Integer overflow in PHP - CVE-2026-6103

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU159404

Integer overflow in PHP - CVE-2026-6103

Published: November 5, 2026


Vulnerability identifier: #VU159404
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-6103
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to inject archive entries and cause attacker-controlled files to be written during TAR archive extraction.

The vulnerability exists due to an integer overflow in PHP's Phar TAR phar_tar_number() function when parsing octal entry sizes into a 32-bit unsigned integer without overflow checks. A remote attacker can supply a crafted TAR archive with a size field of 40000000000, which wraps to zero and causes file content to be interpreted as subsequent TAR headers, to inject entries that PharData exposes and extractTo() writes to disk.


Affected software

PHP
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP6
Debian Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Anolis OS
Web and Scripting Module
SUSE Package Hub 15
Legacy Module
openSUSE Leap
openEuler
Fedora
libzip
libzip-devel
libzip-tools
php-pear
php-pecl-zip
php-pecl-rrd
php-pecl-xdebug
php-pecl-apcu
apcu-panel
php-pecl-apcu-devel
php-enchant
php-gmp
php-intl
php-json
php-gd
php-fpm
php-ffi
php-dba
php-ldap
php-mbstring
php-mysqlnd
php-odbc
php-opcache
php-pdo
php-pgsql
php-process
php-snmp
php-soap
php-devel
php-dbg
php-embedded
php-common
php-cli
php-bcmath
php
php-xml
php-xmlrpc
php7-dom
php7-iconv
php7-ftp-debuginfo
php7-soap
php7-snmp
php7-bz2-debuginfo
php7-tokenizer
php7-pcntl-debuginfo
php7-pgsql
php7-tokenizer-debuginfo
php7-fastcgi-debugsource
php7-exif-debuginfo
php7-odbc
php7-sodium-debuginfo
php7-shmop
php7-sockets
php7-gettext-debuginfo
php7-xmlreader-debuginfo
php7-openssl
php7-json-debuginfo
php7-mbstring
php7-xsl-debuginfo
php7-xsl
php7-intl-debuginfo
php7-dba
php7-zlib
php7-bcmath-debuginfo
php7-xmlwriter-debuginfo
php7-shmop-debuginfo
php7-opcache
php7-soap-debuginfo
php7-bz2
php7-openssl-debuginfo
php7-curl-debuginfo
php7-mysql
php7-fpm-debugsource
php7-enchant
php7-ldap
php7-fastcgi-debuginfo
php7-iconv-debuginfo
php7-sysvshm-debuginfo
php7-sysvsem
php7-snmp-debuginfo
php7-posix
php7-debugsource
php7
php7-ldap-debuginfo
php7-pdo-debuginfo
php7-fpm-debuginfo
php7-ftp
php7-readline
php7-zip-debuginfo
php7-intl
php7-sodium
php7-phar-debuginfo
php7-tidy
php7-gettext
php7-pcntl
php7-opcache-debuginfo
php7-xmlrpc-debuginfo
php7-gmp-debuginfo
php7-dba-debuginfo
php7-gd-debuginfo
php7-sysvmsg-debuginfo
php7-devel
php7-zip
apache2-mod_php7-debugsource
php7-enchant-debuginfo
php7-debuginfo
