Linux · AlmaLinux · Security advisory · February 10, 2026

ALSA-2026:2470: Security update for 37 packages

ALSA-2026:2470, released February 10, 2026, fixes 13 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
13
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0224
82nd percentile

Priority of the 13 CVEs

Patch now 0 Urgent 0 High 11 Routine 2

Fixed package versions

ProductReleaseFixed in
apcu-panelalmalinux 85.1.18-1.module_el8.6.0+2750+78feabcb
libzipalmalinux 81.6.1-1.module_el8.6.0+3239+bedf0508
libzip-develalmalinux 81.6.1-1.module_el8.10.0+3935+28808425
libzip-toolsalmalinux 81.6.1-1.module_el8.6.0+3239+bedf0508
phpalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-bcmathalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-clialmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-commonalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-dbaalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-dbgalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-develalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-embeddedalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-enchantalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-ffialmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-fpmalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-gdalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-gmpalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-intlalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-jsonalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-ldapalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-mbstringalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-mysqlndalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-odbcalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-opcachealmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-pdoalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-pearalmalinux 81:1.10.13-1.module_el8.10.0+3935+28808425
php-pecl-apcualmalinux 85.1.18-1.module_el8.10.0+3935+28808425
php-pecl-apcu-develalmalinux 85.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-rrdalmalinux 82.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-xdebugalmalinux 82.9.5-1.module_el8.10.0+3935+28808425
php-pecl-zipalmalinux 81.18.2-1.module_el8.6.0+2750+78feabcb
php-pgsqlalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-processalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-snmpalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-soapalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-xmlalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618
php-xmlrpcalmalinux 87.4.33-3.module_el8.10.0+4114+3b36c618

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-1735 pgsql extension does not check for errors during escaping7.5 0.0116 None reported
High CVE-2025-6491 NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix7.5 0.0112 None reported
High CVE-2024-11234 apache2-mod_php7: This update for php7 fixes the following issues: - CVE-2024-11233: Single byte overread with convert.quoted-printabl...7.2 0.0111 None reported
High CVE-2025-1861 libapache2-mod-php8.3: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.*before 8.3.19, from 8.4.* before 8.4.5, when par...9.8 0.0086 None reported
High CVE-2025-1219 libapache2-mod-php8.3: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.*before 8.3.19, from 8.4.* before 8.4.5, when req...8.1 0.0075 None reported
High CVE-2025-1220 Null byte termination in hostnames7.5 0.0074 None reported
High CVE-2025-1217 php8.3-fpm: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when ht...8.1 0.0059 None reported
High CVE-2025-1736 libapache2-mod-php8.3: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.*before 8.3.19, from 8.4.* before 8.4.5, when use...8.1 0.0055 None reported
High CVE-2025-14177 php-pecl-xdebug3: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: pgsq...7.5 0.0050 None reported
High CVE-2025-1734 php8.3-dba: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.*before 8.3.19, from 8.4.* before 8.4.5, when rec...8.1 0.0050 None reported
High CVE-2025-14178 php7-embed: This update for php7 fixes the following issues: Security fixes: - CVE-2025-14178: heap buffer overflow occurs in a...8.2 0.0046 None reported
Routine CVE-2024-8929 php8.3-interbase: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before8.3.14, a hostile MySQL server can cause the cl...6.5 0.0224 None reported
Routine CVE-2024-11233 apache2-mod_php7: This update for php7 fixes the following issues: - CVE-2024-11233: Single byte overread with convert.quoted-printabl...6.5 0.0161 None reported
Showing 1 to 13 of 13 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.