ALSA-2026:49914

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:49914
Related
  • CVE-2026-14355
Published
2026-08-04T00:00:00Z
Modified
2026-08-18T12:26:53.462419670Z
Summary
Low: php8.4 security, bug fix, and enhancement update
Details

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD (CVE-2026-14355)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.23 for CVE-2026-14355 in 10.2.z (JIRA:AlmaLinux-192616)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10
php8.4

Package

Name
php8.4
Purl
pkg:rpm/almalinux/php8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-bcmath

Package

Name
php8.4-bcmath
Purl
pkg:rpm/almalinux/php8.4-bcmath

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-cli

Package

Name
php8.4-cli
Purl
pkg:rpm/almalinux/php8.4-cli

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-common

Package

Name
php8.4-common
Purl
pkg:rpm/almalinux/php8.4-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-dba

Package

Name
php8.4-dba
Purl
pkg:rpm/almalinux/php8.4-dba

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-dbg

Package

Name
php8.4-dbg
Purl
pkg:rpm/almalinux/php8.4-dbg

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-devel

Package

Name
php8.4-devel
Purl
pkg:rpm/almalinux/php8.4-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-embedded

Package

Name
php8.4-embedded
Purl
pkg:rpm/almalinux/php8.4-embedded

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-enchant

Package

Name
php8.4-enchant
Purl
pkg:rpm/almalinux/php8.4-enchant

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-ffi

Package

Name
php8.4-ffi
Purl
pkg:rpm/almalinux/php8.4-ffi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-fpm

Package

Name
php8.4-fpm
Purl
pkg:rpm/almalinux/php8.4-fpm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-gd

Package

Name
php8.4-gd
Purl
pkg:rpm/almalinux/php8.4-gd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-gmp

Package

Name
php8.4-gmp
Purl
pkg:rpm/almalinux/php8.4-gmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-intl

Package

Name
php8.4-intl
Purl
pkg:rpm/almalinux/php8.4-intl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-ldap

Package

Name
php8.4-ldap
Purl
pkg:rpm/almalinux/php8.4-ldap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-mbstring

Package

Name
php8.4-mbstring
Purl
pkg:rpm/almalinux/php8.4-mbstring

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-mysqlnd

Package

Name
php8.4-mysqlnd
Purl
pkg:rpm/almalinux/php8.4-mysqlnd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-odbc

Package

Name
php8.4-odbc
Purl
pkg:rpm/almalinux/php8.4-odbc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-opcache

Package

Name
php8.4-opcache
Purl
pkg:rpm/almalinux/php8.4-opcache

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-pdo

Package

Name
php8.4-pdo
Purl
pkg:rpm/almalinux/php8.4-pdo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-pgsql

Package

Name
php8.4-pgsql
Purl
pkg:rpm/almalinux/php8.4-pgsql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-process

Package

Name
php8.4-process
Purl
pkg:rpm/almalinux/php8.4-process

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-snmp

Package

Name
php8.4-snmp
Purl
pkg:rpm/almalinux/php8.4-snmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-soap

Package

Name
php8.4-soap
Purl
pkg:rpm/almalinux/php8.4-soap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"
php8.4-xml

Package

Name
php8.4-xml
Purl
pkg:rpm/almalinux/php8.4-xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.el10_2

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:49914.json"