Red Hat Security Advisory

RHSA-2026:4266

php security update

Released 2026-03-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) php-8.0.30-1.el9_2.1, php-bcmath-8.0.30-1.el9_2.1, php-cli-8.0.30-1.el9_2.1 +22

Fixes 1 record

TI-2025-12956 CVE-2025-14178

Heap buffer overflow in array_merge()

HIGH 69

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00455 Published 2025-12-27 Fixed in 8.1.34, 8.2.30 +3 CWE-190