php7-sqlite
php7-mbstring-debuginfo
php7-pdo
php7-sqlite-debuginfo
php7-readline-debuginfo
php7-json
php7-cli
php7-sockets-debuginfo
php7-ctype-debuginfo
php7-bcmath
php7-sysvmsg
php7-odbc-debuginfo
php7-mysql-debuginfo
php7-calendar
php7-cli-debuginfo
php7-curl
php7-exif
php7-calendar-debuginfo
php7-phar
php7-posix-debuginfo
php7-sysvshm
php7-zlib-debuginfo
php7-ctype
php7-fastcgi
php7-sysvsem-debuginfo
apache2-mod_php7-debuginfo
php7-fileinfo-debuginfo
php7-gmp
php7-dom-debuginfo
php7-xmlrpc
php7-xmlreader
php7-embed
php7-embed-debuginfo
php7-embed-debugsource
php7-gd
apache2-mod_php7
php7-fileinfo
php7-xmlwriter
php7-pgsql-debuginfo
php7-fpm
php7-tidy-debuginfo
php7-test
php-debugsource
php-debuginfo
php-sodium
php-help
php-tidy
php8-soap-debuginfo
php8-gettext
php8-sysvmsg
php8-pgsql
php8-enchant
php8-debuginfo
php8-fileinfo-debuginfo
php8-pcntl
php8-sockets-debuginfo
php8-exif
php8-tokenizer-debuginfo
php8
php8-fpm-debuginfo
php8-posix-debuginfo
php8-xmlreader
php8-fpm
php8-pdo
php8-zlib
php8-tidy
php8-tokenizer
php8-sysvshm-debuginfo
php8-sqlite
php8-xmlreader-debuginfo
apache2-mod_php8
php8-ftp-debuginfo
php8-gmp-debuginfo
php8-sysvsem-debuginfo
php8-mysql
php8-devel
php8-bcmath-debuginfo
php8-dom-debuginfo
php8-cli-debuginfo
php8-gettext-debuginfo
php8-gd-debuginfo
php8-curl-debuginfo
php8-xsl-debuginfo
php8-embed-debuginfo
php8-readline-debuginfo
php8-odbc
php8-embed
php8-tidy-debuginfo
php8-debugsource
php8-sodium-debuginfo
php8-sqlite-debuginfo
php8-gd
php8-enchant-debuginfo
php8-snmp-debuginfo
php8-posix
php8-pdo-debuginfo
php8-ctype-debuginfo
php8-intl
php8-openssl
php8-exif-debuginfo
php8-openssl-debuginfo
php8-pgsql-debuginfo
php8-xmlwriter
php8-sockets
php8-mbstring
php8-dba
php8-sodium
php8-calendar-debuginfo
php8-opcache
php8-bz2-debuginfo
php8-iconv
php8-fastcgi-debugsource
php8-dom
php8-snmp
php8-readline
php8-mbstring-debuginfo
php8-phar
php8-cli
php8-shmop-debuginfo
php8-fastcgi
php8-calendar
php8-shmop
php8-sysvsem
php8-pcntl-debuginfo
apache2-mod_php8-debugsource
php8-dba-debuginfo
php8-opcache-debuginfo
php8-ctype
php8-bz2
php8-phar-debuginfo
php8-ldap
php8-curl
php8-fileinfo
php8-xsl
php8-sysvshm
php8-fpm-debugsource
php8-zip
php8-ldap-debuginfo
php8-zlib-debuginfo
php8-mysql-debuginfo
php8-zip-debuginfo
php8-sysvmsg-debuginfo
php8-xmlwriter-debuginfo
php8-fastcgi-debuginfo
php8-intl-debuginfo
php8-odbc-debuginfo
php8-gmp
php8-ftp
php8-iconv-debuginfo
apache2-mod_php8-debuginfo
php8-soap
php8-embed-debugsource
php8-bcmath
php8-test
php8-fpm-apache
php8-ffi
php8-ffi-debuginfo
php-pdo-dblib
php-pdo-firebird
composer-generators
php8.4 (Debian package)

