ELSA-2026-33449

ELSA-2026-33449 - php security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-02

Description

[8.0.30-6]
- Fix XSS within status endpoint
CVE-2026-6735
- Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
CVE-2026-7259
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
CVE-2026-7261
- Fix Broken Apache map value NULL check
CVE-2026-7262
- Fix Signed integer overflow of char array offset
CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
CVE-2026-7258

Related CVEs

CVE-2026-6722

CVE-2026-6735

CVE-2026-7258

CVE-2026-7259

CVE-2026-7261

CVE-2026-7262

CVE-2026-7568

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	php-8.0.30-6.el9_8.src.rpm	817866c8d6b5d370aff629d1bc411281952cf0399604b8642468529a7810fd65	-	ol9_aarch64_appstream
	php-8.0.30-6.el9_8.aarch64.rpm	bc88f5b8ff7503304a7c6950743377b39d0a72db15a88955a8dc24e9d792c53a	-	ol9_aarch64_appstream
	php-bcmath-8.0.30-6.el9_8.aarch64.rpm	5d9b02b5ddebd266975443dc79df0dde088a1c60eb34fe7560008268bffc45e5	-	ol9_aarch64_appstream
	php-cli-8.0.30-6.el9_8.aarch64.rpm	83ce9cbf53434ab7d0e1730cd6d0b329808e1380725e384b82678e25ab62286c	-	ol9_aarch64_appstream
	php-common-8.0.30-6.el9_8.aarch64.rpm	9681343bfe684a78499c9e4d085f22f45151acf3ff1d87e4431b9fc00ccee059	-	ol9_aarch64_appstream
	php-dba-8.0.30-6.el9_8.aarch64.rpm	575ecc43dfa2c8862182109af528b63016672b72f6c0416ee48f63adf48b9f06	-	ol9_aarch64_appstream
	php-dbg-8.0.30-6.el9_8.aarch64.rpm	2d14640309ba202e261fdf6155a88928615a4462fae3b58fdf2d5a7b4e48ca00	-	ol9_aarch64_appstream
	php-devel-8.0.30-6.el9_8.aarch64.rpm	89c02c5afb6a2d62b0ab7181fe8608fe211d38e427c4e838e665fb791679f37c	-	ol9_aarch64_appstream
	php-embedded-8.0.30-6.el9_8.aarch64.rpm	44c9a4206a499f1c7b6fa2cfd5808e7f00c5208c2531408a1542d5782d0405e5	-	ol9_aarch64_appstream
	php-enchant-8.0.30-6.el9_8.aarch64.rpm	1debee84dfe22d914cac6954f21f4997c29713781a1bac8dda998bace6dd2deb	-	ol9_aarch64_appstream
	php-ffi-8.0.30-6.el9_8.aarch64.rpm	a7e0a9564442c140bb823afe2eb8c68cc1b29b527cea6a12a0ae13ac0989a7aa	-	ol9_aarch64_appstream
	php-fpm-8.0.30-6.el9_8.aarch64.rpm	56d0d9124669caa2d8b870de013dea35f0c74b6ec983a267fa15eaaa25060012	-	ol9_aarch64_appstream
	php-gd-8.0.30-6.el9_8.aarch64.rpm	b8d78d415468c6621964a1bad588a0f0390613cc4a915aaf15812885c9ebfba1	-	ol9_aarch64_appstream
	php-gmp-8.0.30-6.el9_8.aarch64.rpm	94cfd246e3126a5dd60a2bf11992bd08f4e60ff9bd912f2ad1ca51ee041dc6c5	-	ol9_aarch64_appstream
