RLSA-2026:56969

Security

Mirrored from RHSA-2026:56969

Issued at: 2026-08-20

Updated at: 2026-08-20

Advisory content derived from Red Hat RHSA-2026:56969, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: php8.4 security, bug fix, and enhancement update

Description

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

* php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

* php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

* Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:Rocky Linux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2509256

2509254

CVEs

CVE-2026-17543

CVE-2026-17544

Affected packages

Rocky Linux 10 s390x - AppStream

php8.4-soap-0:8.4.24-1.el10_2.s390x.rpm

php8.4-embedded-0:8.4.24-1.el10_2.s390x.rpm

php8.4-ffi-0:8.4.24-1.el10_2.s390x.rpm

php8.4-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-ffi-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-xml-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-enchant-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-dbg-0:8.4.24-1.el10_2.s390x.rpm

php8.4-xml-0:8.4.24-1.el10_2.s390x.rpm

php8.4-enchant-0:8.4.24-1.el10_2.s390x.rpm

php8.4-soap-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-dbg-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-common-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-process-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-mysqlnd-0:8.4.24-1.el10_2.s390x.rpm

php8.4-common-0:8.4.24-1.el10_2.s390x.rpm

php8.4-odbc-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-ldap-0:8.4.24-1.el10_2.s390x.rpm

php8.4-devel-0:8.4.24-1.el10_2.s390x.rpm

php8.4-mbstring-0:8.4.24-1.el10_2.s390x.rpm

php8.4-pdo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-process-0:8.4.24-1.el10_2.s390x.rpm

php8.4-intl-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-embedded-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-0:8.4.24-1.el10_2.src.rpm

php8.4-opcache-0:8.4.24-1.el10_2.s390x.rpm

php8.4-mbstring-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-0:8.4.24-1.el10_2.s390x.rpm

php8.4-fpm-0:8.4.24-1.el10_2.s390x.rpm

php8.4-gd-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-dba-0:8.4.24-1.el10_2.s390x.rpm

php8.4-gmp-0:8.4.24-1.el10_2.s390x.rpm

php8.4-fpm-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-snmp-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-odbc-0:8.4.24-1.el10_2.s390x.rpm

php8.4-cli-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-intl-0:8.4.24-1.el10_2.s390x.rpm

php8.4-debugsource-0:8.4.24-1.el10_2.s390x.rpm

php8.4-pgsql-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-bcmath-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-ldap-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-mysqlnd-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-gmp-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-cli-0:8.4.24-1.el10_2.s390x.rpm

php8.4-bcmath-0:8.4.24-1.el10_2.s390x.rpm

php8.4-dba-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-pdo-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-opcache-debuginfo-0:8.4.24-1.el10_2.s390x.rpm

php8.4-pgsql-0:8.4.24-1.el10_2.s390x.rpm

php8.4-snmp-0:8.4.24-1.el10_2.s390x.rpm

php8.4-gd-0:8.4.24-1.el10_2.s390x.rpm

Rocky Linux 10 ppc64le - AppStream

php8.4-pgsql-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-cli-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-odbc-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-embedded-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-dba-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-opcache-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-snmp-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-enchant-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-mbstring-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-dbg-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-dba-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-ffi-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-dbg-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-xml-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-ldap-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-opcache-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-common-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-process-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-pdo-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-embedded-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-gd-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-cli-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-intl-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-ldap-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-fpm-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-pgsql-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-bcmath-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-bcmath-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-0:8.4.24-1.el10_2.src.rpm

php8.4-gmp-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-snmp-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-xml-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-fpm-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-devel-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-intl-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-mbstring-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-mysqlnd-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-odbc-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-mysqlnd-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-ffi-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-pdo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-enchant-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-gd-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-gmp-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-process-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-debugsource-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-soap-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-soap-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-common-0:8.4.24-1.el10_2.ppc64le.rpm

php8.4-debuginfo-0:8.4.24-1.el10_2.ppc64le.rpm

Rocky Linux 10 aarch64 - AppStream

php8.4-xml-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-pgsql-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-gmp-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-ldap-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-mbstring-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-embedded-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-bcmath-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-fpm-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-gd-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-gd-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-enchant-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-process-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-soap-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-soap-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-ffi-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-debugsource-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-snmp-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-opcache-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-dba-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-dba-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-dbg-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-bcmath-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-pdo-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-xml-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-cli-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-0:8.4.24-1.el10_2.src.rpm

php8.4-snmp-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-pgsql-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-ldap-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-fpm-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-pdo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-odbc-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-devel-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-mysqlnd-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-ffi-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-cli-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-embedded-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-common-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-gmp-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-intl-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-enchant-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-dbg-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-common-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-mysqlnd-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-process-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-mbstring-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-odbc-debuginfo-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-opcache-0:8.4.24-1.el10_2.aarch64.rpm

php8.4-intl-0:8.4.24-1.el10_2.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

php8.4-pgsql-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-cli-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-pdo-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-devel-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-ldap-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-fpm-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-gd-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-mysqlnd-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-gd-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-bcmath-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-ffi-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-enchant-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-embedded-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-opcache-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-gmp-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-xml-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-snmp-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-gmp-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-bcmath-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-soap-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-mysqlnd-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-0:8.4.24-1.el10_2.src.rpm

php8.4-dba-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-ffi-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-common-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-mbstring-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-debugsource-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-mbstring-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-opcache-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-xml-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-process-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-odbc-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-intl-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-pgsql-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-process-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-fpm-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-enchant-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-odbc-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-embedded-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-pdo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-ldap-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-cli-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-dbg-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-dbg-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-common-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-soap-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-intl-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-dba-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

php8.4-snmp-debuginfo-0:8.4.24-1.el10_2.x86_64.rpm

Rocky Linux 10 riscv64 - AppStream

php8.4-0:8.4.24-1.el10_2.src.rpm