{"id":"RHSA-2026:47200","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","modified":"2026-09-22T10:42:49.460871804Z","published":"2026-08-06T10:13:07Z","upstream":["CVE-2026-17543","CVE-2026-17544","CVE-2026-6722","CVE-2026-7260"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47200"},{"type":"ARTICLE","url":"https://images.redhat.com/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-17544"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-17543"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-7260"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-6722"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47200.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2468560"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-6722"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6722"},{"type":"ARTICLE","url":"https://github.com/php/php-src/security/advisories/GHSA-85c2-q967-79q5"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2509255"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-7260"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7260"},{"type":"ARTICLE","url":"https://github.com/php/php-src/security/advisories/GHSA-vc5h-9ppw-p5f3"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2509254"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-17543"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17543"},{"type":"ARTICLE","url":"https://github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2509256"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-17544"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17544"},{"type":"ARTICLE","url":"https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f"}],"affected":[{"package":{"name":"php","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-bcmath","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-bcmath"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-cli","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-common","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-dba","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-dba"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-dbg","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-dbg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-embedded","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-embedded"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-enchant","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-enchant"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-ffi","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-ffi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-fpm","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-fpm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-gd","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-gd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-gmp","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-gmp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-intl","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-intl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-ldap","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-ldap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-mbstring","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-mbstring"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-mysqlnd","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-mysqlnd"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-odbc","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-odbc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-pdo","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-pdo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-pdo-dblib","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-pdo-dblib"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-pdo-firebird","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-pdo-firebird"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-pgsql","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-pgsql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-process","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-process"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-snmp","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-snmp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-soap","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-soap"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-sodium","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-sodium"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-tidy","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-tidy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}},{"package":{"name":"php-xml","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/php-xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.9-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:47200.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}