p PatchFirst

ALSA-2026:57539

ALSA-2026:57539 · Important: php:8.3 security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.3.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223944) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • apcu-panel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.23-1.module_el9.6.0+151+5f31e576

    Update to 5.1.23-1.module_el9.6.0+151+5f31e576

  • php AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-bcmath AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-bcmath AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-cli AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-cli AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-common AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-common AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-dba AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-dbg AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-dbg AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-embedded AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-embedded AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-enchant AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-enchant AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-ffi AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-ffi AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-fpm AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

  • php-fpm AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-gd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+296+9aab6c42

    Update to 8.3.33-1.module_el9.8.0+296+9aab6c42

  • php-gd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.3.33-1.module_el9.8.0+297+88e7f1bf

    Update to 8.3.33-1.module_el9.8.0+297+88e7f1bf

Original sources

Check your server →