p PatchFirst

ALSA-2026:61903

ALSA-2026:61903 · Important: php:8.2 security, bug fix, and enhancement update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) * php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): * Rebase PHP to 8.2.33 for CVE-2026-17543 and CVE-2026-7260 in 9.8.z (JIRA:AlmaLinux-223942) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • apcu-panel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.23-1.module_el9.4.0+65+49ff6472

    Update to 5.1.23-1.module_el9.4.0+65+49ff6472

  • php AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-bcmath AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-cli AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-common AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-dba AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-dbg AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-embedded AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-enchant AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-ffi AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-fpm AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-gd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-gmp AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-intl AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-ldap AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-mbstring AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-mysqlnd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-odbc AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-opcache AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-pdo AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-pecl-apcu AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.23-1.module_el9.4.0+65+49ff6472

    Update to 5.1.23-1.module_el9.4.0+65+49ff6472

  • php-pecl-apcu-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.23-1.module_el9.4.0+65+49ff6472

    Update to 5.1.23-1.module_el9.4.0+65+49ff6472

  • php-pecl-rrd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 2.0.3-4.module_el9.4.0+65+49ff6472

    Update to 2.0.3-4.module_el9.4.0+65+49ff6472

  • php-pecl-xdebug3 AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 3.2.2-2.module_el9.4.0+65+49ff6472

    Update to 3.2.2-2.module_el9.4.0+65+49ff6472

  • php-pecl-zip AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 1.22.3-1.module_el9.4.0+65+49ff6472

    Update to 1.22.3-1.module_el9.4.0+65+49ff6472

  • php-pgsql AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-process AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-snmp AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-soap AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

  • php-xml AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.2.33-1.module_el9.8.0+303+1bef6c12

    Update to 8.2.33-1.module_el9.8.0+303+1bef6c12

Original sources

Check your server →