SECURITY UPDATE: SOAP use-after-free with SOAPPERSISTENCESESSION
debian/patches/CVE-2026-7261.patch: skip zvalptrdtor on the persisted
soapobj after header parsing failure when persistence is
SOAPPERSISTENCE_SESSION
CVE-2026-7261
SECURITY UPDATE: SOAP use-after-free via Apache Map with duplicate keys
debian/patches/CVE-2026-6722.patch: do not store stale pointers in
SOAPGLOBAL(refmap) when the encoded zval is freed during Apache Map
decoding with duplicate keys
CVE-2026-6722
SECURITY UPDATE: signed integer overflow of char array offset in metaphone()
debian/patches/CVE-2026-7568.patch: switch metaphone position tracker to
sizet and bound character-offset arithmetic to prevent signed overflow
on inputs larger than INTMAX bytes
CVE-2026-7568
SECURITY UPDATE: SOAP NULL pointer dereference in Apache Map decoding
debian/patches/CVE-2026-7262.patch: check the value element before
dereferencing it when decoding Apache Map entries