Back Linuxsecurity

Mageia 10 PHP 8.4 Critical Memory Corruption CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 20, 2026

Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges ×

Description: The updated php8.4 and php8.5 packages fix several security issues, e.g. Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD. (CVE-2026-14355)

- - - -

- 10/core/php8.4-8.4.23-1.mga10 - 10/core/php8.5-8.5.8-1.mga10

- 10/core/php8.4-8.4.23-1.mga10

- 10/core/php8.5-8.5.8-1.mga10

Publication date: 20 Jul 2026 URL: https: //advisories.mageia.org/MGASA-2026-0285.html Type: security CVE: CVE-2026-14355

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PHP Vulnerabilities in Ubuntu 26.04 LTS Lead to Denial of Service Risks On July 20, 2026, multiple vulnerabilities in PHP were disclosed, affecting Ubuntu 26.04 LTS. The vulnerabilities include a NULL pointer dereference (CVE-2026-12184) and a buffer allocation flaw in the OpenSSL extension (CVE-2026-14355). Both issues could lead to denial of service attacks or potentially allow arbitrary code execution. The vulnerabilities were confirmed to impact various PHP versions, including 8.5, 8.3, and 8.1. Users are advised to update their systems to mitigate these risks. The vulnerabilities were published on July 3, 2026. The PHP issues have been addressed in recent security updates. Administrators are encouraged to apply the patches immediately to ensure system security. 4 sources 72

Extracted Entities

Mageia 10 PHP 8.4 Critical Memory Corruption CVE-2026

The full story

Extracted Entities

CVEs (1)

Domains (1)

Platforms (1)