Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:22649
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:22649
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:22649.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:22649
Upstream
CVE-2026-6104
CVE-2026-6735
CVE-2026-7258
CVE-2026-7262
CVE-2026-7263
CVE-2026-7568
Published
2026-06-03T10:20:16Z
Modified
2026-06-05T10:06:12Z
Severity
8.2 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: php8.4 security update
Details
References
https://access.redhat.com/errata/RHSA-2026:22649
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2468561
https://bugzilla.redhat.com/show_bug.cgi?id=2468562
https://bugzilla.redhat.com/show_bug.cgi?id=2468565
https://bugzilla.redhat.com/show_bug.cgi?id=2468566
https://bugzilla.redhat.com/show_bug.cgi?id=2468572
https://bugzilla.redhat.com/show_bug.cgi?id=2468573
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22649.json
https://access.redhat.com/security/cve/CVE-2026-6104
https://www.cve.org/CVERecord?id=CVE-2026-6104
https://nvd.nist.gov/vuln/detail/CVE-2026-6104
https://github.com/php/php-src/security/advisories/GHSA-74r9-qxhc-fx53
https://access.redhat.com/security/cve/CVE-2026-6735
https://www.cve.org/CVERecord?id=CVE-2026-6735
https://nvd.nist.gov/vuln/detail/CVE-2026-6735
https://github.com/php/php-src/security/advisories/GHSA-7qg2-v9fj-4mwv
https://access.redhat.com/security/cve/CVE-2026-7258
https://www.cve.org/CVERecord?id=CVE-2026-7258
https://nvd.nist.gov/vuln/detail/CVE-2026-7258
https://github.com/php/php-src/security/advisories/GHSA-m8rr-4c36-8gq4
https://access.redhat.com/security/cve/CVE-2026-7262
https://www.cve.org/CVERecord?id=CVE-2026-7262
https://nvd.nist.gov/vuln/detail/CVE-2026-7262
https://github.com/php/php-src/security/advisories/GHSA-hmxp-6pc4-f3vv
https://access.redhat.com/security/cve/CVE-2026-7263
https://www.cve.org/CVERecord?id=CVE-2026-7263
https://nvd.nist.gov/vuln/detail/CVE-2026-7263
https://github.com/php/php-src/security/advisories/GHSA-4jhr-8w89-j733
https://access.redhat.com/security/cve/CVE-2026-7568
https://www.cve.org/CVERecord?id=CVE-2026-7568
https://nvd.nist.gov/vuln/detail/CVE-2026-7568
https://github.com/php/php-src/security/advisories/GHSA-96wq-48vp-hh57
Affected packages
Red Hat:enterprise_linux:10.2
php8.4
Package
Name
php8.4
Purl
pkg:rpm/redhat/php8.4
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-bcmath
Package
Name
php8.4-bcmath
Purl
pkg:rpm/redhat/php8.4-bcmath
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-bcmath-debuginfo
Package
Name
php8.4-bcmath-debuginfo
Purl
pkg:rpm/redhat/php8.4-bcmath-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-cli
Package
Name
php8.4-cli
Purl
pkg:rpm/redhat/php8.4-cli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-cli-debuginfo
Package
Name
php8.4-cli-debuginfo
Purl
pkg:rpm/redhat/php8.4-cli-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-common
Package
Name
php8.4-common
Purl
pkg:rpm/redhat/php8.4-common
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-common-debuginfo
Package
Name
php8.4-common-debuginfo
Purl
pkg:rpm/redhat/php8.4-common-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-dba
Package
Name
php8.4-dba
Purl
pkg:rpm/redhat/php8.4-dba
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-dba-debuginfo
Package
Name
php8.4-dba-debuginfo
Purl
pkg:rpm/redhat/php8.4-dba-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-dbg
Package
Name
php8.4-dbg
Purl
pkg:rpm/redhat/php8.4-dbg
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-dbg-debuginfo
Package
Name
php8.4-dbg-debuginfo
Purl
pkg:rpm/redhat/php8.4-dbg-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-debuginfo
Package
Name
php8.4-debuginfo
Purl
pkg:rpm/redhat/php8.4-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-debugsource
Package
Name
php8.4-debugsource
Purl
pkg:rpm/redhat/php8.4-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-devel
Package
Name
php8.4-devel
Purl
pkg:rpm/redhat/php8.4-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-embedded
Package
Name
php8.4-embedded
Purl
pkg:rpm/redhat/php8.4-embedded
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-embedded-debuginfo
Package
Name
php8.4-embedded-debuginfo
Purl
pkg:rpm/redhat/php8.4-embedded-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-enchant
Package
Name
php8.4-enchant
Purl
pkg:rpm/redhat/php8.4-enchant