	php-intl-8.0.30-6.el9_8.aarch64.rpm	185266342de2234b784c21b680752bcec6d5438811d339e893b1d738e945c21b	-	ol9_aarch64_appstream
	php-ldap-8.0.30-6.el9_8.aarch64.rpm	08f1623cb44430f6065bfcc370409f2a1f9206fe2edd8d284e4029a9f93034f8	-	ol9_aarch64_appstream
	php-mbstring-8.0.30-6.el9_8.aarch64.rpm	31d3e27e5e6cfe3e10c856dac7e522684cd17ee25d2a8febe33545fa18d7915e	-	ol9_aarch64_appstream
	php-mysqlnd-8.0.30-6.el9_8.aarch64.rpm	8fce5537e1b2bb5bde7b81a44cf7d04b2c6343f639d6b5c25d7289dc70720c6f	-	ol9_aarch64_appstream
	php-odbc-8.0.30-6.el9_8.aarch64.rpm	146f94037a40822049e389aa64280dcf944751054fe9169d2d0eea8f5705e340	-	ol9_aarch64_appstream
	php-opcache-8.0.30-6.el9_8.aarch64.rpm	96ff9f80d0b50b1124238217287d0f36c756177e2920a4d13369bb6e763fd2c9	-	ol9_aarch64_appstream
	php-pdo-8.0.30-6.el9_8.aarch64.rpm	3e9b92536631a09484ece4331b646014f0d262f91b61d23863ee7b8d6797f4df	-	ol9_aarch64_appstream
	php-pgsql-8.0.30-6.el9_8.aarch64.rpm	17113ba2a89f462c539e6d2393657cb13a13f5dcb160c5a68b61ccc4440aa9b0	-	ol9_aarch64_appstream
	php-process-8.0.30-6.el9_8.aarch64.rpm	46a21c496500c8145444195e6468818315d317f4c78b83fe61fde8213ae820a8	-	ol9_aarch64_appstream
	php-snmp-8.0.30-6.el9_8.aarch64.rpm	a3486ae20774cc60c228e0e1fec2ef380c763bb1cb305f1ae3739656094e98c9	-	ol9_aarch64_appstream
	php-soap-8.0.30-6.el9_8.aarch64.rpm	21e59141e12e8665d9cb6f84e02b7577fa4c43e11401b8849209037eaf3d939c	-	ol9_aarch64_appstream
	php-xml-8.0.30-6.el9_8.aarch64.rpm	7ead75cbd18d11edb29e68cac071275cd49aff59ba75fec7d7325a718c2b9ea8	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	php-8.0.30-6.el9_8.src.rpm	817866c8d6b5d370aff629d1bc411281952cf0399604b8642468529a7810fd65	-	ol9_x86_64_appstream
	php-8.0.30-6.el9_8.x86_64.rpm	4d784327d6804273b123c0c958fc8c5eb8a8352c0c65c1d25d8c8e4fdef12566	-	ol9_x86_64_appstream
	php-bcmath-8.0.30-6.el9_8.x86_64.rpm	88c4e2079181fa5f9554a70ffcaa0d4dc633458967d2895bb7aafa679eeaee95	-	ol9_x86_64_appstream
	php-cli-8.0.30-6.el9_8.x86_64.rpm	f9018e47c9700763102e7c83fe2198049e60fc8c95f139f5cb47d55f606b9c49	-	ol9_x86_64_appstream
	php-common-8.0.30-6.el9_8.x86_64.rpm	f9e40d5b0ae8423a94148082a67526917b04d6ba854e4de9f2ca63c0972dce03	-	ol9_x86_64_appstream
	php-dba-8.0.30-6.el9_8.x86_64.rpm	e13cfffc893d830994106f8501fea02a2da1138ee201f2626da3fa62eb5adb67	-	ol9_x86_64_appstream
	php-dbg-8.0.30-6.el9_8.x86_64.rpm	8aa1780e96f26873ce9dc6635b1bc179f4ed95751e29579be4d66a4016953050	-	ol9_x86_64_appstream
