Oracle Errata System
Oracle Linux
5.11
2026-09-03T19:19:19
ELSA-2026-62334-0: php:7.4 security, bug fix, and enhancement update (IMPORTANT)
Oracle Linux 8
libzip
[1.6.1-1]
- update to 1.6.1
- enable lzma support
php
[7.4.33-6]
- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
CVE-2026-7260
php-pear
[1:1.10.13-1]
- update PEAR to 1.10.13
- update Archive_Tar to 1.4.14
php-pecl-apcu
[5.1.18-1]
- update to 5.1.18
php-pecl-rrd
[2.0.1-1]
- build for RHEL 8
php-pecl-xdebug
[2.9.5-1]
- update to 2.9.5
php-pecl-zip
[1.18.2-1]
- update to 1.18.2
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-17543
CVE-2026-7260
cpe:/a:oracle:linux:8::appstream
php-mbstring
libzip-devel
php-soap
php-xml
php-pdo
php-pgsql
apcu-panel
php-process
php-pecl-apcu-devel
php-intl
php-xmlrpc
php-gmp
php-snmp
php-pecl-apcu
php-opcache
php-common
php-bcmath
php-gd
php-pecl-rrd
php-odbc
php-devel
php-ldap
php-embedded
php-pecl-xdebug
php-enchant
php-ffi
php
php-pear
php-mysqlnd
oraclelinux-release
php-dbg
php-fpm
php-dba
php-pecl-zip
libzip
php-cli
php-json
libzip-tools
/etc/dnf/modules.d/php.module
\[php\][\w\W]*
1
82562ea9ad986da3
\nstream\s*=\s*7\.4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*7\.4\b
^8
aarch64
0:5.1.18-1.module+el8.10.0+90472+f810484b
0:1.6.1-1.module+el8.10.0+90472+f810484b
0:7.4.33-6.module+el8.10.0+91013+9868f608
1:1.10.13-1.module+el8.10.0+90472+f810484b
0:2.0.1-1.module+el8.10.0+90472+f810484b
0:2.9.5-1.module+el8.10.0+90472+f810484b
0:1.18.2-1.module+el8.10.0+90472+f810484b
x86_64