Back to Security Advisories
aarch64
php-odbc-8.3.31-1.el10_2.aarch64.rpm
02ebbe4ec73281b96ae3e8fbf609832e15f5ad5f8f0783d013b691a41fc12691
aarch64
php-ffi-8.3.31-1.el10_2.aarch64.rpm
2637876b33b6a8ec385adf5851cf5cb15c58bd625f821920271d25bbf3d49343
aarch64
php-pdo-8.3.31-1.el10_2.aarch64.rpm
268c00c3becf4ccd3e2e4cc7753908c0c2db5f195bc692804e5bd23c0a97cfe7
aarch64
php-gd-8.3.31-1.el10_2.aarch64.rpm
38481bcce41b02096ee9961e51c3ac43a35a0656b042eeeb77f7c124eb58a306
aarch64
php-snmp-8.3.31-1.el10_2.aarch64.rpm
397b81ba53053c882d463abb45d67da0bb9a341d0b32cc2ee04d32ff8dc1fdc7
aarch64
php-embedded-8.3.31-1.el10_2.aarch64.rpm
39a668203a62865cecb5953d4d5701da6dffdd6991fea6be2172e963bbdb75ea
aarch64
php-ldap-8.3.31-1.el10_2.aarch64.rpm
41156a053bacdccdef252d74ffc583e8e1e088e2e42a5c82a6871d445872266b
aarch64
php-intl-8.3.31-1.el10_2.aarch64.rpm
4d3d56cc3076a6d2bfbb76dbbea9efe1fa0ed4fb3ffb180412a7a74922d73631
aarch64
php-dba-8.3.31-1.el10_2.aarch64.rpm
5b3477015d21aed4ac24b114eff0f5bb98ed9383c582532ce2fa07c641859ecb
aarch64
php-opcache-8.3.31-1.el10_2.aarch64.rpm
5d957b653d98a0c68819a4221d99fc612fe6d9f64741078f6bcd13af6cc1e15f
aarch64
php-dbg-8.3.31-1.el10_2.aarch64.rpm
60560ded871026142fce67b6f9c5dc42feafb8353cbe0c8f5cf22d60dfb50d30
aarch64
php-8.3.31-1.el10_2.aarch64.rpm
667dcc6a92ac2b64bb459d91448883197851f31fb91a343d40e4b581d29a02e8
aarch64
php-bcmath-8.3.31-1.el10_2.aarch64.rpm
78fd6ec53225944acdcabf99575f5f8d730c9788fb27ce64e3c0481d5d580895
aarch64
php-mbstring-8.3.31-1.el10_2.aarch64.rpm
7fe6c46f54b3f32ea2c1c6bfa6873786993d4b8c56b8f8d5df9e0a7d54710187
aarch64
php-fpm-8.3.31-1.el10_2.aarch64.rpm
8fa3a6de488b524d6fe1a051a404c40ecbf81bc9253d46e85fb48543b2ccb61d
aarch64
php-pgsql-8.3.31-1.el10_2.aarch64.rpm
a3284f6cc4a0ed0157fc6299922a1eb584b83eb5d1bba0bc4d6b1afe5e61d9fe
aarch64
php-common-8.3.31-1.el10_2.aarch64.rpm
b15f937ef3f3f4bec77b9e736c36e4614d24d729f6575e8153d147eec80b2ac0
aarch64
php-soap-8.3.31-1.el10_2.aarch64.rpm
befa3174cde96717a64ec7e8b9c465d44e1c9f727ba258ffb9124f2606128f55
aarch64
php-xml-8.3.31-1.el10_2.aarch64.rpm
c3e9a48470c4f4d626fa544129034e8c178340c56f5d2c69907f897a1b227510
aarch64
php-enchant-8.3.31-1.el10_2.aarch64.rpm
c650e35423c1d0ed797e5586c465c9d4d2813fb82d505d396a664964f6c96f1b
aarch64
php-process-8.3.31-1.el10_2.aarch64.rpm
ca14bc5636b866cb6cbce9ee355a0d092eb2e4f68687692fc4f1927966a51d74
aarch64
php-devel-8.3.31-1.el10_2.aarch64.rpm
d1a864f40ec1f364fe8ff6836221e4d810a31cdc8ce9297efece05544253492e
aarch64
php-gmp-8.3.31-1.el10_2.aarch64.rpm
e1c6fc1297930be82a91506dceecaeacf42cd556d64768ac620aa33e4251c7ff
aarch64
php-mysqlnd-8.3.31-1.el10_2.aarch64.rpm
ef2578dfae09346b86789c6be766c3154c91c72f8f47582bf98e80cbdde23cfd
aarch64
php-cli-8.3.31-1.el10_2.aarch64.rpm
f9e9ae25888e30151cfcdac82deed1b7e024d4c311dd09691a5fb80c4810dbf3
ppc64le
