[Apollo] Advisories Statistics light light Login

RLSA-2026:87071

Security Mirrored from RHSA-2026:87071
Issued at: 2026-10-22
Updated at: 2026-10-22

Advisory content derived from Red Hat RHSA-2026:87071, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: php8.4 security update



Description

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

* php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765)

* php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618)

* php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2541646 2553995 2554177

CVEs

CVE-2026-109618 CVE-2026-109619 CVE-2026-91765

Affected packages

Rocky Linux 10 ppc64le - AppStream

php8.4-fpm-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-dba-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-gd-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-dbg-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-pgsql-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-ffi-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-enchant-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-enchant-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-process-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-cli-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-mbstring-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-opcache-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-bcmath-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-common-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-dbg-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-intl-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-odbc-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-process-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-common-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-pdo-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-gmp-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-mysqlnd-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-soap-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-embedded-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-bcmath-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-0:8.4.27-1.el10_2.src.rpm php8.4-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-pgsql-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-xml-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-pdo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-fpm-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-intl-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-gmp-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-odbc-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-snmp-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-opcache-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-ffi-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-devel-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-gd-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-mysqlnd-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-embedded-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-ldap-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-snmp-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-debugsource-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-mbstring-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-dba-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-cli-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-xml-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-ldap-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm php8.4-soap-debuginfo-0:8.4.27-1.el10_2.ppc64le.rpm

Rocky Linux 10 aarch64 - AppStream

php8.4-fpm-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-ffi-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-dba-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-gd-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-mysqlnd-0:8.4.27-1.el10_2.aarch64.rpm php8.4-process-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-dbg-0:8.4.27-1.el10_2.aarch64.rpm php8.4-pdo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-mbstring-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-pgsql-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-dbg-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-odbc-0:8.4.27-1.el10_2.aarch64.rpm php8.4-embedded-0:8.4.27-1.el10_2.aarch64.rpm php8.4-mysqlnd-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-enchant-0:8.4.27-1.el10_2.aarch64.rpm php8.4-xml-0:8.4.27-1.el10_2.aarch64.rpm php8.4-pdo-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-xml-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-0:8.4.27-1.el10_2.src.rpm php8.4-gd-0:8.4.27-1.el10_2.aarch64.rpm php8.4-common-0:8.4.27-1.el10_2.aarch64.rpm php8.4-bcmath-0:8.4.27-1.el10_2.aarch64.rpm php8.4-ffi-0:8.4.27-1.el10_2.aarch64.rpm php8.4-bcmath-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-ldap-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-ldap-0:8.4.27-1.el10_2.aarch64.rpm php8.4-common-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-process-0:8.4.27-1.el10_2.aarch64.rpm php8.4-soap-0:8.4.27-1.el10_2.aarch64.rpm php8.4-intl-0:8.4.27-1.el10_2.aarch64.rpm php8.4-debugsource-0:8.4.27-1.el10_2.aarch64.rpm php8.4-cli-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-gmp-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-dba-0:8.4.27-1.el10_2.aarch64.rpm php8.4-snmp-0:8.4.27-1.el10_2.aarch64.rpm php8.4-embedded-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-intl-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-cli-0:8.4.27-1.el10_2.aarch64.rpm php8.4-0:8.4.27-1.el10_2.aarch64.rpm php8.4-fpm-0:8.4.27-1.el10_2.aarch64.rpm php8.4-odbc-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-gmp-0:8.4.27-1.el10_2.aarch64.rpm php8.4-snmp-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-pgsql-0:8.4.27-1.el10_2.aarch64.rpm php8.4-devel-0:8.4.27-1.el10_2.aarch64.rpm php8.4-opcache-0:8.4.27-1.el10_2.aarch64.rpm php8.4-enchant-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-mbstring-0:8.4.27-1.el10_2.aarch64.rpm php8.4-soap-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-opcache-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm php8.4-debuginfo-0:8.4.27-1.el10_2.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

