PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. Security Fix(es): * php: php: Denial of Service via unbounded recursion in SOAP parser (CVE-2026-91765) * php: OOM bailout during request parsing leads to memory corruption and RCE (CVE-2026-109618) * php: fatal error handling retains stale request state leading to use-after-free (CVE-2026-109619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Last supporting evidence check: 2026-10-24T15:01:46.459Z UTC
php8.4 8.4.27-1.el10_2
php8.4-bcmath 8.4.27-1.el10_2
php8.4-cli 8.4.27-1.el10_2
php8.4-common 8.4.27-1.el10_2
php8.4-dba 8.4.27-1.el10_2
php8.4-dbg 8.4.27-1.el10_2
php8.4-devel 8.4.27-1.el10_2
php8.4-embedded 8.4.27-1.el10_2
php8.4-enchant 8.4.27-1.el10_2
php8.4-ffi 8.4.27-1.el10_2
php8.4-fpm 8.4.27-1.el10_2
php8.4-gd 8.4.27-1.el10_2
php8.4-gmp 8.4.27-1.el10_2
php8.4-intl 8.4.27-1.el10_2
php8.4-ldap 8.4.27-1.el10_2
php8.4-mbstring 8.4.27-1.el10_2
php8.4-mysqlnd 8.4.27-1.el10_2
php8.4-odbc 8.4.27-1.el10_2
php8.4-opcache 8.4.27-1.el10_2
php8.4-pdo 8.4.27-1.el10_2
php8.4-pgsql 8.4.27-1.el10_2
php8.4-process 8.4.27-1.el10_2
php8.4-snmp 8.4.27-1.el10_2
php8.4-soap 8.4.27-1.el10_2
php8.4-xml 8.4.27-1.el10_2