ALSA-2026:22649

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:22649
Related
  • CVE-2026-6104
  • CVE-2026-6735
  • CVE-2026-7258
  • CVE-2026-7262
  • CVE-2026-7263
  • CVE-2026-7568
Published
2026-06-02T00:00:00Z
Modified
2026-07-15T12:59:33.652187031Z
Summary
Important: php8.4 security update
Details

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258)
  • PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735)
  • php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262)
  • php: signed integer overflow in metaphone() (CVE-2026-7568)
  • php: denial of service via DOMNode::C14N() (CVE-2026-7263)
  • php: global buffer over-read in mbconvertencoding() with attacker-supplied encoding (CVE-2026-6104)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10
php8.4

Package

Name
php8.4
Purl
pkg:rpm/almalinux/php8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-bcmath

Package

Name
php8.4-bcmath
Purl
pkg:rpm/almalinux/php8.4-bcmath

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-cli

Package

Name
php8.4-cli
Purl
pkg:rpm/almalinux/php8.4-cli

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-common

Package

Name
php8.4-common
Purl
pkg:rpm/almalinux/php8.4-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-dba

Package

Name
php8.4-dba
Purl
pkg:rpm/almalinux/php8.4-dba

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-dbg

Package

Name
php8.4-dbg
Purl
pkg:rpm/almalinux/php8.4-dbg

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-devel

Package

Name
php8.4-devel
Purl
pkg:rpm/almalinux/php8.4-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-embedded

Package

Name
php8.4-embedded
Purl
pkg:rpm/almalinux/php8.4-embedded

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-enchant

Package

Name
php8.4-enchant
Purl
pkg:rpm/almalinux/php8.4-enchant

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-ffi

Package

Name
php8.4-ffi
Purl
pkg:rpm/almalinux/php8.4-ffi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-fpm

Package

Name
php8.4-fpm
Purl
pkg:rpm/almalinux/php8.4-fpm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-gd

Package

Name
php8.4-gd
Purl
pkg:rpm/almalinux/php8.4-gd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-gmp

Package

Name
php8.4-gmp
Purl
pkg:rpm/almalinux/php8.4-gmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-intl

Package

Name
php8.4-intl
Purl
pkg:rpm/almalinux/php8.4-intl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-ldap

Package

Name
php8.4-ldap
Purl
pkg:rpm/almalinux/php8.4-ldap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-mbstring

Package

Name
php8.4-mbstring
Purl
pkg:rpm/almalinux/php8.4-mbstring

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-mysqlnd

Package

Name
php8.4-mysqlnd
Purl
pkg:rpm/almalinux/php8.4-mysqlnd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-odbc

Package

Name
php8.4-odbc
Purl
pkg:rpm/almalinux/php8.4-odbc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-opcache

Package

Name
php8.4-opcache
Purl
pkg:rpm/almalinux/php8.4-opcache

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-pdo

Package

Name
php8.4-pdo
Purl
pkg:rpm/almalinux/php8.4-pdo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-pgsql

Package

Name
php8.4-pgsql
Purl
pkg:rpm/almalinux/php8.4-pgsql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-process

Package

Name
php8.4-process
Purl
pkg:rpm/almalinux/php8.4-process

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-snmp

Package

Name
php8.4-snmp
Purl
pkg:rpm/almalinux/php8.4-snmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-soap

Package

Name
php8.4-soap
Purl
pkg:rpm/almalinux/php8.4-soap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"
php8.4-xml

Package

Name
php8.4-xml
Purl
pkg:rpm/almalinux/php8.4-xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.21-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:22649.json"