RHSA-2026:1628 | Mondoo Vulnerability Intelligence

RHSA-2026:1628

HIGH7.5

Red Hat Security Advisory: php security update

Published Feb 2, 2026

Modified Yesterday

Fix available

Affected Packages(50 packages)

php

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-bcmath

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-bcmath-debuginfo

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-cli

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-cli-debuginfo

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-common

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-common-debuginfo

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-dba

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-dba-debuginfo

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

php-dbg

RHEL 10.1

Fixed in:

0:8.3.29-1.el10_1

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:1628 REPORThttps://access.redhat.com/security/cve/CVE-2025-14177 REPORThttps://access.redhat.com/security/cve/CVE-2025-14178 REPORThttps://access.redhat.com/security/cve/CVE-2025-14180 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2425625 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2425626 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2425627 ARTICLEhttps://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7 ARTICLEhttps://github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwj ARTICLEhttps://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-14177 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-14178 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-14180 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1628.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-14177 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-14178 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-14180

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2025-14177 CVE-2025-14178 CVE-2025-14180

Ecosystems

Timeline

PublishedFeb 2, 2026

ModifiedFeb 2, 2026