Rocky Linux has rolled out a series of critical security advisories targeting PHP versions eight point two and eight point three alongside the Apache httpd server. Administrators managing either release eight or nine will need to apply these fixes immediately since core packages like Redis, Xdebug, APCu, ZIP, RRD, libzip, PEAR, mod_md, and mod_http2 contain multiple known flaws.

RLSA-2026:22142: Important: php:8.3 security update
RLSA-2026:22143: Important: php:8.2 security update
RLSA-2026:22305: Important: php:8.2 security update
RLSA-2026:22140: Important: httpd:2.4 security update

RLSA-2026:22142: Important: php:8.3 security update

An update is available for php-pecl-redis6, php-pecl-rrd, module.php-pecl-redis6, module.php-pecl-xdebug3, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-rrd, php-pecl-zip, module.php-pecl-zip, php-pecl-apcu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:22142: Important: php:8.3 security update

RLSA-2026:22143: Important: php:8.2 security update

An update is available for php-pecl-rrd, module.php-pecl-xdebug3, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-rrd, php-pecl-zip, module.php-pecl-zip, php-pecl-apcu.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:22143: Important: php:8.2 security update

RLSA-2026:22305: Important: php:8.2 security update

An update is available for module.libzip, php-pear, libzip, php-pecl-rrd, module.php-pecl-xdebug3, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-rrd, php-pecl-zip, module.php-pecl-zip, module.php-pear, php-pecl-apcu.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:22305: Important: php:8.2 security update

RLSA-2026:22140: Important: httpd:2.4 security update

An update is available for mod_http2, module.mod_md, module.mod_http2, mod_md, module.httpd, httpd.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:22140: Important: httpd:2.4 security update