MGASA-2026-0285

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0285.html
Import Source
https://advisories.mageia.org/MGASA-2026-0285.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0285
Upstream
  • CVE-2026-14355
Published
2026-07-20T19:06:32Z
Modified
2026-07-20T19:15:05.290652021Z
Summary
Updated php8.4 and php8.5 packages fix security vulnerabilities
Details

The updated php8.4 and php8.5 packages fix several security issues, e.g. Memory corruption (zendmmheap corrupted) in openssl_encrypt with AES-WRAP-PAD. (CVE-2026-14355)

References
Credits

Affected packages

Mageia:10 / php8.4

Package

Name
php8.4
Purl
pkg:rpm/mageia/php8.4?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.4.23-1.mga10

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0285.json"

Mageia:10 / php8.5

Package

Name
php8.5
Purl
pkg:rpm/mageia/php8.5?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.5.8-1.mga10

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0285.json"