Advisories » MGASA-2026-0285

Updated php8.4 and php8.5 packages fix security vulnerabilities

Publication date: 20 Jul 2026
Modification date: 20 Jul 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-14355

Description

The updated php8.4 and php8.5 packages fix several security issues, e.g.
Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with
AES-WRAP-PAD. (CVE-2026-14355)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35809
• https://www.php.net/ChangeLog-8.php#8.4.23
• https://www.php.net/ChangeLog-8.php#8.5.8
• https://www.cve.org/CVERecord?id=CVE-2026-14355

SRPMS

10/core

• php8.4-8.4.23-1.mga10
• php8.5-8.5.8-1.mga10