Back Linuxsecurity

Oracle Linux 8 PHP Important Bug Fixes Advisory ELSA-2026-62334

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php [7.4.33-6] - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 php-pear [1:1.10.13-1] - update PEAR to 1.10.13 - update Archive_Tar to 1.4.14 php-pecl-apcu [5.1.18-1] - update to 5.1.18 php-pecl-rrd [2.0.1-1] - build for RHEL 8 php-pecl-xdebug [2.9.5-1] - update to 2.9.5 php-pecl-zip [1.18.2-1] - update to 1.18.2

apcu-panel-5.1.18-1.module+el8.10.0+90472+f810484b.noarch.rpm libzip-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm libzip-devel-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm libzip-tools-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm php-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-bcmath-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-cli-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-common-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-dba-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-dbg-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-devel-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-embedded-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-enchant-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-ffi-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-fpm-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-gd-7.4.33-6.module+el8.10.0+91013+9868f608.x86_64.rpm php-gmp-7.4.33-6.module+el8.10.0...

apcu-panel-5.1.18-1.module+el8.10.0+90472+f810484b.noarch.rpm libzip-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm libzip-devel-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm libzip-tools-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm php-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-bcmath-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-cli-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-common-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-dba-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-dbg-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-devel-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-embedded-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-enchant-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-ffi-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-fpm-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-gd-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-gmp-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-intl-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-json-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-ldap-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-mbstring-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-mysqlnd-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-odbc-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-opcache-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-pdo-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.noarch.rpm php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.aarch64.rpm php-pecl-apcu-devel-5.1.18-1.module+el8.10.0+90472+f810484b.aarch64.rpm php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.aarch64.rpm php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.aarch64.rpm php-pgsql-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-process-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-snmp-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-soap-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-xml-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm php-xmlrpc-7.4.33-6.module+el8.10.0+91013+9868f608.aarch64.rpm

Related CVEs: CVE-2026-7260 CVE-2026-17543

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PHP Vulnerabilities in Oracle Linux Advisory ELSA-2026-62334 and ELSA-2026-61903 Oracle has issued important bug fix advisories for PHP vulnerabilities affecting Oracle Linux 8 and 9. The vulnerabilities include CVE-2026-17543, a SQL injection flaw, and CVE-2026-7260, which can cause crashes via recursive symlinks. These vulnerabilities impact PHP versions 7.4 and 8.2, respectively, and could potentially allow attackers to exploit systems if not patched. The SQL injection vulnerability was published on July 30, 2026, with a proof of concept released shortly after on August 4, 2026. Administrators are urged to apply the updates promptly to mitigate risks. The advisories emphasize the importance of keeping systems secure and up to date with the latest patches. 2 sources 71

Extracted Entities

Oracle Linux 8 PHP Important Bug Fixes Advisory ELSA-2026-62334

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)