php-enchant-8.3.31-1.el10_2.ppc64le.rpm
0092272e9cb56a22858b187728c47bf887e2b2171b858bdf60e5d98f25c632ef
ppc64le
php-odbc-8.3.31-1.el10_2.ppc64le.rpm
0951c0fc0353686c1efb5728c56d3f3d94c95d8cd07493a7c6f587bf3fac941e
ppc64le
php-cli-8.3.31-1.el10_2.ppc64le.rpm
1e2ab806de8899b17509c919cea5135f3a56f17bd4ae38b188ded45f90c786a9
ppc64le
php-mbstring-8.3.31-1.el10_2.ppc64le.rpm
1eb62a753fdc440a97907c7a3a72e075f21026205a793d9c93a6b2e74055ca46
ppc64le
php-mysqlnd-8.3.31-1.el10_2.ppc64le.rpm
34bed8d72c5f8d0950603feaa97a859354401b80a921e5e738283434fcf3e6f6
ppc64le
php-opcache-8.3.31-1.el10_2.ppc64le.rpm
35d14483d4dc4b06903facbc6c8503a0cc6d1bf46965f9a9e4edbf644f2d152c
ppc64le
php-process-8.3.31-1.el10_2.ppc64le.rpm
504d22b93662988c1c42d165483cb60dd3f590cd84a2ecc872259153c2e2f602
ppc64le
php-8.3.31-1.el10_2.ppc64le.rpm
69dc3fcf98dfe290ee1f0a93c14a81fd5e80537f341ec715292245fc2edc94a1
ppc64le
php-fpm-8.3.31-1.el10_2.ppc64le.rpm
6a234f601fb77632bde85e640c25431d63f36acdb61edfad2b3ba5fe43164fec
ppc64le
php-bcmath-8.3.31-1.el10_2.ppc64le.rpm
6f835f350bc58401164064e5e2595ffb9b09510103c4d14c551b004a609c6796
ppc64le
php-intl-8.3.31-1.el10_2.ppc64le.rpm
6fa62c573302cd7a2518ecf60356d63f8c6c287c9f14a00df3fd9c6927ed7008
ppc64le
php-gd-8.3.31-1.el10_2.ppc64le.rpm
729e58ec8b48713ffc0ba613b209db8ff510100290f5707b6c52afe5f554bbb5
ppc64le
php-snmp-8.3.31-1.el10_2.ppc64le.rpm
756c20f6f64f067793f9647da2f60cdb6688f7768ad27e2b7f08f9133b11c02c
ppc64le
php-xml-8.3.31-1.el10_2.ppc64le.rpm
86cccef65ee172a2c08bc8bf639296c39adca4da2facc836b680a2af75ad1fe2
ppc64le
php-ffi-8.3.31-1.el10_2.ppc64le.rpm
8940f0cb085a46cd75e9308e8dd371f6f44630c3a1e0beaaa3a390ccd64e5576
ppc64le
php-soap-8.3.31-1.el10_2.ppc64le.rpm
8bf7912bcc1700fbf2442d4c9e52a5b5d006ea0426ecb2c5c1eb161520725359
ppc64le
php-dbg-8.3.31-1.el10_2.ppc64le.rpm
8e5ccad9e6d992ec4e7f81bd7801e925eae9be793d4d94bce6226710d8120f5f
ppc64le
php-devel-8.3.31-1.el10_2.ppc64le.rpm
94fa4e99fb6008569f48c51417443f3de65cd1fc06fc1b67b18502c2e353275a
ppc64le
php-embedded-8.3.31-1.el10_2.ppc64le.rpm
99ace55da0d1fd3833c241bf9f69ed39848f2a1038371ff1baba1648becb8981
ppc64le
php-pgsql-8.3.31-1.el10_2.ppc64le.rpm
bcb7b3098d38f08485dd5eb89db5de650ba09b87f16c1ee10dc61e0dce8159d6
ppc64le
php-pdo-8.3.31-1.el10_2.ppc64le.rpm
cd10dff4b435fafe2f84ca6b6aeb358b186e12d2e965522a0bd7199ecc924299
ppc64le
php-common-8.3.31-1.el10_2.ppc64le.rpm
d45e439f7910c1d58e2da947997552d04c2cd638c78564e107ec9f162a0b052d
ppc64le
php-gmp-8.3.31-1.el10_2.ppc64le.rpm
d555a40a58e29a7322d5c793c51af88a7822e1acff1ed8302c0cede678f47d92
ppc64le
php-dba-8.3.31-1.el10_2.ppc64le.rpm
e3971b5b103a45799b4f06c09e20c7defac9c9188f0a9d9fcc16ab9bd386bfda
ppc64le
php-ldap-8.3.31-1.el10_2.ppc64le.rpm
f459f67f053f80793546bb0f8780806370842fea3d2e544ea6d3a92a67731a6a
s390x
php-dba-8.3.31-1.el10_2.s390x.rpm
