Red Hat Product Errata RHSA-2026:56969 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:56969 - Security Advisory Overview Updated Packages Synopsis Important: php8.4 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for php8.4 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. Security Fix(es): php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543) php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544) Bug Fix(es) and Enhancement(s): Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:RHEL-223949) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2509254 - CVE-2026-17543 php: ext-pgsql: PHP: SQL injection via improper backslash escaping BZ - 2509256 - CVE-2026-17544 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() RHEL-223949 - Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z CVEs CVE-2026-17543 CVE-2026-17544 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM php8.4-8.4.24-1.el10_2.src.rpm SHA-256: 02fdc22d0723d6c6e24652ff3177c9ccf3cc7b27928c145ab8ff815a2817a1ba x86_64 php8.4-8.4.24-1.el10_2.x86_64.rpm SHA-256: 83de5ae95c8f21e677bfbe164c52acac1512d05abb8c2501c50e87f2ac81e07c php8.4-bcmath-8.4.24-1.el10_2.x86_64.rpm SHA-256: 49881acf17fb78e00cf1b02c27b7b25706dfe51aab12138d06c11d9928e36321 php8.4-bcmath-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: c07481efaf0402bfea24affc22472cccae4058c0cedef2fca24b220c04758f27 php8.4-cli-8.4.24-1.el10_2.x86_64.rpm SHA-256: 89dc35b4929d33f51c379a7f7dee1055bd1cb9b4e7b3de840ba743e837c9e09a php8.4-cli-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: d068598c997cf28e85f58a8d34e8eab86e573c5e7eefdbe48d7fb7dc47f57d2c php8.4-common-8.4.24-1.el10_2.x86_64.rpm SHA-256: 9556a71c45083fab428bce48d01a6ccfa0b7877d4dd60c1acef7de790b1a588e php8.4-common-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 7ce4f71092934cb00913edd1d440880f3804a9cae17a7ceea3cb62511654719b php8.4-dba-8.4.24-1.el10_2.x86_64.rpm SHA-256: d8c52ad73caa3591c538d6a6ae0a3273fa3fe82dec64102da8cac11f4ca417b5 php8.4-dba-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 298188baad75fde04f815e5e616167ba178cd584d5e142f3741b59d44e9238ee php8.4-dbg-8.4.24-1.el10_2.x86_64.rpm SHA-256: bfaf250af7702d54f77f296b4383a49d361a8b543ee52ec5635589954fe7dd35 php8.4-dbg-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: bc097cb485a80116a734d1e1f936baaf66ca92a8c6974c6777189df3c34dd3c3 php8.4-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 5a2cc115a603d84840e241deaa879751a595b2036d3091cca02577288d3a2d61 php8.4-debugsource-8.4.24-1.el10_2.x86_64.rpm SHA-256: b5a57109ca440c65feb009facde1b2925776119c128a79c67f57853800d20957 php8.4-devel-8.4.24-1.el10_2.x86_64.rpm SHA-256: ee3b5960a1a0de0bdcd9c5579778a48f0a3b66bc9327c4ba74560b607ffa17d3 php8.4-embedded-8.4.24-1.el10_2.x86_64.rpm SHA-256: 1f6d9e8d66e755f307bf294b23cdf9c3277d7a1d2186b181e3d21af0c67d90fe php8.4-embedded-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 521c42252069941a5479df1bffd7c41b2ada355a3bb5646ac247b232f860bff6 php8.4-enchant-8.4.24-1.el10_2.x86_64.rpm SHA-256: d65b9890998a28f930a308ae0ff66b6236f440fdde208f087b44efb0f595f77c php8.4-enchant-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 505b04229a0dafea5345552df9cef062d9c35e179346ef8b32f0a9359d402293 php8.4-ffi-8.4.24-1.el10_2.x86_64.rpm SHA-256: 6255d9df84e89af1c1825c2394f66103fffd555e8d536fcbb2aebcdc236f85ff php8.4-ffi-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 67a3846c7070e16bc7451dd4cdd959132a6ae8cec7c77c82b8b1a80c345cff34 php8.4-fpm-8.4.24-1.el10_2.x86_64.rpm SHA-256: 283d1992574201c1251488035c4105963762833f792851ad7d52a790201024f8 php8.4-fpm-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: bfefda466ba85a9ee6a423f3a7f496aad5c7a8681ec1971315ca2fa3180cbf9a php8.4-gd-8.4.24-1.el10_2.x86_64.rpm SHA-256: 