.3.31-1.el10_2.ppc64le.rpm

php-cli-0:8.3.31-1.el10_2.ppc64le.rpm

php-0:8.3.31-1.el10_2.src.rpm

php-pdo-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-0:8.3.31-1.el10_2.ppc64le.rpm

php-odbc-0:8.3.31-1.el10_2.ppc64le.rpm

php-snmp-0:8.3.31-1.el10_2.ppc64le.rpm

php-enchant-0:8.3.31-1.el10_2.ppc64le.rpm

php-fpm-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-pgsql-0:8.3.31-1.el10_2.ppc64le.rpm

php-mysqlnd-0:8.3.31-1.el10_2.ppc64le.rpm

php-odbc-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-devel-0:8.3.31-1.el10_2.ppc64le.rpm

php-common-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-soap-0:8.3.31-1.el10_2.ppc64le.rpm

php-bcmath-0:8.3.31-1.el10_2.ppc64le.rpm

php-process-0:8.3.31-1.el10_2.ppc64le.rpm

php-fpm-0:8.3.31-1.el10_2.ppc64le.rpm

php-pgsql-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-debugsource-0:8.3.31-1.el10_2.ppc64le.rpm

php-process-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-dbg-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-embedded-0:8.3.31-1.el10_2.ppc64le.rpm

php-ldap-0:8.3.31-1.el10_2.ppc64le.rpm

php-ldap-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-dba-0:8.3.31-1.el10_2.ppc64le.rpm

php-mbstring-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-ffi-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-dbg-0:8.3.31-1.el10_2.ppc64le.rpm

php-mbstring-0:8.3.31-1.el10_2.ppc64le.rpm

php-gmp-0:8.3.31-1.el10_2.ppc64le.rpm

php-common-0:8.3.31-1.el10_2.ppc64le.rpm

php-gd-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-gmp-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-xml-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-dba-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-bcmath-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-snmp-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-ffi-0:8.3.31-1.el10_2.ppc64le.rpm

php-cli-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-mysqlnd-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-opcache-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

php-gd-0:8.3.31-1.el10_2.ppc64le.rpm

php-xml-0:8.3.31-1.el10_2.ppc64le.rpm

php-soap-debuginfo-0:8.3.31-1.el10_2.ppc64le.rpm

Rocky Linux 10 x86_64 - AppStream

php-ldap-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-process-0:8.3.31-1.el10_2.x86_64.rpm

php-common-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-0:8.3.31-1.el10_2.src.rpm

php-ffi-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-opcache-0:8.3.31-1.el10_2.x86_64.rpm

php-pgsql-0:8.3.31-1.el10_2.x86_64.rpm

php-process-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-opcache-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-gmp-0:8.3.31-1.el10_2.x86_64.rpm

php-ffi-0:8.3.31-1.el10_2.x86_64.rpm

php-debugsource-0:8.3.31-1.el10_2.x86_64.rpm

php-pgsql-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-intl-0:8.3.31-1.el10_2.x86_64.rpm

php-cli-0:8.3.31-1.el10_2.x86_64.rpm

php-mysqlnd-0:8.3.31-1.el10_2.x86_64.rpm

php-bcmath-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-embedded-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-embedded-0:8.3.31-1.el10_2.x86_64.rpm

php-gd-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-intl-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-ldap-0:8.3.31-1.el10_2.x86_64.rpm

php-mbstring-0:8.3.31-1.el10_2.x86_64.rpm

php-soap-0:8.3.31-1.el10_2.x86_64.rpm

php-enchant-0:8.3.31-1.el10_2.x86_64.rpm

php-snmp-0:8.3.31-1.el10_2.x86_64.rpm

php-pdo-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-enchant-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-gmp-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-pdo-0:8.3.31-1.el10_2.x86_64.rpm

php-mbstring-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-dba-0:8.3.31-1.el10_2.x86_64.rpm

php-xml-0:8.3.31-1.el10_2.x86_64.rpm

php-xml-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-dba-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-soap-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-gd-0:8.3.31-1.el10_2.x86_64.rpm

php-fpm-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-0:8.3.31-1.el10_2.x86_64.rpm

php-fpm-0:8.3.31-1.el10_2.x86_64.rpm

php-snmp-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-bcmath-0:8.3.31-1.el10_2.x86_64.rpm

php-cli-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-odbc-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-dbg-0:8.3.31-1.el10_2.x86_64.rpm

php-common-0:8.3.31-1.el10_2.x86_64.rpm

php-dbg-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-devel-0:8.3.31-1.el10_2.x86_64.rpm

php-mysqlnd-debuginfo-0:8.3.31-1.el10_2.x86_64.rpm

php-odbc-0:8.3.31-1.el10_2.x86_64.rpm

Rocky Linux 10 aarch64 - AppStream

php-odbc-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-common-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-dbg-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-gmp-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-0:8.3.31-1.el10_2.src.rpm