0056753333df124320cfe2006623636b356a5c50a0610ccfe1e5616ff339d768
s390x
php-xml-8.3.31-1.el10_2.s390x.rpm
0667074802d37a3cd634fc1926b47647422e1de528185a1713debf52a289f1fe
s390x
php-ffi-8.3.31-1.el10_2.s390x.rpm
0cff84d0e09b07be1a6264fd4bb14d0cccf01e95f6fb52320da73f47cca27625
s390x
php-pdo-8.3.31-1.el10_2.s390x.rpm
100d7969c1da418776cdaa55a089ec4dd4c3d5690c49e41615be58915ea9ae08
s390x
php-fpm-8.3.31-1.el10_2.s390x.rpm
2c403bee1957087e8bca54e743c4f8e42b3d5524db7f63160c8b2a9d8001f0de
s390x
php-dbg-8.3.31-1.el10_2.s390x.rpm
494322081fa7ea88a0524a432982446cae334b3a43960c61f549607960fc3c55
s390x
php-cli-8.3.31-1.el10_2.s390x.rpm
53133d9088a4467f8800c72a3fee50ce248bd95ea2777ea972c08590f47a3c89
s390x
php-mbstring-8.3.31-1.el10_2.s390x.rpm
60e28803933eb2fb19e1e14bb059a0fca4fc02c22041eca3c401463274132fe6
s390x
php-devel-8.3.31-1.el10_2.s390x.rpm
62a3f87555a16454ab7b8b925d0809e8b1739b45a8caf31f1b7a50c69dcd2981
s390x
php-process-8.3.31-1.el10_2.s390x.rpm
6b0f0a2b3564118d082551822cb77c62e20f27b88db93c796eb67e3d631f571e
s390x
php-intl-8.3.31-1.el10_2.s390x.rpm
6da867976a7cb0a6226765d917d48a6c9b22f4041d6cfc50fd84c98f933f75a7
s390x
php-soap-8.3.31-1.el10_2.s390x.rpm
702d701a426ab36c72a47b9f45ab22e1e7bdc93ea6f7345be32707f309ce6cb2
s390x
php-8.3.31-1.el10_2.s390x.rpm
73a82e2b045539c4aeb05b9d33c237ea0498d2efa99cded932eff2798e5a4a64
Php Security Update — AlmaLinux 10 (ALSA-2026:23388)
ALSA-2026:23388 updates the default PHP packages on AlmaLinux 10 to 8.3.31, fixing CVE-2026-7258, CVE-2026-6735, CVE-2026-7259, CVE-2026-7262 and CVE-2026-7568 — including the ctype signed-character denial-of-service flaw. Update with dnf update php and restart PHP-FPM or Apache.
High
7.5 CVSS
AlmaLinux 10
What this means under a SharedLicense license
DoS flaws in the ctype functions are reachable by crafted input strings — the whole server's web serving can be crashed by requests that hit the vulnerable conversion path.
Frequently Asked Questions
What is ALSA-2026:23388?
It is AlmaLinux's PHP erratum for AlmaLinux 10, updating php to 8.3.31 and fixing five CVEs (CVE-2026-7258, CVE-2026-6735, CVE-2026-7259, CVE-2026-7262, CVE-2026-7568) including denial of service via improper handling of signed characters in the ctype functions.
Who is affected?
AlmaLinux 10 servers running the distribution's default PHP packages — sites served through PHP-FPM or mod_php on the system PHP.
How do I apply the fix?
Run dnf update php and restart PHP-FPM or Apache; verify with php -v reporting 8.3.31.
Why did PHP ship so many errata this cycle?
The ctype and related handling flaws affected every active PHP branch, so each distribution package line (8.2, 8.3, 8.4 and legacy) received its own erratum — update all PHP versions installed on the server.
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System