Oracle Errata System
Oracle Linux
5.11
2026-07-03T11:30:17
ELSA-2026-34354: php:7.4 security update (IMPORTANT)
Oracle Linux 8
libzip
[1.6.1-1]
- update to 1.6.1
- enable lzma support
php
[7.4.33-4]
- Fix XSS within status endpoint
CVE-2026-6735
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
CVE-2026-7261
- Fix Broken Apache map value NULL check
CVE-2026-7262
- Fix Signed integer overflow of char array offset
CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
CVE-2026-7258
php-pear
[1:1.10.13-1]
- update PEAR to 1.10.13
- update Archive_Tar to 1.4.14
php-pecl-apcu
[5.1.18-1]
- update to 5.1.18
php-pecl-rrd
[2.0.1-1]
- build for RHEL 8
php-pecl-xdebug
[2.9.5-1]
- update to 2.9.5
php-pecl-zip
[1.18.2-1]
- update to 1.18.2
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-6722
CVE-2026-6735
CVE-2026-7258
CVE-2026-7261
CVE-2026-7262
CVE-2026-7568
cpe:/a:oracle:linux:8::appstream
php-mbstring
libzip-devel
php-soap
php-xml
php-pdo
php-pgsql
apcu-panel
php-process
php-pecl-apcu-devel
php-intl
php-xmlrpc
php-gmp
php-snmp
php-pecl-apcu
php-opcache
php-common
php-bcmath
php-gd
php-pecl-rrd
php-odbc
php-devel
php-ldap
php-embedded
php-pecl-xdebug
php-enchant
php-ffi
php
php-pear
php-mysqlnd
oraclelinux-release
php-dbg
php-fpm
php-dba
php-pecl-zip
libzip
php-cli
php-json
libzip-tools
/etc/dnf/modules.d/php.module
\[php\][\w\W]*
1
82562ea9ad986da3
\nstream\s*=\s*7\.4\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*7\.4\b
^8
aarch64
0:5.1.18-1.module+el8.10.0+90472+f810484b
0:1.6.1-1.module+el8.10.0+90472+f810484b
0:7.4.33-4.module+el8.10.0+90942+d80f51f3
1:1.10.13-1.module+el8.10.0+90472+f810484b
0:2.0.1-1.module+el8.10.0+90472+f810484b
0:2.9.5-1.module+el8.10.0+90472+f810484b
0:1.18.2-1.module+el8.10.0+90472+f810484b
x86_64