Вернуться к предупреждениям о безопасности

Php Security Update — AlmaLinux 10 (ALSA-2026:23388)

ALSA-2026:23388 updates the default PHP packages on AlmaLinux 10 to 8.3.31, fixing CVE-2026-7258, CVE-2026-6735, CVE-2026-7259, CVE-2026-7262 and CVE-2026-7568 — including the ctype signed-character denial-of-service flaw. Update with dnf update php and restart PHP-FPM or Apache.

High 7.5 CVSS
AlmaLinux 10

Что это значит по лицензии SharedLicense

DoS flaws in the ctype functions are reachable by crafted input strings — the whole server's web serving can be crashed by requests that hit the vulnerable conversion path.

aarch64 php-odbc-8.3.31-1.el10_2.aarch64.rpm 02ebbe4ec73281b96ae3e8fbf609832e15f5ad5f8f0783d013b691a41fc12691 aarch64 php-ffi-8.3.31-1.el10_2.aarch64.rpm 2637876b33b6a8ec385adf5851cf5cb15c58bd625f821920271d25bbf3d49343 aarch64 php-pdo-8.3.31-1.el10_2.aarch64.rpm 268c00c3becf4ccd3e2e4cc7753908c0c2db5f195bc692804e5bd23c0a97cfe7 aarch64 php-gd-8.3.31-1.el10_2.aarch64.rpm 38481bcce41b02096ee9961e51c3ac43a35a0656b042eeeb77f7c124eb58a306 aarch64 php-snmp-8.3.31-1.el10_2.aarch64.rpm 397b81ba53053c882d463abb45d67da0bb9a341d0b32cc2ee04d32ff8dc1fdc7 aarch64 php-embedded-8.3.31-1.el10_2.aarch64.rpm 39a668203a62865cecb5953d4d5701da6dffdd6991fea6be2172e963bbdb75ea aarch64 php-ldap-8.3.31-1.el10_2.aarch64.rpm 41156a053bacdccdef252d74ffc583e8e1e088e2e42a5c82a6871d445872266b aarch64 php-intl-8.3.31-1.el10_2.aarch64.rpm 4d3d56cc3076a6d2bfbb76dbbea9efe1fa0ed4fb3ffb180412a7a74922d73631 aarch64 php-dba-8.3.31-1.el10_2.aarch64.rpm 5b3477015d21aed4ac24b114eff0f5bb98ed9383c582532ce2fa07c641859ecb aarch64 php-opcache-8.3.31-1.el10_2.aarch64.rpm 5d957b653d98a0c68819a4221d99fc612fe6d9f64741078f6bcd13af6cc1e15f aarch64 php-dbg-8.3.31-1.el10_2.aarch64.rpm 60560ded871026142fce67b6f9c5dc42feafb8353cbe0c8f5cf22d60dfb50d30 aarch64 php-8.3.31-1.el10_2.aarch64.rpm 667dcc6a92ac2b64bb459d91448883197851f31fb91a343d40e4b581d29a02e8 aarch64 php-bcmath-8.3.31-1.el10_2.aarch64.rpm 78fd6ec53225944acdcabf99575f5f8d730c9788fb27ce64e3c0481d5d580895 aarch64 php-mbstring-8.3.31-1.el10_2.aarch64.rpm 7fe6c46f54b3f32ea2c1c6bfa6873786993d4b8c56b8f8d5df9e0a7d54710187 aarch64 php-fpm-8.3.31-1.el10_2.aarch64.rpm 8fa3a6de488b524d6fe1a051a404c40ecbf81bc9253d46e85fb48543b2ccb61d aarch64 php-pgsql-8.3.31-1.el10_2.aarch64.rpm a3284f6cc4a0ed0157fc6299922a1eb584b83eb5d1bba0bc4d6b1afe5e61d9fe aarch64 php-common-8.3.31-1.el10_2.aarch64.rpm b15f937ef3f3f4bec77b9e736c36e4614d24d729f6575e8153d147eec80b2ac0 aarch64 php-soap-8.3.31-1.el10_2.aarch64.rpm befa3174cde96717a64ec7e8b9c465d44e1c9f727ba258ffb9124f2606128f55 aarch64 php-xml-8.3.31-1.el10_2.aarch64.rpm c3e9a48470c4f4d626fa544129034e8c178340c56f5d2c69907f897a1b227510 aarch64 php-enchant-8.3.31-1.el10_2.aarch64.rpm c650e35423c1d0ed797e5586c465c9d4d2813fb82d505d396a664964f6c96f1b