Oracle Errata System
Oracle Linux
5.11
2026-07-02T17:05:34
ELSA-2026-33449: php security update (IMPORTANT)
Oracle Linux 9
[8.0.30-6]
- Fix XSS within status endpoint
CVE-2026-6735
- Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
CVE-2026-7259
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
CVE-2026-7261
- Fix Broken Apache map value NULL check
CVE-2026-7262
- Fix Signed integer overflow of char array offset
CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
CVE-2026-7258
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-6722
CVE-2026-6735
CVE-2026-7258
CVE-2026-7259
CVE-2026-7261
CVE-2026-7262
CVE-2026-7568
cpe:/a:oracle:linux:9::appstream
php-pdo
php-soap
php-mbstring
php-pgsql
php-process
php-intl
php-gmp
php-snmp
php-opcache
php-common
php-gd
php-odbc
php-devel
php-ldap
php-embedded
php-enchant
php-ffi
php
php-mysqlnd
oraclelinux-release
php-dbg
php-fpm
php-dba
php-xml
php-bcmath
php-cli
bc4d06a08d8b756f
^9
aarch64
0:8.0.30-6.el9_8
x86_64