RLSA-2026:49914

Security

Mirrored from RHSA-2026:49914

Issued at: 2026-08-14

Updated at: 2026-08-16

Advisory content derived from Red Hat RHSA-2026:49914, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Low: php8.4 security, bug fix, and enhancement update

Description

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

* php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD (CVE-2026-14355)

Bug Fix(es) and Enhancement(s):

* Rebase PHP to 8.4.23 for CVE-2026-14355 in 10.2.z (JIRA:Rocky Linux-192616)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2496971

CVEs

CVE-2026-14355

Affected packages

Rocky Linux 10 ppc64le - AppStream

php8.4-mbstring-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-pdo-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-dba-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-intl-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-pgsql-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-ffi-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-devel-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-gd-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-dbg-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-embedded-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-xml-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-embedded-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-xml-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-gmp-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-enchant-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-ldap-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-common-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-dbg-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-opcache-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-ldap-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-snmp-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-pdo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-odbc-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-mysqlnd-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-soap-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-intl-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-common-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-gd-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-dba-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-soap-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-opcache-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-mbstring-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-process-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-bcmath-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-enchant-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-pgsql-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-gmp-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-process-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-bcmath-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-fpm-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-snmp-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-fpm-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-cli-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-odbc-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-ffi-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-mysqlnd-debuginfo-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-0:8.4.23-1.el10_2.src.rpm

php8.4-cli-0:8.4.23-1.el10_2.ppc64le.rpm

php8.4-debugsource-0:8.4.23-1.el10_2.ppc64le.rpm

Rocky Linux 10 aarch64 - AppStream

php8.4-mbstring-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-dbg-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-soap-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-embedded-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-opcache-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-dba-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-soap-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-process-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-mysqlnd-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-ldap-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-pgsql-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-snmp-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-opcache-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-devel-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-cli-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-xml-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-process-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-dba-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-odbc-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-cli-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-fpm-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-enchant-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-fpm-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-common-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-debugsource-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-bcmath-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-mysqlnd-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-ldap-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-embedded-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-enchant-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-ffi-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-gd-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-intl-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-xml-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-gd-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-gmp-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-odbc-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-common-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-gmp-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-dbg-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-bcmath-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-snmp-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-pgsql-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-ffi-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-pdo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-intl-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-mbstring-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-0:8.4.23-1.el10_2.src.rpm

php8.4-0:8.4.23-1.el10_2.aarch64.rpm

php8.4-pdo-debuginfo-0:8.4.23-1.el10_2.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

php8.4-xml-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-xml-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-gd-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-common-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-pgsql-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-pgsql-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-process-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-odbc-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-enchant-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-odbc-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-gmp-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-gmp-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-dba-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-ffi-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-mysqlnd-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-opcache-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-ldap-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-enchant-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-soap-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-fpm-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-snmp-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-soap-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-process-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-ffi-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-intl-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-gd-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-dba-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-bcmath-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-common-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-pdo-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-debugsource-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-mbstring-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-opcache-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-cli-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-fpm-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-dbg-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-mysqlnd-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-ldap-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-embedded-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-snmp-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-intl-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-mbstring-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-embedded-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-devel-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-pdo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-0:8.4.23-1.el10_2.src.rpm

php8.4-cli-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-bcmath-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

php8.4-dbg-debuginfo-0:8.4.23-1.el10_2.x86_64.rpm

Rocky Linux 10 s390x - AppStream

php8.4-embedded-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-fpm-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-mysqlnd-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-devel-0:8.4.23-1.el10_2.s390x.rpm

php8.4-dbg-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-ffi-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-common-0:8.4.23-1.el10_2.s390x.rpm

php8.4-soap-0:8.4.23-1.el10_2.s390x.rpm

php8.4-xml-0:8.4.23-1.el10_2.s390x.rpm

php8.4-opcache-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-process-0:8.4.23-1.el10_2.s390x.rpm

php8.4-mysqlnd-0:8.4.23-1.el10_2.s390x.rpm

php8.4-gmp-0:8.4.23-1.el10_2.s390x.rpm

php8.4-ffi-0:8.4.23-1.el10_2.s390x.rpm

php8.4-odbc-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-mbstring-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-gmp-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-odbc-0:8.4.23-1.el10_2.s390x.rpm

php8.4-pdo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-soap-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-intl-0:8.4.23-1.el10_2.s390x.rpm

php8.4-opcache-0:8.4.23-1.el10_2.s390x.rpm

php8.4-common-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-bcmath-0:8.4.23-1.el10_2.s390x.rpm

php8.4-gd-0:8.4.23-1.el10_2.s390x.rpm

php8.4-cli-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-0:8.4.23-1.el10_2.s390x.rpm

php8.4-intl-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-process-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-gd-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-snmp-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-dba-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-bcmath-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-dbg-0:8.4.23-1.el10_2.s390x.rpm

php8.4-embedded-0:8.4.23-1.el10_2.s390x.rpm

php8.4-pgsql-0:8.4.23-1.el10_2.s390x.rpm

php8.4-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-fpm-0:8.4.23-1.el10_2.s390x.rpm

php8.4-cli-0:8.4.23-1.el10_2.s390x.rpm

php8.4-ldap-0:8.4.23-1.el10_2.s390x.rpm

php8.4-enchant-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-pgsql-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-enchant-0:8.4.23-1.el10_2.s390x.rpm

php8.4-xml-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-ldap-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

php8.4-0:8.4.23-1.el10_2.src.rpm

php8.4-snmp-0:8.4.23-1.el10_2.s390x.rpm

php8.4-debugsource-0:8.4.23-1.el10_2.s390x.rpm

php8.4-mbstring-0:8.4.23-1.el10_2.s390x.rpm

php8.4-dba-0:8.4.23-1.el10_2.s390x.rpm

php8.4-pdo-debuginfo-0:8.4.23-1.el10_2.s390x.rpm

Rocky Linux 10 riscv64 - AppStream

php8.4-0:8.4.23-1.el10_2.src.rpm