aarch64 php-process-8.3.31-1.el10_2.aarch64.rpm ca14bc5636b866cb6cbce9ee355a0d092eb2e4f68687692fc4f1927966a51d74 aarch64 php-devel-8.3.31-1.el10_2.aarch64.rpm d1a864f40ec1f364fe8ff6836221e4d810a31cdc8ce9297efece05544253492e aarch64 php-gmp-8.3.31-1.el10_2.aarch64.rpm e1c6fc1297930be82a91506dceecaeacf42cd556d64768ac620aa33e4251c7ff aarch64 php-mysqlnd-8.3.31-1.el10_2.aarch64.rpm ef2578dfae09346b86789c6be766c3154c91c72f8f47582bf98e80cbdde23cfd aarch64 php-cli-8.3.31-1.el10_2.aarch64.rpm f9e9ae25888e30151cfcdac82deed1b7e024d4c311dd09691a5fb80c4810dbf3 ppc64le php-enchant-8.3.31-1.el10_2.ppc64le.rpm 0092272e9cb56a22858b187728c47bf887e2b2171b858bdf60e5d98f25c632ef ppc64le php-odbc-8.3.31-1.el10_2.ppc64le.rpm 0951c0fc0353686c1efb5728c56d3f3d94c95d8cd07493a7c6f587bf3fac941e ppc64le php-cli-8.3.31-1.el10_2.ppc64le.rpm 1e2ab806de8899b17509c919cea5135f3a56f17bd4ae38b188ded45f90c786a9 ppc64le php-mbstring-8.3.31-1.el10_2.ppc64le.rpm 1eb62a753fdc440a97907c7a3a72e075f21026205a793d9c93a6b2e74055ca46 ppc64le php-mysqlnd-8.3.31-1.el10_2.ppc64le.rpm 34bed8d72c5f8d0950603feaa97a859354401b80a921e5e738283434fcf3e6f6 ppc64le php-opcache-8.3.31-1.el10_2.ppc64le.rpm 35d14483d4dc4b06903facbc6c8503a0cc6d1bf46965f9a9e4edbf644f2d152c ppc64le php-process-8.3.31-1.el10_2.ppc64le.rpm 504d22b93662988c1c42d165483cb60dd3f590cd84a2ecc872259153c2e2f602 ppc64le php-8.3.31-1.el10_2.ppc64le.rpm 69dc3fcf98dfe290ee1f0a93c14a81fd5e80537f341ec715292245fc2edc94a1 ppc64le php-fpm-8.3.31-1.el10_2.ppc64le.rpm 6a234f601fb77632bde85e640c25431d63f36acdb61edfad2b3ba5fe43164fec ppc64le php-bcmath-8.3.31-1.el10_2.ppc64le.rpm 6f835f350bc58401164064e5e2595ffb9b09510103c4d14c551b004a609c6796 ppc64le php-intl-8.3.31-1.el10_2.ppc64le.rpm 6fa62c573302cd7a2518ecf60356d63f8c6c287c9f14a00df3fd9c6927ed7008 ppc64le php-gd-8.3.31-1.el10_2.ppc64le.rpm 729e58ec8b48713ffc0ba613b209db8ff510100290f5707b6c52afe5f554bbb5 ppc64le php-snmp-8.3.31-1.el10_2.ppc64le.rpm 756c20f6f64f067793f9647da2f60cdb6688f7768ad27e2b7f08f9133b11c02c ppc64le php-xml-8.3.31-1.el10_2.ppc64le.rpm 86cccef65ee172a2c08bc8bf639296c39adca4da2facc836b680a2af75ad1fe2 ppc64le php-ffi-8.3.31-1.el10_2.ppc64le.rpm 8940f0cb085a46cd75e9308e8dd371f6f44630c3a1e0beaaa3a390ccd64e5576 ppc64le php-soap-8.3.31-1.el10_2.ppc64le.rpm 8bf7912bcc1700fbf2442d4c9e52a5b5d006ea0426ecb2c5c1eb161520725359 ppc64le php-dbg-8.3.31-1.el10_2.ppc64le.rpm 8e5ccad9e6d992ec4e7f81bd7801e925eae9be793d4d94bce6226710d8120f5f ppc64le php-devel-8.3.31-1.el10_2.ppc64le.rpm 94fa4e99fb6008569f48c51417443f3de65cd1fc06fc1b67b18502c2e353275a ppc64le php-embedded-8.3.31-1.el10_2.ppc64le.rpm 99ace55da0d1fd3833c241bf9f69ed39848f2a1038371ff1baba1648becb8981 ppc64le php-pgsql-8.3.31-1.el10_2.ppc64le.rpm bcb7b3098d38f08485dd5eb89db5de650ba09b87f16c1ee10dc61e0dce8159d6 ppc64le php-pdo-8.3.31-1.el10_2.ppc64le.rpm cd10dff4b435fafe2f84ca6b6aeb358b186e12d2e965522a0bd7199ecc924299 ppc64le php-common-8.3.31-1.el10_2.ppc64le.rpm d45e439f7910c1d58e2da947997552d04c2cd638c78564e107ec9f162a0b052d ppc64le php-gmp-8.3.31-1.el10_2.ppc64le.rpm d555a40a58e29a7322d5c793c51af88a7822e1acff1ed8302c0cede678f47d92 ppc64le php-dba-8.3.31-1.el10_2.ppc64le.rpm e3971b5b103a45799b4f06c09e20c7defac9c9188f0a9d9fcc16ab9bd386bfda ppc64le php-ldap-8.3.31-1.el10_2.ppc64le.rpm f459f67f053f80793546bb0f8780806370842fea3d2e544ea6d3a92a67731a6a s390x php-dba-8.3.31-1.el10_2.s390x.rpm 0056753333df124320cfe2006623636b356a5c50a0610ccfe1e5616ff339d768 s390x php-xml-8.3.31-1.el10_2.s390x.rpm 0667074802d37a3cd634fc1926b47647422e1de528185a1713debf52a289f1fe s390x php-ffi-8.3.31-1.el10_2.s390x.rpm 0cff84d0e09b07be1a6264fd4bb14d0cccf01e95f6fb52320da73f47cca27625 s390x php-pdo-8.3.31-1.el10_2.s390x.rpm 100d7969c1da418776cdaa55a089ec4dd4c3d5690c49e41615be58915ea9ae08 s390x php-fpm-8.3.31-1.el10_2.s390x.rpm 2c403bee1957087e8bca54e743c4f8e42b3d5524db7f63160c8b2a9d8001f0de s390x php-dbg-8.3.31-1.el10_2.s390x.rpm 494322081fa7ea88a0524a432982446cae334b3a43960c61f549607960fc3c55 s390x php-cli-8.3.31-1.el10_2.s390x.rpm 53133d9088a4467f8800c72a3fee50ce248bd95ea2777ea972c08590f47a3c89 s390x php-mbstring-8.3.31-1.el10_2.s390x.rpm 60e28803933eb2fb19e1e14bb059a0fca4fc02c22041eca3c401463274132fe6 s390x php-devel-8.3.31-1.el10_2.s390x.rpm 62a3f87555a16454ab7b8b925d0809e8b1739b45a8caf31f1b7a50c69dcd2981 s390x php-process-8.3.31-1.el10_2.s390x.rpm 6b0f0a2b3564118d082551822cb77c62e20f27b88db93c796eb67e3d631f571e s390x php-intl-8.3.31-1.el10_2.s390x.rpm 6da867976a7cb0a6226765d917d48a6c9b22f4041d6cfc50fd84c98f933f75a7 s390x php-soap-8.3.31-1.el10_2.s390x.rpm 702d701a426ab36c72a47b9f45ab22e1e7bdc93ea6f7345be32707f309ce6cb2 s390x php-8.3.31-1.el10_2.s390x.rpm 73a82e2b045539c4aeb05b9d33c237ea0498d2efa99cded932eff2798e5a4a64

Часто задаваемые вопросы

What is ALSA-2026:23388?
It is AlmaLinux's PHP erratum for AlmaLinux 10, updating php to 8.3.31 and fixing five CVEs (CVE-2026-7258, CVE-2026-6735, CVE-2026-7259, CVE-2026-7262, CVE-2026-7568) including denial of service via improper handling of signed characters in the ctype functions.
Who is affected?
AlmaLinux 10 servers running the distribution's default PHP packages — sites served through PHP-FPM or mod_php on the system PHP.
How do I apply the fix?
Run dnf update php and restart PHP-FPM or Apache; verify with php -v reporting 8.3.31.
Why did PHP ship so many errata this cycle?
The ctype and related handling flaws affected every active PHP branch, so each distribution package line (8.2, 8.3, 8.4 and legacy) received its own erratum — update all PHP versions installed on the server.

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему