Red Hat Security Advisory

RHSA-2026:49914

php8.4 security, bug fix, and enhancement update

Released 2026-08-04 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) php8.4-8.4.23-1.el10_2, php8.4-bcmath-8.4.23-1.el10_2, php8.4-cli-8.4.23-1.el10_2 +22

Fixes 1 record

TI-2026-12137 CVE-2026-14355

ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD

LOW 25

In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00279 Published 2026-07-03 Fixed in 8.2.32, 8.3.32 +2 CWE-122