Linux · Security advisory · July 1, 2026

ALSA-2026:34354: Security update for 37 packages

ALSA-2026:34354, released July 1, 2026, fixes 6 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0089
59th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
apcu-panelalmalinux 85.1.18-1.module_el8.6.0+2750+78feabcb
libzipalmalinux 81.6.1-1.module_el8.6.0+3239+bedf0508
libzip-develalmalinux 81.6.1-1.module_el8.10.0+3935+28808425
libzip-toolsalmalinux 81.6.1-1.module_el8.6.0+3239+bedf0508
phpalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-bcmathalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-clialmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-commonalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-dbaalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-dbgalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-develalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-embeddedalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-enchantalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-ffialmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-fpmalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-gdalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-gmpalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-intlalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-jsonalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-ldapalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-mbstringalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-mysqlndalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-odbcalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-opcachealmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-pdoalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-pearalmalinux 81:1.10.13-1.module_el8.10.0+3935+28808425
php-pecl-apcualmalinux 85.1.18-1.module_el8.10.0+3935+28808425
php-pecl-apcu-develalmalinux 85.1.18-1.module_el8.6.0+2750+78feabcb
php-pecl-rrdalmalinux 82.0.1-1.module_el8.6.0+2750+78feabcb
php-pecl-xdebugalmalinux 82.9.5-1.module_el8.10.0+3935+28808425
php-pecl-zipalmalinux 81.18.2-1.module_el8.6.0+2750+78feabcb
php-pgsqlalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-processalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-snmpalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-soapalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-xmlalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0
php-xmlrpcalmalinux 87.4.33-4.module_el8.10.0+4209+2ed16ff0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-6722 php-pecl-xdebug3: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP:... 9.8 0.0089 None reported
High CVE-2026-7262 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server 8.2 0.0078 None reported
High CVE-2026-7568 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server 8.2 0.0046 None reported
High CVE-2026-7258 Out-of-bounds read in urldecode() on NetBSD 8.2 0.0036 None reported
High CVE-2026-7261 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP:... 9.8 0.0030 None reported
High CVE-2026-6735 XSS within PHP-FPM status endpoint 8.2 0.0019 None reported
Showing 1 to 6 of 6 1