RLSA-2026:62614

Security

Mirrored from RHSA-2026:62614

Issued at: 2026-09-03

Updated at: 2026-09-04

Advisory content derived from Red Hat RHSA-2026:62614, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: php security, bug fix, and enhancement update

Description

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

* php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260)

Bug Fix(es) and Enhancement(s):

* Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 10.2.z (JIRA:Rocky Linux-223946)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2509255

2509254

CVEs

CVE-2026-17543

CVE-2026-7260

Affected packages

Rocky Linux 10 aarch64 - AppStream

php-pgsql-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-fpm-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-fpm-0:8.3.33-1.el10_2.aarch64.rpm

php-dbg-0:8.3.33-1.el10_2.aarch64.rpm

php-enchant-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-ffi-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-mbstring-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-devel-0:8.3.33-1.el10_2.aarch64.rpm

php-mysqlnd-0:8.3.33-1.el10_2.aarch64.rpm

php-debugsource-0:8.3.33-1.el10_2.aarch64.rpm

php-process-0:8.3.33-1.el10_2.aarch64.rpm

php-common-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-xml-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-cli-0:8.3.33-1.el10_2.aarch64.rpm

php-gd-0:8.3.33-1.el10_2.aarch64.rpm

php-cli-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-0:8.3.33-1.el10_2.aarch64.rpm

php-odbc-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-enchant-0:8.3.33-1.el10_2.aarch64.rpm

php-dbg-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-snmp-0:8.3.33-1.el10_2.aarch64.rpm

php-process-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-opcache-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-soap-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-pgsql-0:8.3.33-1.el10_2.aarch64.rpm

php-0:8.3.33-1.el10_2.src.rpm

php-ffi-0:8.3.33-1.el10_2.aarch64.rpm

php-ldap-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-embedded-0:8.3.33-1.el10_2.aarch64.rpm

php-mysqlnd-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-soap-0:8.3.33-1.el10_2.aarch64.rpm

php-dba-0:8.3.33-1.el10_2.aarch64.rpm

php-pdo-0:8.3.33-1.el10_2.aarch64.rpm

php-common-0:8.3.33-1.el10_2.aarch64.rpm

php-embedded-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-gmp-0:8.3.33-1.el10_2.aarch64.rpm

php-dba-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-snmp-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-odbc-0:8.3.33-1.el10_2.aarch64.rpm

php-xml-0:8.3.33-1.el10_2.aarch64.rpm

php-opcache-0:8.3.33-1.el10_2.aarch64.rpm

php-bcmath-0:8.3.33-1.el10_2.aarch64.rpm

php-gmp-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-intl-0:8.3.33-1.el10_2.aarch64.rpm

php-bcmath-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-gd-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-mbstring-0:8.3.33-1.el10_2.aarch64.rpm

php-pdo-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-intl-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-debuginfo-0:8.3.33-1.el10_2.aarch64.rpm

php-ldap-0:8.3.33-1.el10_2.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

php-pdo-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-common-0:8.3.33-1.el10_2.x86_64.rpm

php-dbg-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-cli-0:8.3.33-1.el10_2.x86_64.rpm

php-xml-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-gmp-0:8.3.33-1.el10_2.x86_64.rpm

php-cli-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-opcache-0:8.3.33-1.el10_2.x86_64.rpm

php-odbc-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-ldap-0:8.3.33-1.el10_2.x86_64.rpm

php-ffi-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-dbg-0:8.3.33-1.el10_2.x86_64.rpm

php-0:8.3.33-1.el10_2.x86_64.rpm

php-enchant-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-process-0:8.3.33-1.el10_2.x86_64.rpm

php-mbstring-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-mysqlnd-0:8.3.33-1.el10_2.x86_64.rpm

php-pgsql-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-debugsource-0:8.3.33-1.el10_2.x86_64.rpm

php-bcmath-0:8.3.33-1.el10_2.x86_64.rpm

php-intl-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-0:8.3.33-1.el10_2.src.rpm

php-pdo-0:8.3.33-1.el10_2.x86_64.rpm

php-mbstring-0:8.3.33-1.el10_2.x86_64.rpm

php-snmp-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-pgsql-0:8.3.33-1.el10_2.x86_64.rpm

php-ffi-0:8.3.33-1.el10_2.x86_64.rpm

php-opcache-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-embedded-0:8.3.33-1.el10_2.x86_64.rpm

php-gd-0:8.3.33-1.el10_2.x86_64.rpm

php-fpm-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-soap-0:8.3.33-1.el10_2.x86_64.rpm

php-common-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-gd-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-devel-0:8.3.33-1.el10_2.x86_64.rpm

php-enchant-0:8.3.33-1.el10_2.x86_64.rpm

php-fpm-0:8.3.33-1.el10_2.x86_64.rpm

php-embedded-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-gmp-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-dba-0:8.3.33-1.el10_2.x86_64.rpm

php-soap-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-mysqlnd-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-intl-0:8.3.33-1.el10_2.x86_64.rpm

php-dba-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-bcmath-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-ldap-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-process-debuginfo-0:8.3.33-1.el10_2.x86_64.rpm