How to mitigate CVE-2026-6103

Install security update from vendor's website.

PHP - addressed in versions 8.2.34, 8.3.35, 8.4.26, 8.5.11
libzip - update to 1.6.1-1
libzip-devel - update to 1.6.1-1
libzip-tools - update to 1.6.1-1
php-pear - update to 1.10.13-1.0.1
php-pecl-zip - update to 1.18.2-1
php-pecl-rrd - update to 2.0.1-1
php-pecl-xdebug - update to 2.9.5-1
php-pecl-apcu - update to 5.1.18-1
apcu-panel - update to 5.1.18-1
php-pecl-apcu-devel - update to 5.1.18-1
php-enchant - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-gmp - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-intl - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-json - update to 7.4.33-8.0.1
php-gd - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-fpm - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-ffi - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-dba - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-ldap - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-mbstring - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-mysqlnd - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-odbc - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-opcache - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-pdo - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-pgsql - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-process - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-snmp - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-soap - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-devel - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-dbg - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-embedded - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-common - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-cli - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-bcmath - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-xml - addressed in versions 7.4.33-8.0.1, 8.3.35-1
php-xmlrpc - update to 7.4.33-8.0.1
php7-dom - update to 7.4.33-150400.4.81.1
php7-iconv - update to 7.4.33-150400.4.81.1
php7-ftp-debuginfo - update to 7.4.33-150400.4.81.1
php7-soap - update to 7.4.33-150400.4.81.1
php7-snmp - update to 7.4.33-150400.4.81.1
php7-bz2-debuginfo - update to 7.4.33-150400.4.81.1
php7-tokenizer - update to 7.4.33-150400.4.81.1
php7-pcntl-debuginfo - update to 7.4.33-150400.4.81.1
php7-pgsql - update to 7.4.33-150400.4.81.1
php7-tokenizer-debuginfo - update to 7.4.33-150400.4.81.1
php7-fastcgi-debugsource - update to 7.4.33-150400.4.81.1
php7-exif-debuginfo - update to 7.4.33-150400.4.81.1
php7-odbc - update to 7.4.33-150400.4.81.1
php7-sodium-debuginfo - update to 7.4.33-150400.4.81.1
php7-shmop - update to 7.4.33-150400.4.81.1
php7-sockets - update to 7.4.33-150400.4.81.1
php7-gettext-debuginfo - update to 7.4.33-150400.4.81.1
php7-xmlreader-debuginfo - update to 7.4.33-150400.4.81.1
php7-openssl - update to 7.4.33-150400.4.81.1
php7-json-debuginfo - update to 7.4.33-150400.4.81.1
php7-mbstring - update to 7.4.33-150400.4.81.1
php7-xsl-debuginfo - update to 7.4.33-150400.4.81.1
php7-xsl - update to 7.4.33-150400.4.81.1
php7-intl-debuginfo - update to 7.4.33-150400.4.81.1
php7-dba - update to 7.4.33-150400.4.81.1
php7-zlib - update to 7.4.33-150400.4.81.1
php7-bcmath-debuginfo - update to 7.4.33-150400.4.81.1
php7-xmlwriter-debuginfo - update to 7.4.33-150400.4.81.1
php7-shmop-debuginfo - update to 7.4.33-150400.4.81.1
php7-opcache - update to 7.4.33-150400.4.81.1
php7-soap-debuginfo - update to 7.4.33-150400.4.81.1
php7-bz2 - update to 7.4.33-150400.4.81.1
php7-openssl-debuginfo - update to 7.4.33-150400.4.81.1
php7-curl-debuginfo - update to 7.4.33-150400.4.81.1
php7-mysql - update to 7.4.33-150400.4.81.1
php7-fpm-debugsource - update to 7.4.33-150400.4.81.1
php7-enchant - update to 7.4.33-150400.4.81.1
php7-ldap - update to 7.4.33-150400.4.81.1
php7-fastcgi-debuginfo - update to 7.4.33-150400.4.81.1
php7-iconv-debuginfo - update to 7.4.33-150400.4.81.1
php7-sysvshm-debuginfo - update to 7.4.33-150400.4.81.1
php7-sysvsem - update to 7.4.33-150400.4.81.1
php7-snmp-debuginfo - update to 7.4.33-150400.4.81.1
php7-posix - update to 7.4.33-150400.4.81.1
php7-debugsource - update to 7.4.33-150400.4.81.1
php7 - update to 7.4.33-150400.4.81.1
php7-ldap-debuginfo - update to 7.4.33-150400.4.81.1
php7-pdo-debuginfo - update to 7.4.33-150400.4.81.1
php7-fpm-debuginfo - update to 7.4.33-150400.4.81.1
php7-ftp - update to 7.4.33-150400.4.81.1
php7-readline - update to 7.4.33-150400.4.81.1
php7-zip-debuginfo - update to 7.4.33-150400.4.81.1
php7-intl - update to 7.4.33-150400.4.81.1
php7-sodium - update to 7.4.33-150400.4.81.1
php7-phar-debuginfo - update to 7.4.33-150400.4.81.1
php7-tidy - update to 7.4.33-150400.4.81.1
php7-gettext - update to 7.4.33-150400.4.81.1
php7-pcntl - update to 7.4.33-150400.4.81.1
php7-opcache-debuginfo - update to 7.4.33-150400.4.81.1
php7-xmlrpc-debuginfo - update to 7.4.33-150400.4.81.1
php7-gmp-debuginfo - update to 7.4.33-150400.4.81.1
php7-dba-debuginfo - update to 7.4.33-150400.4.81.1
php7-gd-debuginfo - update to 7.4.33-150400.4.81.1
php7-sysvmsg-debuginfo - update to 7.4.33-150400.4.81.1
php7-devel - update to 7.4.33-150400.4.81.1
php7-zip - update to 7.4.33-150400.4.81.1
apache2-mod_php7-debugsource - update to 7.4.33-150400.4.81.1
php7-enchant-debuginfo - update to 7.4.33-150400.4.81.1
