Linux · Security advisory · July 29, 2026

ALSA-2026:48170: Security update for 25 packages

ALSA-2026:48170, released July 29, 2026, fixes 2 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0028
20th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
phpalmalinux 108.3.32-1.el10_2
php-bcmathalmalinux 108.3.32-1.el10_2
php-clialmalinux 108.3.32-1.el10_2
php-commonalmalinux 108.3.32-1.el10_2
php-dbaalmalinux 108.3.32-1.el10_2
php-dbgalmalinux 108.3.32-1.el10_2
php-develalmalinux 108.3.32-1.el10_2
php-embeddedalmalinux 108.3.32-1.el10_2
php-enchantalmalinux 108.3.32-1.el10_2
php-ffialmalinux 108.3.32-1.el10_2
php-fpmalmalinux 108.3.32-1.el10_2
php-gdalmalinux 108.3.32-1.el10_2
php-gmpalmalinux 108.3.32-1.el10_2
php-intlalmalinux 108.3.32-1.el10_2
php-ldapalmalinux 108.3.32-1.el10_2
php-mbstringalmalinux 108.3.32-1.el10_2
php-mysqlndalmalinux 108.3.32-1.el10_2
php-odbcalmalinux 108.3.32-1.el10_2
php-opcachealmalinux 108.3.32-1.el10_2
php-pdoalmalinux 108.3.32-1.el10_2
php-pgsqlalmalinux 108.3.32-1.el10_2
php-processalmalinux 108.3.32-1.el10_2
php-snmpalmalinux 108.3.32-1.el10_2
php-soapalmalinux 108.3.32-1.el10_2
php-xmlalmalinux 108.3.32-1.el10_2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-14355 ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD 7.4 0.0028 None reported
Routine CVE-2026-12184 php8.4 vulnerability n/a n/a None reported
Showing 1 to 2 of 2 1