php-xml-0:8.3.33-1.el10_2.x86_64.rpm

php-snmp-0:8.3.33-1.el10_2.x86_64.rpm

php-odbc-0:8.3.33-1.el10_2.x86_64.rpm

Rocky Linux 10 s390x - AppStream

php-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-xml-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-devel-0:8.3.33-1.el10_2.s390x.rpm

php-enchant-0:8.3.33-1.el10_2.s390x.rpm

php-cli-0:8.3.33-1.el10_2.s390x.rpm

php-fpm-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-gd-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-dba-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-mbstring-0:8.3.33-1.el10_2.s390x.rpm

php-odbc-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-ffi-0:8.3.33-1.el10_2.s390x.rpm

php-enchant-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-intl-0:8.3.33-1.el10_2.s390x.rpm

php-pgsql-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-opcache-0:8.3.33-1.el10_2.s390x.rpm

php-snmp-0:8.3.33-1.el10_2.s390x.rpm

php-0:8.3.33-1.el10_2.src.rpm

php-common-0:8.3.33-1.el10_2.s390x.rpm

php-ldap-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-gmp-0:8.3.33-1.el10_2.s390x.rpm

php-snmp-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-odbc-0:8.3.33-1.el10_2.s390x.rpm

php-soap-0:8.3.33-1.el10_2.s390x.rpm

php-process-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-dbg-0:8.3.33-1.el10_2.s390x.rpm

php-pgsql-0:8.3.33-1.el10_2.s390x.rpm

php-mysqlnd-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-dbg-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-cli-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-process-0:8.3.33-1.el10_2.s390x.rpm

php-0:8.3.33-1.el10_2.s390x.rpm

php-debugsource-0:8.3.33-1.el10_2.s390x.rpm

php-mbstring-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-mysqlnd-0:8.3.33-1.el10_2.s390x.rpm

php-soap-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-common-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-ffi-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-gmp-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-bcmath-0:8.3.33-1.el10_2.s390x.rpm

php-bcmath-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-intl-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-dba-0:8.3.33-1.el10_2.s390x.rpm

php-pdo-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-opcache-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-pdo-0:8.3.33-1.el10_2.s390x.rpm

php-xml-0:8.3.33-1.el10_2.s390x.rpm

php-embedded-0:8.3.33-1.el10_2.s390x.rpm

php-ldap-0:8.3.33-1.el10_2.s390x.rpm

php-fpm-0:8.3.33-1.el10_2.s390x.rpm

php-embedded-debuginfo-0:8.3.33-1.el10_2.s390x.rpm

php-gd-0:8.3.33-1.el10_2.s390x.rpm

Rocky Linux 10 ppc64le - AppStream

php-snmp-0:8.3.33-1.el10_2.ppc64le.rpm

php-mysqlnd-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-dba-0:8.3.33-1.el10_2.ppc64le.rpm

php-soap-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-devel-0:8.3.33-1.el10_2.ppc64le.rpm

php-process-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-odbc-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-ffi-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-dba-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-process-0:8.3.33-1.el10_2.ppc64le.rpm

php-intl-0:8.3.33-1.el10_2.ppc64le.rpm

php-pgsql-0:8.3.33-1.el10_2.ppc64le.rpm

php-enchant-0:8.3.33-1.el10_2.ppc64le.rpm

php-snmp-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-dbg-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-common-0:8.3.33-1.el10_2.ppc64le.rpm

php-common-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-ldap-0:8.3.33-1.el10_2.ppc64le.rpm

php-xml-0:8.3.33-1.el10_2.ppc64le.rpm

php-fpm-0:8.3.33-1.el10_2.ppc64le.rpm

php-embedded-0:8.3.33-1.el10_2.ppc64le.rpm

php-soap-0:8.3.33-1.el10_2.ppc64le.rpm

php-gmp-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-bcmath-0:8.3.33-1.el10_2.ppc64le.rpm

php-0:8.3.33-1.el10_2.ppc64le.rpm

php-enchant-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-opcache-0:8.3.33-1.el10_2.ppc64le.rpm

php-0:8.3.33-1.el10_2.src.rpm

php-pgsql-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-dbg-0:8.3.33-1.el10_2.ppc64le.rpm

php-gd-0:8.3.33-1.el10_2.ppc64le.rpm

php-gmp-0:8.3.33-1.el10_2.ppc64le.rpm

php-mbstring-0:8.3.33-1.el10_2.ppc64le.rpm

php-cli-0:8.3.33-1.el10_2.ppc64le.rpm

php-opcache-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-gd-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-pdo-0:8.3.33-1.el10_2.ppc64le.rpm

php-debugsource-0:8.3.33-1.el10_2.ppc64le.rpm

php-cli-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-bcmath-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-pdo-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-ffi-0:8.3.33-1.el10_2.ppc64le.rpm

php-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-intl-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-xml-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-mysqlnd-0:8.3.33-1.el10_2.ppc64le.rpm

php-ldap-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-fpm-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-mbstring-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

php-odbc-0:8.3.33-1.el10_2.ppc64le.rpm

php-embedded-debuginfo-0:8.3.33-1.el10_2.ppc64le.rpm

Rocky Linux 10 riscv64 - AppStream

php-0:8.3.33-1.el10_2.src.rpm