php7-debuginfo - update to 7.4.33-150400.4.81.1
php7-sqlite - update to 7.4.33-150400.4.81.1
php7-mbstring-debuginfo - update to 7.4.33-150400.4.81.1
php7-pdo - update to 7.4.33-150400.4.81.1
php7-sqlite-debuginfo - update to 7.4.33-150400.4.81.1
php7-readline-debuginfo - update to 7.4.33-150400.4.81.1
php7-json - update to 7.4.33-150400.4.81.1
php7-cli - update to 7.4.33-150400.4.81.1
php7-sockets-debuginfo - update to 7.4.33-150400.4.81.1
php7-ctype-debuginfo - update to 7.4.33-150400.4.81.1
php7-bcmath - update to 7.4.33-150400.4.81.1
php7-sysvmsg - update to 7.4.33-150400.4.81.1
php7-odbc-debuginfo - update to 7.4.33-150400.4.81.1
php7-mysql-debuginfo - update to 7.4.33-150400.4.81.1
php7-calendar - update to 7.4.33-150400.4.81.1
php7-cli-debuginfo - update to 7.4.33-150400.4.81.1
php7-curl - update to 7.4.33-150400.4.81.1
php7-exif - update to 7.4.33-150400.4.81.1
php7-calendar-debuginfo - update to 7.4.33-150400.4.81.1
php7-phar - update to 7.4.33-150400.4.81.1
php7-posix-debuginfo - update to 7.4.33-150400.4.81.1
php7-sysvshm - update to 7.4.33-150400.4.81.1
php7-zlib-debuginfo - update to 7.4.33-150400.4.81.1
php7-ctype - update to 7.4.33-150400.4.81.1
php7-fastcgi - update to 7.4.33-150400.4.81.1
php7-sysvsem-debuginfo - update to 7.4.33-150400.4.81.1
apache2-mod_php7-debuginfo - update to 7.4.33-150400.4.81.1
php7-fileinfo-debuginfo - update to 7.4.33-150400.4.81.1
php7-gmp - update to 7.4.33-150400.4.81.1
php7-dom-debuginfo - update to 7.4.33-150400.4.81.1
php7-xmlrpc - update to 7.4.33-150400.4.81.1
php7-xmlreader - update to 7.4.33-150400.4.81.1
php7-embed - update to 7.4.33-150400.4.81.1
php7-embed-debuginfo - update to 7.4.33-150400.4.81.1
php7-embed-debugsource - update to 7.4.33-150400.4.81.1
php7-gd - update to 7.4.33-150400.4.81.1
apache2-mod_php7 - update to 7.4.33-150400.4.81.1
php7-fileinfo - update to 7.4.33-150400.4.81.1
php7-xmlwriter - update to 7.4.33-150400.4.81.1
php7-pgsql-debuginfo - update to 7.4.33-150400.4.81.1
php7-fpm - update to 7.4.33-150400.4.81.1
php7-tidy-debuginfo - update to 7.4.33-150400.4.81.1
php7-test - update to 7.4.33-150400.4.81.2
php-gd - addressed in versions 8.0.30-17, 8.3.35-1
php - addressed in versions 8.0.30-17, 8.3.35-1
php-fpm - addressed in versions 8.0.30-17, 8.3.35-1
php-ffi - addressed in versions 8.0.30-17, 8.3.35-1
php-enchant - addressed in versions 8.0.30-17, 8.3.35-1
php-embedded - addressed in versions 8.0.30-17, 8.3.35-1
php-devel - addressed in versions 8.0.30-17, 8.3.35-1
php-debugsource - addressed in versions 8.0.30-17, 8.3.35-1
php-debuginfo - addressed in versions 8.0.30-17, 8.3.35-1
php-dbg - addressed in versions 8.0.30-17, 8.3.35-1
php-dba - addressed in versions 8.0.30-17, 8.3.35-1
php-common - addressed in versions 8.0.30-17, 8.3.35-1
php-cli - addressed in versions 8.0.30-17, 8.3.35-1
php-bcmath - addressed in versions 8.0.30-17, 8.3.35-1
php-sodium - addressed in versions 8.0.30-17, 8.3.35-1
php-gmp - addressed in versions 8.0.30-17, 8.3.35-1
php-intl - addressed in versions 8.0.30-17, 8.3.35-1
php-ldap - addressed in versions 8.0.30-17, 8.3.35-1
php-mbstring - addressed in versions 8.0.30-17, 8.3.35-1
php-mysqlnd - addressed in versions 8.0.30-17, 8.3.35-1
php-odbc - addressed in versions 8.0.30-17, 8.3.35-1
php-opcache - addressed in versions 8.0.30-17, 8.3.35-1
php-pdo - addressed in versions 8.0.30-17, 8.3.35-1
php-pgsql - addressed in versions 8.0.30-17, 8.3.35-1
php-process - addressed in versions 8.0.30-17, 8.3.35-1
php-snmp - addressed in versions 8.0.30-17, 8.3.35-1
php-soap - addressed in versions 8.0.30-17, 8.3.35-1
php-help - addressed in versions 8.0.30-17, 8.3.35-1
php-xml - addressed in versions 8.0.30-17, 8.3.35-1
php-tidy - addressed in versions 8.0.30-17, 8.3.35-1
php8-soap-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-gettext - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sysvmsg - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-pgsql - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-enchant - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fileinfo-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-pcntl - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sockets-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-exif - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-tokenizer-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8 - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fpm-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-posix-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-xmlreader - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fpm - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-pdo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-zlib - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-tidy - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-tokenizer - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sysvshm-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sqlite - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-xmlreader-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
