Linux · AlmaLinux · Security advisory · July 1, 2026

ALSA-2026:34354: Security update for 37 packages

ALSA-2026:34354, released July 1, 2026, fixes 6 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0089
59th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
apcu-panelalmalinux 85.1.18-1.module_el8.6.0+2750+78feabcb
libzipalmalinux 81.6.1-1.module_el8.6.0+3239+bedf0508
libzip-develalmalinux 81.6.1-1.module_el8.10.0+3935+28808425
libzip-toolsalmalinux 81.6.1-1.module_el8.6.0+3239+bedf0508
phpalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-bcmathalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-clialmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-commonalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-dbaalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-dbgalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-develalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-embeddedalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-enchantalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-ffialmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-fpmalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-gdalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-gmpalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-intlalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-jsonalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-ldapalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-mbstringalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-mysqlndalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-odbcalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-opcachealmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-pdoalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-pearalmalinux 81:1.10.13-1.module_el8.10.0+3935+28808425
php-pecl-apcualmalinux 85.1.18-1.module_el8.10.0+3935+28808425
php-pecl-apcu-develalmalinux 85.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-rrdalmalinux 82.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-xdebugalmalinux 82.9.5-1.module_el8.10.0+3935+28808425
php-pecl-zipalmalinux 81.18.2-1.module_el8.6.0+2750+78feabcb
php-pgsqlalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-processalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-snmpalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-soapalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-xmlalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-xmlrpcalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-6722 php-pecl-xdebug3: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP:...9.8 0.0089 None reported
High CVE-2026-7262 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server8.2 0.0078 None reported
High CVE-2026-7568 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server8.2 0.0046 None reported
High CVE-2026-7258 Out-of-bounds read in urldecode() on NetBSD8.2 0.0036 None reported
High CVE-2026-7261 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP:...9.8 0.0030 None reported
High CVE-2026-6735 XSS within PHP-FPM status endpoint8.2 0.0019 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.