[CLSA-2026:1779203719] php: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-19 15:15:23 UTC
Description:
- CVE-2026-6722: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5) - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - CVE-2026-7261: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - CVE-2026-7258: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - CVE-2025-14179: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm)
Updated packages:
  • php-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:7c4959c49528461120851ee3bd0d28a104a406b12b30b160ac5ccb575e47b106
  • php-bcmath-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:f6e2aea73e5d831b7ce153f9222cc9af13b8105355e40d649a5a799edb6e26e1
  • php-cli-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:d3661d6723f597d9402ecd54bb12208e6711e9c861ac9229ecd48ed0a7b687e5
  • php-common-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:481f4d9d7f2dccdf06dd8e72bc21f68a3a24ddac591c2a0fa4e3904fbbc0d8c0
  • php-dba-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:cb69af60ea4ab782a587b292107501c0e2eac8df0e91ba1e00511d9cbd95a9a3
  • php-dbg-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:fc5e01810003f5376d6b6d374cfd7a967dbefa543e200af232a16dcfb1970645
  • php-devel-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:6d83638ac56f0e33c1f1cab45a071d495d94fd0a16e262bd48608d966cf7234b
  • php-embedded-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:12e22cf197a3c95b6c0d625818e625c0241d103f9557177dd389f309eac00544
  • php-enchant-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:a882233a9cb2d6c694da8862fe4849ce3e1c3ce5d87b046be84dd0f2f9666074
  • php-ffi-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:1aa74336fffa83b44f89e8f920159e28653d141343ec28e493b793b8be2bf587
  • php-fpm-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:61f345914e280ed17b3d7dd17f654d70e0fbfb81f4d830a369156d2961145396
  • php-gd-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:727f0a2d76cb2ad9c2608afa2c556207958e34725e8a23446434d902a267c5b4
  • php-gmp-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:e16d1f925ffd24c96b825afa670a39bb4c46b22d8918a4673dfde2df0e2d0faf
  • php-intl-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:92468ecc027982bfca0b2eaf4002c4cae0328d0d98c3c496b45f893078c0ee0b
  • php-json-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:28258cd1ca8eb3648e9044a5c38f7c355fbfb43ca26d92e3be2e02cf022536eb
  • php-ldap-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:42ebb625ae3d996d776c85b8bf652c382329c3d05eaa75255060e714b291f037
  • php-mbstring-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:33da5d52b0dc00de7c3388075390ef23cf14472724ed79d0d4cdd832955a12b9
  • php-mysqlnd-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:55b6a71a99b84e6f126046192cbfb78fb0dd9609251ded0686ab9d75e19ae88f
  • php-odbc-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:c74a93270256c6c88287f956ccbd950ebd4c3f138df3e7f977905aab796749dc
  • php-opcache-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:0369511cb7901639f4c9a09648b1bcbd3925f587fb9be8d757548c5ffd675baf
  • php-pdo-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:354be0f11c2e2868a6611ddc76d3674a6d8b3d4ea399056dfd5de5a98077708f
  • php-pgsql-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:0f3f49f2b7014d042963ac5c6a4d8b5f46448c3f01231f9cfbb6905ef32ce006
  • php-process-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:ebba47951a5443f17f130ccfd207675b9adbf77c54fbbe38b24daaeb4158ea7d
  • php-snmp-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:6025b759c87645a5a3c3c41494d0470113278f0640d656815505f8791ab81c87
  • php-soap-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:7c901a9de22ed84d4591419f782c7c2ae04fc94d7b926c4d936ecb05af7b96a5
  • php-xml-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:7847b6f6271e42d714b2f3dd9c693e662f6e39268286f6d500fc2356d83afa2b
  • php-xmlrpc-7.4.6-4.module_el8.4.0+2406+abdeea4a.tuxcare.els28.x86_64.rpm
    sha:24b96f454076a72c6295d8cddd1c7cdd9d40f3f09fccc96fd7d6548a5a643242
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.