Stay Connected:

ELSA-2026-87151

ELSA-2026-87151 - php security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-21

Description


[8.0.30-8.1]
- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
CVE-2026-91768
- Fix Various packet overreads in mysqlnd wire protocol
CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
CVE-2026-93682
- Avoid state corruption via bailout
CVE-2026-109618, CVE-2026-109619


Related CVEs


CVE-2026-109618
CVE-2026-109619
CVE-2026-91765

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) php-8.0.30-8.el9_8.1.src.rpma1a1354757e1bf9ffdf29032d6ab313e5b2e689521828fffa55c1bab5dbf226e-ol9_aarch64_appstream
php-8.0.30-8.el9_8.1.aarch64.rpmb44485110b54657add413721882d62552afd2812dbf04a02549699ffc18613fb-ol9_aarch64_appstream
php-bcmath-8.0.30-8.el9_8.1.aarch64.rpm6c2c5b873e178af7ba3b23c228073ec685ce6c4df7e88245cdb7733472171037-ol9_aarch64_appstream
php-cli-8.0.30-8.el9_8.1.aarch64.rpm3272eb6cc95409016f852842847fd782fbcb41570199c59237d02b82b3472f89-ol9_aarch64_appstream
php-common-8.0.30-8.el9_8.1.aarch64.rpm92c8366835d5971e03a19985197585e7647fcd98899d55c38b3bfbe820115576-ol9_aarch64_appstream
php-dba-8.0.30-8.el9_8.1.aarch64.rpmf78280b467e1dc1d44a4369faeba16a14d6c66f0fec5036639612f1c485128ac-ol9_aarch64_appstream
php-dbg-8.0.30-8.el9_8.1.aarch64.rpm470ef5f6534eef1c217d83777b4c9f6df82d477c4c0e7f34619c965cc8e30836-ol9_aarch64_appstream
php-devel-8.0.30-8.el9_8.1.aarch64.rpm4821846e2bcf4f55a8d5548e6e616a28d7cfa7ff319bb445de8945b743222b79-ol9_aarch64_appstream
php-embedded-8.0.30-8.el9_8.1.aarch64.rpm35ee93c9a07a77de3caabebe8108fd000d4b37aea3d42d54a298e3ca3f3d9676-ol9_aarch64_appstream
php-enchant-8.0.30-8.el9_8.1.aarch64.rpm9ce13551b5c7afba80e3ddfc7a204bcf9d3e3c94a497872af057834aa812811f-ol9_aarch64_appstream
php-ffi-8.0.30-8.el9_8.1.aarch64.rpm3d862aaf32eba617362b8108338dbe7c705551b41750fc646dea7564fdedda6c-ol9_aarch64_appstream
php-fpm-8.0.30-8.el9_8.1.aarch64.rpmd9aa1bf8e622222e6d2dc9924e87cefbfaec507673eff1086856b699cf19a28e-ol9_aarch64_appstream
php-gd-8.0.30-8.el9_8.1.aarch64.rpm71f79d94166bd75315ad57d0ea0e2e21200dcc09f7d62deb234f3ad82d35c7b6-ol9_aarch64_appstream
php-gmp-8.0.30-8.el9_8.1.aarch64.rpm845c61065c0fcd0e0381151ce14a38ab53992626a7ef4c988b8318218e8f8037-ol9_aarch64_appstream
php-intl-8.0.30-8.el9_8.1.aarch64.rpm4935854ee433efd6eaeafa7a14d7691686f600e96354112a5eac935690259af4-ol9_aarch64_appstream
php-ldap-8.0.30-8.el9_8.1.aarch64.rpm2c2d310746fc472365a964a91764d7e1565375d1b5e1d9fabbf131f6a9c2758a-ol9_aarch64_appstream
php-mbstring-8.0.30-8.el9_8.1.aarch64.rpmc06bac1a4a6ee7f8e4f2cafa3cf15eb06ecf6004467de62de89a467ddb8a3810-ol9_aarch64_appstream
php-mysqlnd-8.0.30-8.el9_8.1.aarch64.rpm7f2fc950700d221dc6b79fb441d96b4d2006894c693fd3dfb5c4d09a1456603c-ol9_aarch64_appstream
php-odbc-8.0.30-8.el9_8.1.aarch64.rpm10a008c64dcfa648a741eed1528b0128264e5084afc1b996f40b1ac6d54d0379-ol9_aarch64_appstream
php-opcache-8.0.30-8.el9_8.1.aarch64.rpmc3fede45b86d1c1562f9b9d93f770480e1a5b3d4fd7c3c43512483fd400fbdd4-ol9_aarch64_appstream
php-pdo-8.0.30-8.el9_8.1.aarch64.rpmdb28a69c69e7754d448ce3d70ed3304c1df134c41adf3aea154f3213fa9302d2-ol9_aarch64_appstream
php-pgsql-8.0.30-8.el9_8.1.aarch64.rpm060c2e9281cadc8e3e3a1b6f5fa25559098fa2915df79dd7aa05ac37ebb50fcc-ol9_aarch64_appstream
php-process-8.0.30-8.el9_8.1.aarch64.rpm078e9a9c835e8af89466e0001f1831fcb691607fc65a8a77026582e0ab382ee0-ol9_aarch64_appstream
php-snmp-8.0.30-8.el9_8.1.aarch64.rpmad3a85beb8788ebe8d0b656cab1913fda88081ee9544b5e719e162569acc44df-ol9_aarch64_appstream
php-soap-8.0.30-8.el9_8.1.aarch64.rpm26f3cdd0d59046942070af0a30c66229b4d02684ab6020ece79dc3efd918e8cd-ol9_aarch64_appstream
php-xml-8.0.30-8.el9_8.1.aarch64.rpm2698b09bee3e51ad78e5cb9c634d0e8724e03b4e14a47e52aa24095e84320467-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) php-8.0.30-8.el9_8.1.src.rpma1a1354757e1bf9ffdf29032d6ab313e5b2e689521828fffa55c1bab5dbf226e-ol9_x86_64_appstream
php-8.0.30-8.el9_8.1.x86_64.rpm83410705b94ff9bb0d98d6994cbac20660676de6db05e98aceef08731c4ddeb2-ol9_x86_64_appstream
php-bcmath-8.0.30-8.el9_8.1.x86_64.rpm4fbd69772185696162a1dc9982046b511645c9af2986eb4cc052b2573325e948-ol9_x86_64_appstream
php-cli-8.0.30-8.el9_8.1.x86_64.rpmd2148bb4c48862f4fd0794db9aa96e2876df79d0d289178277bbbfdb39b2efa5-ol9_x86_64_appstream
php-common-8.0.30-8.el9_8.1.x86_64.rpm76a5157f38532191855c58c04109a478eb26a4a079db7b7a81060bf81bb55d6c-ol9_x86_64_appstream
php-dba-8.0.30-8.el9_8.1.x86_64.rpmdc05383bf76e601f209e5a810618229d1e66bfb3942b239990307eab76b16809-ol9_x86_64_appstream
php-dbg-8.0.30-8.el9_8.1.x86_64.rpmacc38377906cc4fe4d5fff68c47ce4f973648500fbc65aa6a53a8e59b49a5caa-ol9_x86_64_appstream
php-devel-8.0.30-8.el9_8.1.x86_64.rpm180618ead77e1baaf34298e0bc4df451520103375de6f58f820090f8dfa79a37-ol9_x86_64_appstream
php-embedded-8.0.30-8.el9_8.1.x86_64.rpm17185e032e3e5f4292a91e8a7a18d415ebdc7eb51d061a717d3a72b4f9df05dd-ol9_x86_64_appstream
php-enchant-8.0.30-8.el9_8.1.x86_64.rpm5dea2ce4be396acdc1f69b2c3fa7c322adac86ba6a65eed65ef45add634d87d4-ol9_x86_64_appstream
php-ffi-8.0.30-8.el9_8.1.x86_64.rpm2ec4fc2a23a6a3cfd7151e0e58a40c38346e3e7ae3c31a937cce48a8ffe6b994-ol9_x86_64_appstream
php-fpm-8.0.30-8.el9_8.1.x86_64.rpm154fd87bd0ebc34f79f3394e14296df190ed611c6788d12b4364d2c24095b9b8-ol9_x86_64_appstream
php-gd-8.0.30-8.el9_8.1.x86_64.rpmf1c297e7743faa47a5ff981b0f54056c96bd63f06c52783bf0709788b9493480-ol9_x86_64_appstream
php-gmp-8.0.30-8.el9_8.1.x86_64.rpmeb995eedf117b84e10087cfd64444415c24143cb2ed3ef6e4d6530de9c2f05aa-ol9_x86_64_appstream
php-intl-8.0.30-8.el9_8.1.x86_64.rpm3c6df497012264c430e55a76ee44d78d6b058bfaf777495caa99b6231b3e48c7-ol9_x86_64_appstream
php-ldap-8.0.30-8.el9_8.1.x86_64.rpm1ab3ebed0976d43b21ffde85db9719585fa7c640a0cec31af1ef7d1183e9c453-ol9_x86_64_appstream
php-mbstring-8.0.30-8.el9_8.1.x86_64.rpmcd3fce234a3e8429245e757bee2f1a80158b83be4259a4068c12afd061bd27da-ol9_x86_64_appstream
php-mysqlnd-8.0.30-8.el9_8.1.x86_64.rpme200aebf804e4ab42c9a7a9f6305c7b1e77a55096452522cc8bcddfe8faa3baf-ol9_x86_64_appstream
php-odbc-8.0.30-8.el9_8.1.x86_64.rpmaa82878bd64f189f772e38752b8eff9e3e8cdf6a5a9a1834832d568fded0ab65-ol9_x86_64_appstream
php-opcache-8.0.30-8.el9_8.1.x86_64.rpmaba1cdb1eee3f8f7bacf45d36157abe5a9ffba4b256f2ff0a45441887a727a97-ol9_x86_64_appstream
php-pdo-8.0.30-8.el9_8.1.x86_64.rpmbdfb6b4c77cd371d08a7c8a0b5f6ba45cef8987e0d7784cbcde7936d278dabd3-ol9_x86_64_appstream
php-pgsql-8.0.30-8.el9_8.1.x86_64.rpmaff9c4c2f8f4ff85b69176b821851411b573fb7d099dcf01e3b83313572ef455-ol9_x86_64_appstream
php-process-8.0.30-8.el9_8.1.x86_64.rpmb3d26846dc9f007601ec5e51bc4afc950c1aa88d9f007ccd16efaf98e7c21635-ol9_x86_64_appstream
php-snmp-8.0.30-8.el9_8.1.x86_64.rpma5391153e8f3a1d369696c3e5439321c5519fa6342166a61fade4bf6167175b6-ol9_x86_64_appstream
php-soap-8.0.30-8.el9_8.1.x86_64.rpm3d95d4a2f5de35606db594fc96883e595cf857d813f17b01267e13111bd97f75-ol9_x86_64_appstream
php-xml-8.0.30-8.el9_8.1.x86_64.rpma38767dbb51a5283fd49a411dacda4ecaada33004c86fc21821abe47cb0f434e-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights