RHSA-2026:56969: CVEs fixed (Red Hat)

RHSA-2026:56969 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-17544 CRITICAL 9.8 UPGRADE Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PH
• CVE-2026-17543 CRITICAL 9.8 UPGRADE Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP

Applies to

• RHEL 10 · fixed in php8.4-8.4.24-1.el10_2

← Back to latest CVEs