Summary
libzip
[1.7.3-1]
- update to 1.7.3
php
[8.2.33-1]
- rebase to 8.2.33
php-pear
[1:1.10.14-1]
- update PEAR to 1.10.14 for PHP 8.2 RHEL-14705
php-pecl-apcu
[5.1.23-1]
- update to 5.1.23 for PHP 8.2 RHEL-14705
php-pecl-rrd
[2.0.3-1]
- update to 2.0.3
php-pecl-xdebug3
[3.2.2-2]
- drop inet_ntoa usage using upstream patch
php-pecl-zip
[1.22.3-1]
- update to 1.22.3 for PHP 8.2 RHEL-14705
Fixed packages 35
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | apcu-panel | 0:5.1.23-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | libzip | 0:1.7.3-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | libzip-devel | 0:1.7.3-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | libzip-tools | 0:1.7.3-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-bcmath | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-cli | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-common | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-dba | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-dbg | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-devel | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-embedded | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-enchant | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-ffi | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-fpm | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-gd | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-gmp | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-intl | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-ldap | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-mbstring | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-mysqlnd | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-odbc | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-opcache | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-pdo | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-pear | 1:1.10.14-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php-pecl-apcu | 0:5.1.23-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php-pecl-apcu-devel | 0:5.1.23-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php-pecl-rrd | 0:2.0.3-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php-pecl-xdebug3 | 0:3.2.2-2.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php-pecl-zip | 0:1.22.3-1.module+el8.10.0+90469+8883f508 |
| Oracle Linux · 8 | php-pgsql | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-process | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-snmp | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-soap | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
| Oracle Linux · 8 | php-xml | 0:8.2.33-1.module+el8.10.0+91000+cf903a0b |
Vulnerabilities 2
-
High 8.1CVE-2026-17543 Public exploit
SQL injection in ext-pgsql via E'...' backslash breakout
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
-
Medium 5.4
Stack overflow in phar with circular symlinks
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.