php-pgsql-0:8.3.31-1.el10_2.aarch64.rpm

php-bcmath-0:8.3.31-1.el10_2.aarch64.rpm

php-dba-0:8.3.31-1.el10_2.aarch64.rpm

php-fpm-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-cli-0:8.3.31-1.el10_2.aarch64.rpm

php-common-0:8.3.31-1.el10_2.aarch64.rpm

php-enchant-0:8.3.31-1.el10_2.aarch64.rpm

php-process-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-process-0:8.3.31-1.el10_2.aarch64.rpm

php-gd-0:8.3.31-1.el10_2.aarch64.rpm

php-fpm-0:8.3.31-1.el10_2.aarch64.rpm

php-dbg-0:8.3.31-1.el10_2.aarch64.rpm

php-mbstring-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-pdo-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-dba-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-devel-0:8.3.31-1.el10_2.aarch64.rpm

php-ldap-0:8.3.31-1.el10_2.aarch64.rpm

php-ffi-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-intl-0:8.3.31-1.el10_2.aarch64.rpm

php-pdo-0:8.3.31-1.el10_2.aarch64.rpm

php-ffi-0:8.3.31-1.el10_2.aarch64.rpm

php-soap-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-mysqlnd-0:8.3.31-1.el10_2.aarch64.rpm

php-snmp-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-opcache-0:8.3.31-1.el10_2.aarch64.rpm

php-embedded-0:8.3.31-1.el10_2.aarch64.rpm

php-pgsql-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-gmp-0:8.3.31-1.el10_2.aarch64.rpm

php-embedded-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-mbstring-0:8.3.31-1.el10_2.aarch64.rpm

php-opcache-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-enchant-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-bcmath-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-cli-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-mysqlnd-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-0:8.3.31-1.el10_2.aarch64.rpm

php-debugsource-0:8.3.31-1.el10_2.aarch64.rpm

php-ldap-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-intl-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-snmp-0:8.3.31-1.el10_2.aarch64.rpm

php-xml-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-gd-debuginfo-0:8.3.31-1.el10_2.aarch64.rpm

php-soap-0:8.3.31-1.el10_2.aarch64.rpm

php-xml-0:8.3.31-1.el10_2.aarch64.rpm

php-odbc-0:8.3.31-1.el10_2.aarch64.rpm

Rocky Linux 10 s390x - AppStream

php-mysqlnd-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-cli-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-debugsource-0:8.3.31-1.el10_2.s390x.rpm

php-0:8.3.31-1.el10_2.src.rpm

php-process-0:8.3.31-1.el10_2.s390x.rpm

php-fpm-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-cli-0:8.3.31-1.el10_2.s390x.rpm

php-embedded-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-mbstring-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-xml-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-embedded-0:8.3.31-1.el10_2.s390x.rpm

php-dbg-0:8.3.31-1.el10_2.s390x.rpm

php-intl-0:8.3.31-1.el10_2.s390x.rpm

php-pdo-0:8.3.31-1.el10_2.s390x.rpm

php-0:8.3.31-1.el10_2.s390x.rpm

php-gmp-0:8.3.31-1.el10_2.s390x.rpm

php-mysqlnd-0:8.3.31-1.el10_2.s390x.rpm

php-ffi-0:8.3.31-1.el10_2.s390x.rpm

php-xml-0:8.3.31-1.el10_2.s390x.rpm

php-ldap-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-soap-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-devel-0:8.3.31-1.el10_2.s390x.rpm

php-fpm-0:8.3.31-1.el10_2.s390x.rpm

php-common-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-pgsql-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-ffi-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-dbg-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-dba-0:8.3.31-1.el10_2.s390x.rpm

php-ldap-0:8.3.31-1.el10_2.s390x.rpm

php-enchant-0:8.3.31-1.el10_2.s390x.rpm

php-process-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-dba-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-intl-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-pgsql-0:8.3.31-1.el10_2.s390x.rpm

php-bcmath-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-gd-0:8.3.31-1.el10_2.s390x.rpm

php-soap-0:8.3.31-1.el10_2.s390x.rpm

php-snmp-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-gmp-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-opcache-0:8.3.31-1.el10_2.s390x.rpm

php-enchant-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-gd-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-common-0:8.3.31-1.el10_2.s390x.rpm

php-pdo-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-odbc-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-mbstring-0:8.3.31-1.el10_2.s390x.rpm

php-opcache-debuginfo-0:8.3.31-1.el10_2.s390x.rpm

php-bcmath-0:8.3.31-1.el10_2.s390x.rpm

php-odbc-0:8.3.31-1.el10_2.s390x.rpm

php-snmp-0:8.3.31-1.el10_2.s390x.rpm

Rocky Linux 10 riscv64 - AppStream

php-0:8.3.31-1.el10_2.src.rpm