apache2-mod_php8 - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-ftp-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-gmp-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sysvsem-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-mysql - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-devel - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-bcmath-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-dom-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-cli-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-gettext-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-gd-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-curl-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-xsl-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-embed-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-readline-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-odbc - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-embed - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-tidy-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-debugsource - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sodium-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sqlite-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-gd - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-enchant-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-snmp-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-posix - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-pdo-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-ctype-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-intl - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-openssl - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-exif-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-openssl-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-pgsql-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-xmlwriter - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sockets - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-mbstring - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-dba - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sodium - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-calendar-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-opcache - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-bz2-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-iconv - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fastcgi-debugsource - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-dom - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-snmp - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-readline - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-mbstring-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-phar - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-cli - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-shmop-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fastcgi - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-calendar - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-shmop - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sysvsem - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-pcntl-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
apache2-mod_php8-debugsource - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-dba-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-opcache-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-ctype - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-bz2 - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-phar-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-ldap - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-curl - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fileinfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-xsl - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sysvshm - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fpm-debugsource - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-zip - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-ldap-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-zlib-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-mysql-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-zip-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-sysvmsg-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-xmlwriter-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fastcgi-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-intl-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-odbc-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-gmp - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-ftp - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-iconv-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
apache2-mod_php8-debuginfo - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-soap - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-embed-debugsource - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-bcmath - addressed in versions 8.0.30-150400.4.76.1, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-test - addressed in versions 8.0.30-150400.4.76.2, 8.2.34-150600.3.36.1, 8.3.35-150700.3.21.1
php8-fpm-apache - update to 8.2.34-150600.3.36.1
php8-ffi - update to 8.2.34-150600.3.36.1
php8-ffi-debuginfo - update to 8.2.34-150600.3.36.1
php-pdo-dblib - update to 8.3.35-1
php-pdo-firebird - update to 8.3.35-1
php-sodium - update to 8.3.35-1
composer-generators - update to 8.3.35-1
php - addressed in versions 8.4.26-1.fc43, 8.5.11-1.fc44, 8.5.11-1.fc45
php8.4 (Debian package) - update to 8.4.26-1~deb13u1

External References

Related Security Bulletins