Red Hat Security Advisory

RHSA-2026:48170

php security, bug fix, and enhancement update

Released 2026-07-29 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) php-8.3.32-1.el10_2, php-bcmath-8.3.32-1.el10_2, php-cli-8.3.32-1.el10_2 +22

Fixes 1 record

TI-2026-12137 CVE-2026-14355

ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD

LOW 25

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00279 Published 2026-07-03 Fixed in 8.2.32, 8.3.32 +2 CWE-122