Red Hat Security AdvisoryRHSA-2026:4514
php:7.4 security update
Released 2026-03-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.8) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
Fixes 1 record
Priority HIGH 69
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00455 · Published 2025-12-27 · Fixed in 8.1.34, 8.2.30 +3 CWE-190