68af99478a4f7bb9ca5748b2ce1b47cc9773eb88536d018fb73516f0b36babd3 php8.4-gd-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 6e1a93059d9aceac4bae21d0c63c92518091c06ab4c579ec2c0d97c2ff634729 php8.4-gmp-8.4.24-1.el10_2.x86_64.rpm SHA-256: d239c8acf2c0b350c01fbd779cdf9d82948f308c20de503b387801b82f3b3daf php8.4-gmp-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: e37ef3eafb10e3ac35a923c38a3b8f9411840c03e96280fe785b057dce6763ce php8.4-intl-8.4.24-1.el10_2.x86_64.rpm SHA-256: 13a8cb30e031eac88bf4cbd7ab425aeda2533899174ab85025239c8680ac4294 php8.4-intl-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: e4088002129290d1b8b2cbaa417bc3229efd9dc4b3cd3cdc1076a6e809f2b4c2 php8.4-ldap-8.4.24-1.el10_2.x86_64.rpm SHA-256: 5b5c88976b79b120d67362a78fafea2b1e0d5b1cb5af379ad47a2c479dbd9105 php8.4-ldap-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 2470b68aa6cb7d235637b163c1a1fd1742bb9c87e28e9adb017d992ecc0ee050 php8.4-mbstring-8.4.24-1.el10_2.x86_64.rpm SHA-256: 6252b2561505b023daf5b84ffee536c027ba4acab176d5680ad59550bec48bde php8.4-mbstring-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 3379807f055ee70a5512a02104c1aa84c0de31447423c6e970580afc23ae6514 php8.4-mysqlnd-8.4.24-1.el10_2.x86_64.rpm SHA-256: 6042e23688d129718e7c13cbffbbbd461ab8add635396f19b036d7f2e4021c1d php8.4-mysqlnd-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 07c1a116c3d7eaf5bc4de8735aa3c1205638ab4712d3b8b912c0d582b0f6532a php8.4-odbc-8.4.24-1.el10_2.x86_64.rpm SHA-256: 5d28056c754b8d4089634cc60b2515c73f52d3df8281ac0d847bc70a2cf0378a php8.4-odbc-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 27a8fdb886c092465ae7a45a8d4bdb732c9aed1392637947f8d1e8b5d25ce30f php8.4-opcache-8.4.24-1.el10_2.x86_64.rpm SHA-256: 6530282728be93593dcf1999b80cc60762353485d28432a65bc90f643301cc93 php8.4-opcache-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 835be44b30a5057ff14684a39233d8c5e454b41b751af3dccc0180fc88bbb19d php8.4-pdo-8.4.24-1.el10_2.x86_64.rpm SHA-256: c1ebefe706944a384b19e72adc7f7f09c25e70d638fd714a74f2109b4d4b7b84 php8.4-pdo-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: d75eae8840eb9167e675e8b87db5d5b8a729626e0ab3c42f5b0505c910bd21df php8.4-pgsql-8.4.24-1.el10_2.x86_64.rpm SHA-256: 3e1731dda65c24f0e139abe641ba89975d84f7c4739175b0f2e783d7183592c7 php8.4-pgsql-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 2a452f167e36a1ef2c056935ce3778e415a2278f11651a1dfb7a110ab2076b04 php8.4-process-8.4.24-1.el10_2.x86_64.rpm SHA-256: 08be81e906eb4b644a5bde9d64f53fe5a363f9368e255d87e85d55d77b77870c php8.4-process-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 5a9ea27f620469315c058a5380dce0e099f4a736937bfbc1cf984857a778a8e5 php8.4-snmp-8.4.24-1.el10_2.x86_64.rpm SHA-256: 200f2ecdb8916cc98423e12168219283f8f1e6c5c132fe9902b1ee71fe5662db php8.4-snmp-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: f678162e4293c2f93eaae8c038688adb0cf802b25782a325e9dc4af50e711242 php8.4-soap-8.4.24-1.el10_2.x86_64.rpm SHA-256: 4ef2c37151cd265a8ec21a30e84c7764b3d1fc4005421691f8812cfa228f2ae8 php8.4-soap-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: 162a4520c159424cf9e46489b0422f08f7baf94b8daad1ec1950fe37fa3736c1 php8.4-xml-8.4.24-1.el10_2.x86_64.rpm SHA-256: a99c0d1433e6e8cb6a3a2d91388c2cea8dc3dc2e336d6086e17c9a2ee8f2398e php8.4-xml-debuginfo-8.4.24-1.el10_2.x86_64.rpm SHA-256: cc976ee89aa5a2e8a83c9f6382f2ad09e43b7d280b418dc93c1ebbc78910682b Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM php8.4-8.4.24-1.el10_2.src.rpm SHA-256: 02fdc22d0723d6c6e24652ff3177c9ccf3cc7b27928c145ab8ff815a2817a1ba x86_64 php8.4-8.4.24-1.el10_2.x86_64.rpm SHA-256: 83de5ae95c8f21e677bfbe164c52acac1512d05abb8c2501c50e87f2ac81e07c php8.4-bcmath-8.4.24-1.el10_2.x86_64.rpm SHA-256: 49881acf17fb78e00cf1b02c27b7b25706dfe51aab12138d06c11d9928e36321 php8.4-bcmath-debuginfo-8.4.24-1.el10_2.x86_6