php8.4-mysqlnd-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-process-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-devel-0:8.4.27-1.el10_2.x86_64.rpm php8.4-snmp-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-ffi-0:8.4.27-1.el10_2.x86_64.rpm php8.4-fpm-0:8.4.27-1.el10_2.x86_64.rpm php8.4-common-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-opcache-0:8.4.27-1.el10_2.x86_64.rpm php8.4-bcmath-0:8.4.27-1.el10_2.x86_64.rpm php8.4-gmp-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-odbc-0:8.4.27-1.el10_2.x86_64.rpm php8.4-xml-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-xml-0:8.4.27-1.el10_2.x86_64.rpm php8.4-snmp-0:8.4.27-1.el10_2.x86_64.rpm php8.4-gd-0:8.4.27-1.el10_2.x86_64.rpm php8.4-mbstring-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-pgsql-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-gmp-0:8.4.27-1.el10_2.x86_64.rpm php8.4-0:8.4.27-1.el10_2.src.rpm php8.4-0:8.4.27-1.el10_2.x86_64.rpm php8.4-intl-0:8.4.27-1.el10_2.x86_64.rpm php8.4-opcache-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-soap-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-mbstring-0:8.4.27-1.el10_2.x86_64.rpm php8.4-pdo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-dba-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-ldap-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-odbc-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-enchant-0:8.4.27-1.el10_2.x86_64.rpm php8.4-embedded-0:8.4.27-1.el10_2.x86_64.rpm php8.4-process-0:8.4.27-1.el10_2.x86_64.rpm php8.4-mysqlnd-0:8.4.27-1.el10_2.x86_64.rpm php8.4-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-ldap-0:8.4.27-1.el10_2.x86_64.rpm php8.4-dbg-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-gd-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-common-0:8.4.27-1.el10_2.x86_64.rpm php8.4-fpm-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-debugsource-0:8.4.27-1.el10_2.x86_64.rpm php8.4-dbg-0:8.4.27-1.el10_2.x86_64.rpm php8.4-dba-0:8.4.27-1.el10_2.x86_64.rpm php8.4-pgsql-0:8.4.27-1.el10_2.x86_64.rpm php8.4-intl-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-cli-0:8.4.27-1.el10_2.x86_64.rpm php8.4-ffi-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-bcmath-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-pdo-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-soap-0:8.4.27-1.el10_2.x86_64.rpm php8.4-embedded-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-cli-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm php8.4-enchant-debuginfo-0:8.4.27-1.el10_2.x86_64.rpm

Rocky Linux 10 s390x - AppStream

php8.4-bcmath-0:8.4.27-1.el10_2.s390x.rpm php8.4-odbc-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-bcmath-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-intl-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-snmp-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-devel-0:8.4.27-1.el10_2.s390x.rpm php8.4-intl-0:8.4.27-1.el10_2.s390x.rpm php8.4-pgsql-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-mysqlnd-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-mbstring-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-ffi-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-soap-0:8.4.27-1.el10_2.s390x.rpm php8.4-dba-0:8.4.27-1.el10_2.s390x.rpm php8.4-mysqlnd-0:8.4.27-1.el10_2.s390x.rpm php8.4-dba-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-gmp-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-process-0:8.4.27-1.el10_2.s390x.rpm php8.4-0:8.4.27-1.el10_2.src.rpm php8.4-dbg-0:8.4.27-1.el10_2.s390x.rpm php8.4-common-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-enchant-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-soap-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-xml-0:8.4.27-1.el10_2.s390x.rpm php8.4-0:8.4.27-1.el10_2.s390x.rpm php8.4-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-gd-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-fpm-0:8.4.27-1.el10_2.s390x.rpm php8.4-opcache-0:8.4.27-1.el10_2.s390x.rpm php8.4-pdo-0:8.4.27-1.el10_2.s390x.rpm php8.4-cli-0:8.4.27-1.el10_2.s390x.rpm php8.4-gmp-0:8.4.27-1.el10_2.s390x.rpm php8.4-xml-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-embedded-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-dbg-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-opcache-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-embedded-0:8.4.27-1.el10_2.s390x.rpm php8.4-ldap-0:8.4.27-1.el10_2.s390x.rpm php8.4-pgsql-0:8.4.27-1.el10_2.s390x.rpm php8.4-common-0:8.4.27-1.el10_2.s390x.rpm php8.4-mbstring-0:8.4.27-1.el10_2.s390x.rpm php8.4-debugsource-0:8.4.27-1.el10_2.s390x.rpm php8.4-process-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-enchant-0:8.4.27-1.el10_2.s390x.rpm php8.4-ldap-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-gd-0:8.4.27-1.el10_2.s390x.rpm php8.4-cli-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-fpm-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-snmp-0:8.4.27-1.el10_2.s390x.rpm php8.4-odbc-0:8.4.27-1.el10_2.s390x.rpm php8.4-pdo-debuginfo-0:8.4.27-1.el10_2.s390x.rpm php8.4-ffi-0:8.4.27-1.el10_2.s390x.rpm

Rocky Linux 10 riscv64 - AppStream

php8.4-0:8.4.27-1.el10_2.src.rpm