[CLSA-2026:1779204107] php: Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-19 15:21:50 UTC
Description:
- CVE-2026-6722: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5) - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - CVE-2026-7261: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - CVE-2026-7258: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - CVE-2025-14179: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm)
Updated packages:
  • php-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:5676b741ed9bf1757295c2fabb3ba60e53719d3ad9f4d2e5e2ae49243bbd33da
  • php-bcmath-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:e1d4baf6d355fa0cef6a6d5f62cabe89c38e051febbc0e54f04bc4ed706e7cd0
  • php-cli-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:3b0966baa79e00920fdd6d5531f9b7903da1b8112684843ce2dcf8d53df6b7d7
  • php-common-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:6cbbfd8846e8b51ccfa0241790dda3a68c0f4e53f98a6f518f954dcdabc97c75
  • php-dba-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:eb074e1d56eae622d9564dab41bdc2c12472d4594da0b94221e6c975b3dbf8f3
  • php-dbg-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:18f5be3649ea8073739f996caa6c4cb8ab26cdf7eea154ae7fe4410f7f3b7f15
  • php-devel-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:f3bc77278c292992dd3954a887871c8d06002b4c168dc75eee1efc70992c7266
  • php-embedded-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:26e7512e01531ba2937d1d156266f38ebea1411ed6ea2e2d3077d6ad50d3b737
  • php-enchant-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:4c993faff6cac8c1ff0c62f2a2fb100a64b2dea7859e6f07b57d805e95d8dc08
  • php-ffi-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:b5e700b4f24e3327677d7ba5755c4e2ad9ffe74cd8a2e5300fd8a016ce063b50
  • php-fpm-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:9f95f775aea21b9afad6f2ca1bdab49c0f41ab2c6354a05cd124d8251b0cab72
  • php-gd-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:e8b3c11e13f936547ea3dad0e4c5f785260231dd01290536fe2a9bfe53674853
  • php-gmp-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:52e0e3d914cd9f2c1302105683076579159347659600e37e3f05a9de40b6a3be
  • php-intl-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:12dc4ed6fe7eb0e832faf8cc6609fc2321870bbb0aa6ce819505d24be75fd572
  • php-json-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:a676756716446d913199d9ea22560d7c59f26493fa705c8e3049745654e8b2e6
  • php-ldap-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:833648496b401552af26dcf2dca2021109878b62cb594e29ba729ee1466f21a8
  • php-mbstring-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:898350cb32f5ad03862aedfdaba036b98dc957ad86163fbf6a64c75ee0249440
  • php-mysqlnd-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:6db269c60a88075412f95f43e2f23d864b9fb789c3df38a911b329d1a3d46cbf
  • php-odbc-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:76df9929cc00dd0620911adc44780fd3008aeddce5362867ac91e09360e309f3
  • php-opcache-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:03059585fb0147a8432a393be85108013f0143039282391edec7841c513e5c6e
  • php-pdo-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:0bbc9f9189cef9112f01b69532a13b960c7da1842d822f439f35e378a168e6b6
  • php-pgsql-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:679f2f476b4a7e62fd4ba27d15b19a5da949387549e8b67038b907aa26d1978e
  • php-process-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:324356f0ad161729c14c693cebb7a8a89bea30e76f67538e63880de0bde9e5dc
  • php-snmp-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:7482b112669e31fca0678b5d10c9ca90ec9dc369b00ed935ac377b20b19546ff
  • php-soap-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:a2eca1d3849d8d81bf46f57eeefaaa22adc34540d1e3dfc9135d1d41000abb16
  • php-xml-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:056c081b08dd6d8bae0169102cfb79e1d970d9c9aee7738a9168e55d79ccdf9a
  • php-xmlrpc-7.4.19-1.module_el8.5.0+2407+c59885f4.tuxcare.els27.x86_64.rpm
    sha:edbf7c769f09ff6071b9579e4cacc18429cf19b8636444e33a07015fc18ade21
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.