ALSA-2026:56969

Source
https://errata.almalinux.org/10/ALSA-2026-56969.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:56969
Related
  • CVE-2026-17543
  • CVE-2026-17544
  • CVE-2026-7260
Published
2026-08-19T00:00:00Z
Modified
2026-08-20T12:11:56Z
Summary
Important: php8.4 security, bug fix, and enhancement update
Details

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:AlmaLinux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10
php8.4

Package

Name
php8.4
Purl
pkg:rpm/almalinux/php8.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-bcmath

Package

Name
php8.4-bcmath
Purl
pkg:rpm/almalinux/php8.4-bcmath

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-cli

Package

Name
php8.4-cli
Purl
pkg:rpm/almalinux/php8.4-cli

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-common

Package

Name
php8.4-common
Purl
pkg:rpm/almalinux/php8.4-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-dba

Package

Name
php8.4-dba
Purl
pkg:rpm/almalinux/php8.4-dba

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-dbg

Package

Name
php8.4-dbg
Purl
pkg:rpm/almalinux/php8.4-dbg

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-devel

Package

Name
php8.4-devel
Purl
pkg:rpm/almalinux/php8.4-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-embedded

Package

Name
php8.4-embedded
Purl
pkg:rpm/almalinux/php8.4-embedded

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-enchant

Package

Name
php8.4-enchant
Purl
pkg:rpm/almalinux/php8.4-enchant

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-ffi

Package

Name
php8.4-ffi
Purl
pkg:rpm/almalinux/php8.4-ffi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-fpm

Package

Name
php8.4-fpm
Purl
pkg:rpm/almalinux/php8.4-fpm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-gd

Package

Name
php8.4-gd
Purl
pkg:rpm/almalinux/php8.4-gd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-gmp

Package

Name
php8.4-gmp
Purl
pkg:rpm/almalinux/php8.4-gmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-intl

Package

Name
php8.4-intl
Purl
pkg:rpm/almalinux/php8.4-intl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-ldap

Package

Name
php8.4-ldap
Purl
pkg:rpm/almalinux/php8.4-ldap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-mbstring

Package

Name
php8.4-mbstring
Purl
pkg:rpm/almalinux/php8.4-mbstring

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-mysqlnd

Package

Name
php8.4-mysqlnd
Purl
pkg:rpm/almalinux/php8.4-mysqlnd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-odbc

Package

Name
php8.4-odbc
Purl
pkg:rpm/almalinux/php8.4-odbc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-opcache

Package

Name
php8.4-opcache
Purl
pkg:rpm/almalinux/php8.4-opcache

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-pdo

Package

Name
php8.4-pdo
Purl
pkg:rpm/almalinux/php8.4-pdo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-pgsql

Package

Name
php8.4-pgsql
Purl
pkg:rpm/almalinux/php8.4-pgsql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-process

Package

Name
php8.4-process
Purl
pkg:rpm/almalinux/php8.4-process

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-snmp

Package

Name
php8.4-snmp
Purl
pkg:rpm/almalinux/php8.4-snmp

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-soap

Package

Name
php8.4-soap
Purl
pkg:rpm/almalinux/php8.4-soap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"
php8.4-xml

Package

Name
php8.4-xml
Purl
pkg:rpm/almalinux/php8.4-xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.4.24-1.el10_2

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:56969.json"