Skip to content
OpenAdvisories
Critical 2 exploited CVEs RHSA-2026:97880 3 CVEs

Red Hat Security Advisory: php:8.4 security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 67

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream apcu-panel 0:5.1.27-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-bcmath 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-bcmath-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-cli 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-cli-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-common 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-common-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dba 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dba-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dbg 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-dbg-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-debugsource 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-devel 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-embedded 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-embedded-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-enchant 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-enchant-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ffi 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ffi-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-fpm 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-fpm-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gd 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gd-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gmp 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-gmp-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-intl 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-intl-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ldap 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-ldap-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mbstring 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mbstring-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mysqlnd 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-mysqlnd-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-odbc 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-odbc-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-opcache 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-opcache-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pdo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pdo-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-apcu 0:5.1.27-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-apcu-debuginfo 0:5.1.27-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-apcu-debugsource 0:5.1.27-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-apcu-devel 0:5.1.27-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-redis6 0:6.2.0-3.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-redis6-debuginfo 0:6.2.0-3.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-redis6-debugsource 0:6.2.0-3.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-rrd 0:2.0.3-19.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-rrd-debuginfo 0:2.0.3-19.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-rrd-debugsource 0:2.0.3-19.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-xdebug3 0:3.4.7-3.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-xdebug3-debuginfo 0:3.4.7-3.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-xdebug3-debugsource 0:3.4.7-3.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-zip 0:1.22.7-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-zip-debuginfo 0:1.22.7-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pecl-zip-debugsource 0:1.22.7-2.module+el9.9.0+24551+b05e3fee
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pgsql 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-pgsql-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-process 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-process-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-snmp 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-snmp-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-soap 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-soap-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-xml 0:8.4.27-1.module+el9.9.0+25112+f4f032cf
Red Hat · RHEL 9 enterprise_linux:9::appstream php-xml-debuginfo 0:8.4.27-1.module+el9.9.0+25112+f4f032cf

Vulnerabilities 3

  • Critical 9.2
    CVE-2026-109618 Exploited Public exploit Scanner template EPSS 100%

    RCE via OOM corruption

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026
  • Critical 9.2
    CVE-2026-109619 Exploited Public exploit Scanner template EPSS 100%

    RCE via stale global state

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 26, 2026
  • High 7.5
    CVE-2026-91765

    SOAP: Unbounded Recursion in Server-Side cleanup_xml_node

    cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the …

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2541646
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2553995
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2554177
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_97880.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-91765
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-91765
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-91765
  • article
    https://github.com/php/php-src/security/advisories/GHSA-rgrp-mwpx-f6rm
  • report
    https://access.redhat.com/security/cve/CVE-2026-109618
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2026-013
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-109618
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-109618
  • article
    https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2026-109619
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-109619
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-109619
  • article
    https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp