p PatchFirst

ALSA-2026:23388

ALSA-2026:23388 · Important: php security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258) * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735) * php: NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() (CVE-2026-7259) * php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262) * php: signed integer overflow in metaphone() (CVE-2026-7568) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • php AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-bcmath AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-cli AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-common AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-dba AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-dbg AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-devel AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-embedded AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-enchant AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-ffi AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-fpm AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-gd AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-gmp AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-intl AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-ldap AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-mbstring AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-mysqlnd AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-odbc AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-opcache AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-pdo AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-pgsql AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-process AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-snmp AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

  • php-soap AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 8.3.31-1.el10_2

    Update to 8.3.31-1.el10_2

Original sources

Check your server →