RHSA-2026:61259: Low: php security, bug fix, and enhancement update

Q: Which package names should be included in an inventory search for this update?

The listed packages are redhat/php, redhat/php-bcmath, redhat/php-bcmath-debuginfo, redhat/php-cli, redhat/php-cli-debuginfo, redhat/php-common, redhat/php-common-debuginfo, and redhat/php-dba.

Q: Which security fixes were backported to PHP 8.0 in 9.8.z?

The update backports fixes for CVE-2026-14355 in ext/openssl, CVE-2026-17543 in ext-pgsql, and CVE-2026-7260 involving circular symbolic links in phar archives.

Published Aug 31, 2026

Updated

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.Security Fix(es): php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD (CVE-2026-14355) php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) php: PHP: Denial of Service via circular symbolic links in phar archives (CVE-2026-7260) Bug Fix(es) and Enhancement(s): Backport fix for CVE-2026-14355 to PHP 8.0 in 9.8.z (JIRA:RHEL-192624) Backport fix for CVE-2026-17543 and CVE-2026-7260 to PHP 8.0 in 9.8.z (JIRA:RHEL-223940) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

200 affected componentsFixes available

redhat/php<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-bcmath<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-bcmath-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-cli<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-cli-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-common<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-common-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dba<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dba-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dbg<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dbg-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-debugsource<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-devel<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-embedded<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-embedded-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-enchant<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-enchant-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ffi<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ffi-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-fpm<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-fpm-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gd<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gd-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gmp<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gmp-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-intl<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-intl-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ldap<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ldap-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mbstring<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mbstring-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mysqlnd<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mysqlnd-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-odbc<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-odbc-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-opcache<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-opcache-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pdo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pdo-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pgsql<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pgsql-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-process<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-process-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-snmp<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-snmp-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-soap<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-soap-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-xml<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-xml-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-bcmath<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-bcmath-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-cli<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-cli-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-common<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-common-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dba<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dba-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dbg<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dbg-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-debugsource<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-devel<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-embedded<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-embedded-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-enchant<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-enchant-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ffi<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ffi-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-fpm<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-fpm-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gd<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gd-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gmp<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gmp-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-intl<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-intl-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ldap<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ldap-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mbstring<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mbstring-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mysqlnd<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mysqlnd-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-odbc<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-odbc-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-opcache<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-opcache-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pdo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pdo-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pgsql<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pgsql-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-process<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-process-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-snmp<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-snmp-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-soap<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-soap-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-xml<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-xml-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-bcmath<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-bcmath-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-cli<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-cli-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-common<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-common-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dba<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dba-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dbg<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-dbg-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-debugsource<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-devel<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-embedded<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-embedded-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-enchant<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-enchant-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ffi<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ffi-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-fpm<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-fpm-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gd<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gd-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gmp<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-gmp-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-intl<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-intl-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ldap<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-ldap-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mbstring<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mbstring-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mysqlnd<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-mysqlnd-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-odbc<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-odbc-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-opcache<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-opcache-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pdo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pdo-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pgsql<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-pgsql-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-process<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-process-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-snmp<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-snmp-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-soap<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-soap-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-xml<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php-xml-debuginfo<8.0.30-8.el9_8

8.0.30-8.el9_8

redhat/php<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-bcmath<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-bcmath-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-cli<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-cli-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-common<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-common-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-dba<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-dba-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-dbg<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-dbg-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-debugsource<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-devel<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-embedded<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-embedded-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-enchant<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-enchant-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-ffi<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-ffi-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-fpm<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-fpm-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-gd<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-gd-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-gmp<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-gmp-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-intl<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-intl-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-ldap<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-ldap-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-mbstring<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-mbstring-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-mysqlnd<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-mysqlnd-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-odbc<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-odbc-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-opcache<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-opcache-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-pdo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-pdo-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-pgsql<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-pgsql-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-process<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-process-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-snmp<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-snmp-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-soap<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-soap-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-xml<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

redhat/php-xml-debuginfo<8.0.30-8.el9_8.aa

8.0.30-8.el9_8.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/php to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-bcmath to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-bcmath-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-cli to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-cli-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-common to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-common-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-dba to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-dba-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-dbg to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-dbg-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-debugsource to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-devel to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-embedded to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-embedded-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-enchant to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-enchant-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-ffi to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-ffi-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-fpm to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-fpm-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-gd to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-gd-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-gmp to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-gmp-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-intl to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-intl-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-ldap to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-ldap-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-mbstring to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-mbstring-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-mysqlnd to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-mysqlnd-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-odbc to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-odbc-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-opcache to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-opcache-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-pdo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-pdo-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-pgsql to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-pgsql-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-process to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-process-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-snmp to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-snmp-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-soap to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-soap-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-xml to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php-xml-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8
Upgrade
Upgrade redhat/php to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-bcmath to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-bcmath-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-cli to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-cli-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-common to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-common-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-dba to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-dba-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-dbg to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-dbg-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-debugsource to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-devel to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-embedded to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-embedded-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-enchant to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-enchant-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-ffi to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-ffi-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-fpm to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-fpm-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-gd to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-gd-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-gmp to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-gmp-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-intl to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-intl-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-ldap to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-ldap-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-mbstring to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-mbstring-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-mysqlnd to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-mysqlnd-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-odbc to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-odbc-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-opcache to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-opcache-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-pdo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-pdo-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-pgsql to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-pgsql-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-process to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-process-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-snmp to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-snmp-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-soap to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-soap-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-xml to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade redhat/php-xml-debuginfo to a version that resolves this vulnerability.
Fixed in 8.0.30-8.el9_8.aa
Upgrade
Upgrade PHP 8.0 to a version that resolves this vulnerability.
Fixed in 9.8.zPatch JIRA:RHEL-223940
Upgrade
Upgrade PHP 8.0 to a version that resolves this vulnerability.
Fixed in 9.8.zPatch JIRA:RHEL-192624

Event History

Aug 31, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which package names should be included in an inventory search for this update?

The listed packages are redhat/php, redhat/php-bcmath, redhat/php-bcmath-debuginfo, redhat/php-cli, redhat/php-cli-debuginfo, redhat/php-common, redhat/php-common-debuginfo, and redhat/php-dba.

Which security fixes were backported to PHP 8.0 in 9.8.z?

The update backports fixes for CVE-2026-14355 in ext/openssl, CVE-2026-17543 in ext-pgsql, and CVE-2026-7260 involving circular symbolic links in phar archives.

RHSA-2026:61259: Low: php security, bug fix, and enhancement update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which package names should be included in an inventory search for this update?

Which security fixes were backported to PHP 8.0 in 9.8.z?

Company

Resources

Contact