[El-errata] ELSA-2026-61259-0 Low: Oracle Linux 9 php security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-61259-0

http://linux.oracle.com/errata/ELSA-2026-61259-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
php-8.0.30-8.el9_8.x86_64.rpm
php-bcmath-8.0.30-8.el9_8.x86_64.rpm
php-cli-8.0.30-8.el9_8.x86_64.rpm
php-common-8.0.30-8.el9_8.x86_64.rpm
php-dba-8.0.30-8.el9_8.x86_64.rpm
php-dbg-8.0.30-8.el9_8.x86_64.rpm
php-devel-8.0.30-8.el9_8.x86_64.rpm
php-embedded-8.0.30-8.el9_8.x86_64.rpm
php-enchant-8.0.30-8.el9_8.x86_64.rpm
php-ffi-8.0.30-8.el9_8.x86_64.rpm
php-fpm-8.0.30-8.el9_8.x86_64.rpm
php-gd-8.0.30-8.el9_8.x86_64.rpm
php-gmp-8.0.30-8.el9_8.x86_64.rpm
php-intl-8.0.30-8.el9_8.x86_64.rpm
php-ldap-8.0.30-8.el9_8.x86_64.rpm
php-mbstring-8.0.30-8.el9_8.x86_64.rpm
php-mysqlnd-8.0.30-8.el9_8.x86_64.rpm
php-odbc-8.0.30-8.el9_8.x86_64.rpm
php-opcache-8.0.30-8.el9_8.x86_64.rpm
php-pdo-8.0.30-8.el9_8.x86_64.rpm
php-pgsql-8.0.30-8.el9_8.x86_64.rpm
php-process-8.0.30-8.el9_8.x86_64.rpm
php-snmp-8.0.30-8.el9_8.x86_64.rpm
php-soap-8.0.30-8.el9_8.x86_64.rpm
php-xml-8.0.30-8.el9_8.x86_64.rpm

aarch64:
php-8.0.30-8.el9_8.aarch64.rpm
php-bcmath-8.0.30-8.el9_8.aarch64.rpm
php-cli-8.0.30-8.el9_8.aarch64.rpm
php-common-8.0.30-8.el9_8.aarch64.rpm
php-dba-8.0.30-8.el9_8.aarch64.rpm
php-dbg-8.0.30-8.el9_8.aarch64.rpm
php-devel-8.0.30-8.el9_8.aarch64.rpm
php-embedded-8.0.30-8.el9_8.aarch64.rpm
php-enchant-8.0.30-8.el9_8.aarch64.rpm
php-ffi-8.0.30-8.el9_8.aarch64.rpm
php-fpm-8.0.30-8.el9_8.aarch64.rpm
php-gd-8.0.30-8.el9_8.aarch64.rpm
php-gmp-8.0.30-8.el9_8.aarch64.rpm
php-intl-8.0.30-8.el9_8.aarch64.rpm
php-ldap-8.0.30-8.el9_8.aarch64.rpm
php-mbstring-8.0.30-8.el9_8.aarch64.rpm
php-mysqlnd-8.0.30-8.el9_8.aarch64.rpm
php-odbc-8.0.30-8.el9_8.aarch64.rpm
php-opcache-8.0.30-8.el9_8.aarch64.rpm
php-pdo-8.0.30-8.el9_8.aarch64.rpm
php-pgsql-8.0.30-8.el9_8.aarch64.rpm
php-process-8.0.30-8.el9_8.aarch64.rpm
php-snmp-8.0.30-8.el9_8.aarch64.rpm
php-soap-8.0.30-8.el9_8.aarch64.rpm
php-xml-8.0.30-8.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/php-8.0.30-8.el9_8.src.rpm

Related CVEs:

CVE-2026-7260
CVE-2026-14355
CVE-2026-17543




Description of changes:

[8.0.30-8]
- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

[8.0.30-7]
- Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
  CVE-2026-14355