	php-devel-8.0.30-6.el9_8.x86_64.rpm	455a801f1792cdfce98c7604567b7d65e474fd33836a0e16a3921a712fdad792	-	ol9_x86_64_appstream
	php-embedded-8.0.30-6.el9_8.x86_64.rpm	242c36894d2ccb3cf0642ef7a8c3ff7784dfcbaea90f8b0fc0518d8429d904f1	-	ol9_x86_64_appstream
	php-enchant-8.0.30-6.el9_8.x86_64.rpm	5b8d82776321fbc2cf180fbb602f0aac100159e5ea06087f03fe210a9d5bf0cc	-	ol9_x86_64_appstream
	php-ffi-8.0.30-6.el9_8.x86_64.rpm	9b4a60b06b70f22e6f88d3c0b8c05994f0d89eff19634d1d006b18393f6110ff	-	ol9_x86_64_appstream
	php-fpm-8.0.30-6.el9_8.x86_64.rpm	7e61eb24040350e78f32ab06263b6353dae3e490756bac87a7b6344b8521d6c5	-	ol9_x86_64_appstream
	php-gd-8.0.30-6.el9_8.x86_64.rpm	4137ed33b629fec112444f205d327487c1c0d057be62f0ee1ee70b74febf5dcb	-	ol9_x86_64_appstream
	php-gmp-8.0.30-6.el9_8.x86_64.rpm	4fd6f3a45a0ab9f7f375764038613678f7b041a8cf964ef7b2a6fdfba77a5ffd	-	ol9_x86_64_appstream
	php-intl-8.0.30-6.el9_8.x86_64.rpm	704c7ede7af13c6c6f1e373bf9fe831dd67603319a76e5cd91e2ca3774e2c7d5	-	ol9_x86_64_appstream
	php-ldap-8.0.30-6.el9_8.x86_64.rpm	19dbb39a599a48e27c048d7fe9ca0cb4e976653e50b0450a6e1519d864e664bc	-	ol9_x86_64_appstream
	php-mbstring-8.0.30-6.el9_8.x86_64.rpm	86ed200425a3c75d4bf761b0c449b45a831d0df2eb211b7eddad6c800223cac8	-	ol9_x86_64_appstream
	php-mysqlnd-8.0.30-6.el9_8.x86_64.rpm	a37a6415975cc0d06d07e1e75fea33f62bf5ae5f6bb3549a0a32a0ed5ce35499	-	ol9_x86_64_appstream
	php-odbc-8.0.30-6.el9_8.x86_64.rpm	5bd49ab1bb09d0af1cb5370f01b0b00d4706e1568746046ab2de573b181ff420	-	ol9_x86_64_appstream
	php-opcache-8.0.30-6.el9_8.x86_64.rpm	9e71118aae7dff7dca1c2be181a01a4ce674f34b4f3e83e3564ed4265dffff57	-	ol9_x86_64_appstream
	php-pdo-8.0.30-6.el9_8.x86_64.rpm	88df45de38c0027514750b4dea5a2b23d26fb58dbe3d08da70e716ea460ab8e0	-	ol9_x86_64_appstream
	php-pgsql-8.0.30-6.el9_8.x86_64.rpm	33c850362de650104a8662894d90a1530ad1a4e1c8236d6cbf37e7b8163bcbcb	-	ol9_x86_64_appstream
	php-process-8.0.30-6.el9_8.x86_64.rpm	a4fd8f278ac7b82f3787d32cbfc1320d64ff9c2c11a8298eef3ddf3b0200068d	-	ol9_x86_64_appstream
	php-snmp-8.0.30-6.el9_8.x86_64.rpm	6ac26670cadf0876dbfe3fc7e828209b1886dda7f8cfec85c514848943196aa4	-	ol9_x86_64_appstream
	php-soap-8.0.30-6.el9_8.x86_64.rpm	e9ffc8b214364a0ff5f9a0a67032e2debbcc547cded8ee7733bea50e94044895	-	ol9_x86_64_appstream
	php-xml-8.0.30-6.el9_8.x86_64.rpm	a83db55dc89798eef56870574d0013602f69790ea4bed00449423a7f3f597114	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team