Güvenlik Danışarlıklarına Dön

Php:8.2 Security Update — AlmaLinux 8 (ALSA-2026:22305)

ALSA-2026:22305 updates PHP 8.2 on AlmaLinux 8 to 8.2.31, fixing CVE-2026-7258, CVE-2026-6735, CVE-2026-7262 and CVE-2026-7568 — including the ctype signed-character denial-of-service flaw (CWE-125 out-of-bounds read class), aggregate CVSS 7.5. Update with dnf update php and restart PHP-FPM.

High 7.5 CVSS
AlmaLinux 8

Etkilenen Sürümler

8.2

SharedLicense lisansı altında bunun anlamı

DoS flaws in core PHP functions are reachable by crafted input strings — the whole server's web serving can be crashed by requests hitting the vulnerable path.

aarch64 php-mysqlnd-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 00fd68ac000637290b73fbb6cfdbf96a7212b033a9816416b70c0bd44e6a8f3e aarch64 php-common-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 1b9f9ea4462e29313b953351c0daa5156279d8ef6402b3a7ffc22867c3e0bf9d aarch64 php-devel-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 2a6e17ba09274b90dd586465d333c325089a20c03fda99a6e372b5f5e569d37e aarch64 php-gd-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 32d95836ac1e41a85a676c9473084265b1e494c81c4acddee8da14d79ad339ee aarch64 php-process-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 33bb89d766c11f295da1f1e4018adc3ea8245eb776a26c41e79b0d43fbc09617 aarch64 libzip-devel-1.7.3-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm 4659d0d75099132a0dc7f1611fa6164e3575e5de4f63719e73ad415d987f1834 aarch64 php-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 473ef3a4b4e388bc1fced5a8e19d67eb88380a65fb0d05a917df1777d70ce656 aarch64 php-soap-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 4a2cb3687a97bdd6d913466298c2c4598bfc00450f18c86a5e0ddfe85c8b02df aarch64 php-bcmath-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 5d53da8933ffd677ca9efd3e00b67e830511a70d7ed9ad0680ea459c88507656 aarch64 libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm 6eb88e04e5020252650bcb17fc5767a597ebc4befda5f3ad0dcf6d36d542496b aarch64 php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm 6f0586feba1a03f6844de267c34fc12773c68c9c70181ff0e8252f90fa555d36 aarch64 php-ffi-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 8660cc822e133447cd66a1ba52b9d99d0ce6f8eae6d30b50e2d46c3ee4dea3a0 aarch64 php-pecl-rrd-2.0.3-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm 8d88dac99501ad9194e9815e2c056f57ba1181df01e70763c8ee643aa1b0a483 aarch64 php-pdo-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 90d2bf6d0319d0813b5532cd942df6f797edfeafc583037fafd381942aa936ce aarch64 php-odbc-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 9272ffd3b4dcc30a64bae0126dbb10630966aa5c4067ce2594693fc6cf6dd77e aarch64 php-fpm-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm 9a991240a305a34b87429866b6db784842e50016dab11610bdbf3f495dcafde2 aarch64 php-opcache-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm a0c4087e9b7ff9fec4c119baf7abde6efa21374f0b1e992c0ab98427ec074aa0 aarch64 php-mbstring-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm ac105bb0b7e2d50ccef31a69600d7ab4813abb386a0328d68db778c97166db20 aarch64 php-gmp-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm b5bb8a29da281b9ebf1de84bd47bfa26ccf6bf69e3c336ed2fa19fe4a0c3b546 aarch64 php-snmp-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm bacca767a3478f347d883995b4ff35f2e11f2c2925fd430f2ab1107698b753af aarch64 php-pgsql-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm c0dde83a3bb42ed70ae697d3bc2533ef6274688af01b57b6034e66daa33e2972 aarch64 php-pecl-apcu-devel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm ca0f7094158bcf545a12fb01c3e329fb04976fc793a25020d2c1c72a0c939e71 aarch64 php-cli-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm d77fcaca2d8bb27b9e3d72c269f1b0132db9b1429e4bd988ec247e33bc484b3a aarch64 php-embedded-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm d78513f644bfc5528648b65852789eedd6cadf7ec8ded9319d25ce94ad998227 aarch64 php-enchant-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm da6cb69703f1ee1765842965e949952c5c873164e18309100fcecadccfe81541 aarch64 php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm e35017dbe521bef61c0cb5664d7a126ea5b44e033a97c1c26aba7650768219bf aarch64 php-ldap-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm e58b0d81c1038fab58a574bed3401d4b42d1903a096bd793961a4592c3cc3994 aarch64 php-dbg-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm e61f7834326e9ff68639502a43f88519645c178ee897582b4e816b3be0e4e3eb aarch64 php-xml-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm ed425c11f322eda184aac679e571236fac7e3fb1d17d44f1ced0e1a253519919 aarch64 php-dba-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm f18064233a534ddb158d57dbebde292f97493748a5e5dc4ce965e578a70788a5 aarch64 php-intl-8.2.31-1.module_el8.10.0+4189+0784d4cc.aarch64.rpm f2de815b1abcdc6515c408a9bb94127814c28ae8cfeb2d30a9019d64ba78c9ee