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-enchant-debuginfo
Package
Name
php8.4-enchant-debuginfo
Purl
pkg:rpm/redhat/php8.4-enchant-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-ffi
Package
Name
php8.4-ffi
Purl
pkg:rpm/redhat/php8.4-ffi
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-ffi-debuginfo
Package
Name
php8.4-ffi-debuginfo
Purl
pkg:rpm/redhat/php8.4-ffi-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-fpm
Package
Name
php8.4-fpm
Purl
pkg:rpm/redhat/php8.4-fpm
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-fpm-debuginfo
Package
Name
php8.4-fpm-debuginfo
Purl
pkg:rpm/redhat/php8.4-fpm-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-gd
Package
Name
php8.4-gd
Purl
pkg:rpm/redhat/php8.4-gd
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-gd-debuginfo
Package
Name
php8.4-gd-debuginfo
Purl
pkg:rpm/redhat/php8.4-gd-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-gmp
Package
Name
php8.4-gmp
Purl
pkg:rpm/redhat/php8.4-gmp
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-gmp-debuginfo
Package
Name
php8.4-gmp-debuginfo
Purl
pkg:rpm/redhat/php8.4-gmp-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-intl
Package
Name
php8.4-intl
Purl
pkg:rpm/redhat/php8.4-intl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-intl-debuginfo
Package
Name
php8.4-intl-debuginfo
Purl
pkg:rpm/redhat/php8.4-intl-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-ldap
Package
Name
php8.4-ldap
Purl
pkg:rpm/redhat/php8.4-ldap
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-ldap-debuginfo
Package
Name
php8.4-ldap-debuginfo
Purl
pkg:rpm/redhat/php8.4-ldap-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-mbstring
Package
Name
php8.4-mbstring
Purl
pkg:rpm/redhat/php8.4-mbstring
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-mbstring-debuginfo
Package
Name
php8.4-mbstring-debuginfo
Purl
pkg:rpm/redhat/php8.4-mbstring-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-mysqlnd
Package
Name
php8.4-mysqlnd
Purl
pkg:rpm/redhat/php8.4-mysqlnd
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-mysqlnd-debuginfo
Package
Name
php8.4-mysqlnd-debuginfo
Purl
pkg:rpm/redhat/php8.4-mysqlnd-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-odbc
Package
Name
php8.4-odbc
Purl
pkg:rpm/redhat/php8.4-odbc
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-odbc-debuginfo
Package
Name
php8.4-odbc-debuginfo
Purl
pkg:rpm/redhat/php8.4-odbc-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-opcache
Package
Name
php8.4-opcache
Purl
pkg:rpm/redhat/php8.4-opcache
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-opcache-debuginfo
Package
Name
php8.4-opcache-debuginfo
Purl
pkg:rpm/redhat/php8.4-opcache-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-pdo
Package
Name
php8.4-pdo
Purl
pkg:rpm/redhat/php8.4-pdo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-pdo-debuginfo
Package
Name
php8.4-pdo-debuginfo
Purl
pkg:rpm/redhat/php8.4-pdo-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-pgsql
Package
Name
php8.4-pgsql
Purl
pkg:rpm/redhat/php8.4-pgsql
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-pgsql-debuginfo
Package
Name
php8.4-pgsql-debuginfo
Purl
pkg:rpm/redhat/php8.4-pgsql-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-process
Package
Name
php8.4-process
Purl
pkg:rpm/redhat/php8.4-process
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-process-debuginfo
Package
Name
php8.4-process-debuginfo
Purl
pkg:rpm/redhat/php8.4-process-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-snmp
Package
Name
php8.4-snmp
Purl
pkg:rpm/redhat/php8.4-snmp
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-snmp-debuginfo
Package
Name
php8.4-snmp-debuginfo
Purl
pkg:rpm/redhat/php8.4-snmp-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-soap
Package
Name
php8.4-soap
Purl
pkg:rpm/redhat/php8.4-soap
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-soap-debuginfo
Package
Name
php8.4-soap-debuginfo
Purl
pkg:rpm/redhat/php8.4-soap-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-xml
Package
Name
php8.4-xml
Purl
pkg:rpm/redhat/php8.4-xml
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
php8.4-xml-debuginfo
Package
Name
php8.4-xml-debuginfo
Purl
pkg:rpm/redhat/php8.4-xml-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.4.21-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:22649.json"
RHSA-2026:22649 - OSV