aarch64 php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.aarch64.rpm f43bc8ad37f4de54f936bdd93de6d402c36528067c53b5fad728ee93e8573c3b aarch64 libzip-tools-1.7.3-1.module_el8.10.0+3796+30ed3ef7.aarch64.rpm fbcdd90060d231e952da71b8b186c481ec0e2be4708c18a797ff8f2406f56153 noarch apcu-panel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm 1deada493d8257042f0097d5ac685473d9995b4500854e4c6a0e2ac9a175fa04 noarch php-pear-1.10.14-1.module_el8.10.0+3796+30ed3ef7.noarch.rpm b77d08e8c3d38704e98139a7653cc3657d21f49aed4c245f85193ad875e74825 ppc64le php-devel-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 0fbfb5d295f2dbe3800f6dde7fd03b54e8c42e7f37198570d6d584a66c5102ef ppc64le php-bcmath-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 1806c988730bdfa615fbcf1242c0960ceae23bc17e43835896e6cb8c7a853750 ppc64le php-dba-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 1c82442df27ea293fae524788bf88632604e26962614992bd1e15c57cbdce9a4 ppc64le php-embedded-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 22538a63e5f51a3fbaab82881d99810f5ccde97989edc4ca65ce3081656e74c9 ppc64le php-pecl-zip-1.22.3-1.module_el8.10.0+3796+30ed3ef7.ppc64le.rpm 294f340db27e94599ef24c786d459260b1bb548f1d98b83b4daabf72e538255b ppc64le php-soap-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 3f9d75db8bada5428072d3f34635d498bb8576fd34cc489db7d9453088a73b48 ppc64le php-pecl-apcu-devel-5.1.23-1.module_el8.10.0+3796+30ed3ef7.ppc64le.rpm 4f0417a60b29882140144cc1dbdaaa753150e0e73c8808ccc0adb94f51a213fb ppc64le php-fpm-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 52c66f7723a49c5ce8c202269fd51d4989f83d6068e2746e7ca90f0556e27489 ppc64le libzip-tools-1.7.3-1.module_el8.10.0+3796+30ed3ef7.ppc64le.rpm 53eac77dff94952019a691e1400d4156529d2bd6dd51df34289ee7e54806c096 ppc64le php-opcache-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 57fd29c7f62f734f4542895a2ddcc0fc24825e4469013533cea3af81215fcde1 ppc64le php-gd-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 618f8422675d64dc8873febe312ac41729c8c0b7452574b834a5767765157949 ppc64le php-ffi-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 676292b1681b8a567e997cbf5663dd943cbda490ceeb4cd4e3ad158f9fd4a765 ppc64le libzip-1.7.3-1.module_el8.10.0+3796+30ed3ef7.ppc64le.rpm 6fe1a8cb1d4f934c04410be578d15f2a08b308db14cc02a82796772281f902db ppc64le php-pecl-xdebug3-3.2.2-2.module_el8.10.0+3796+30ed3ef7.ppc64le.rpm 79e5744a5de5e176e1ae7bc519213baebf383477c53143a88c586fae8108c64f ppc64le php-enchant-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 7a1fd19b3e7e546d90f9e9a7d1c9572b8479be32ad1be23c8c2b26bd68fea67a ppc64le php-pecl-apcu-5.1.23-1.module_el8.10.0+3796+30ed3ef7.ppc64le.rpm 81fabdd0551bfc3930ec000dfd71d756e00104afad14dee9e4541ee305d89a1b ppc64le php-odbc-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 844cdaa85e12f07fc64b9836568509d84d73b469fb5cd987d10fd66d20ff271d ppc64le php-mysqlnd-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 878cf1d8d6339f418f7be27b0ce81264d54fe8417177f7a4ee0cd2f0b5b18726 ppc64le php-xml-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 8915f38cbfd747f02d92cba6f094d6a82167c1c116accfa256733202aed51da5 ppc64le php-gmp-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 8e5eda78a56ee52e1f5cf7f7eaf048928185570ddab4c612c2ef2ca185d584a4 ppc64le php-ldap-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 8f0abc4892737d33ff4f75280e13398fdc05519222b360e474591eab30e8eb48 ppc64le php-intl-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 91e58a9350cf051aa695cc66ae42e1d73da9613d14d02c1e31c34f55587d50d1 ppc64le php-process-8.2.31-1.module_el8.10.0+4189+0784d4cc.ppc64le.rpm 95014ab465ce4d7d66e355b0e4f32e578b6018f6b5f9597a950ced6188743afc

Sıkça Sorulan Sorular

What is ALSA-2026:22305?
It is AlmaLinux's PHP 8.2 erratum for AlmaLinux 8, updating php to 8.2.31 and fixing CVE-2026-7258, CVE-2026-6735, CVE-2026-7262 and CVE-2026-7568 — including denial of service via improper handling of signed characters in the ctype functions. Aggregate CVSS 7.5 (CWE-125).
Who is affected?
AlmaLinux 8 servers running PHP 8.2 from the distribution packages — legacy PHP applications pinned to the 8.2 branch.
How do I apply the fix?
Run dnf update php (within the 8.2 module stream) and restart PHP-FPM; verify with php -v reporting 8.2.31.
Should I upgrade from PHP 8.2 to a newer branch instead?
Eventually — 8.2 is nearing its supported horizon. But apply this security erratum now regardless; branch upgrades are planned work, this is a patch.

Referanslar

Güvenlik Danışarlıkları

İlgili Danışarlıklar

Qt5-Qtdeclarative Security Update — AlmaLinux 8 (ALSA-2026:96075)

2026-11-10

Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:96080)

2026-11-09

Util-Linux Security Update — AlmaLinux 8 (ALSA-2026:96212)

2026-11-09

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin