[CLSA-2026:1779456789] alt-php71: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 13:33:13 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php71-7.1.33-89.el10.x86_64.rpm
    sha:9d0c134baba5506fd97f9f4c72d4961d647325da4061e2fec00a9c8973624e7e
  • alt-php71-bcmath-7.1.33-89.el10.x86_64.rpm
    sha:a3a5079123ca84645b7a7898b15cf44e040c6a917776267ae50dde0017445d8d
  • alt-php71-cli-7.1.33-89.el10.x86_64.rpm
    sha:510b86058f21a62f38501ac8f6c5525c8872e0d5618fa70199a6ec259f2222f5
  • alt-php71-common-7.1.33-89.el10.x86_64.rpm
    sha:77dac0a66a496f3c943d7c76433d88ddf39b2a28487d5873fea9e2af2d7a587c
  • alt-php71-dba-7.1.33-89.el10.x86_64.rpm
    sha:723da2115e73fd08094fc94e2ffb95fd7abdc122f4ae7d71041f8a9cc47272f6
  • alt-php71-devel-7.1.33-89.el10.x86_64.rpm
    sha:c978dded95e11db9e3a3df3661b11106dc470bdf4f4a802e03aa181f156f7dcf
  • alt-php71-enchant-7.1.33-89.el10.x86_64.rpm
    sha:484aeb93684e80f60aa9f06283b27f180339773056fbd09f5539212aa5cf4548
  • alt-php71-firebird-7.1.33-89.el10.x86_64.rpm
    sha:57faeeba761d85a8de5cc4a71e22b5f04e95b0b2adc8d30c2b8656d20290b90e
  • alt-php71-gd-7.1.33-89.el10.x86_64.rpm
    sha:eb6fb5b72ae6dc01571929fa61d5e1b07632992a7a43255283348a3510bd8733
  • alt-php71-imap-7.1.33-89.el10.x86_64.rpm
    sha:d507f343c858a9320a1d2e9a214d8cb16e9b2a07280c99cfd331edc364163463
  • alt-php71-intl-7.1.33-89.el10.x86_64.rpm
    sha:dedb48ad0ed2afc153c16c0ffd3f13f2513e4d11630b5dec0b85acb423564a3a
  • alt-php71-ldap-7.1.33-89.el10.x86_64.rpm
    sha:de07e28b299a71124590500a63daf2bfdb4750cd075d3a0c8bb5ee060732069e
  • alt-php71-mbstring-7.1.33-89.el10.x86_64.rpm
    sha:5e9c3949b8ef506e6dd1cefe779b53f76bc1fe9d551ad0117c82144bf7475c80
  • alt-php71-mcrypt-7.1.33-89.el10.x86_64.rpm
    sha:56597f91b637f63ed7ddeab01c7fdd7b84c03cc783e2a222e13d79c64d188a39
  • alt-php71-mysqlnd-7.1.33-89.el10.x86_64.rpm
    sha:71df3decf130395358cb3f707a444adfffc3a1b6aa9dfd57727efcd60e370bd8
  • alt-php71-odbc-7.1.33-89.el10.x86_64.rpm
    sha:6110e231793254f5bdbb1112257654f5cb105b8df4c362feddc4eae0f348227a
  • alt-php71-opcache-7.1.33-89.el10.x86_64.rpm
    sha:72764e4922adc23efd45ac43679a4507a2b31401cc68ba1759d15102a6e3261c
  • alt-php71-pdo-7.1.33-89.el10.x86_64.rpm
    sha:8cb08c49ece4f1262f1f1c21801f313ff99c36d5975ae61b92d00d752a4499a1
  • alt-php71-pgsql-7.1.33-89.el10.x86_64.rpm
    sha:2732bcd2809067855e7a44a053e5befa73195a94b1bf5052b8eadb299166b231
  • alt-php71-php-fpm-7.1.33-89.el10.x86_64.rpm
    sha:f7be642200919ef3e8c35dfcb1cb913b3004635ac367205f6cd1f4616c9f3d25
  • alt-php71-process-7.1.33-89.el10.x86_64.rpm
    sha:690c0152b5689e21a50d663491594f30f14734a52c29b78249e9fd2c65a5f0d1
  • alt-php71-pspell-7.1.33-89.el10.x86_64.rpm
    sha:bddef4b7c63369478afe09af0273808d060385b078d1178b664623f7746af7a9
  • alt-php71-recode-7.1.33-89.el10.x86_64.rpm
    sha:535f3494b163733de3c315397ed7006e26cd21ec36a61a9beefe3eac79a56650
  • alt-php71-snmp-7.1.33-89.el10.x86_64.rpm
    sha:77b2559e7b5e3f6cdf4e4894b85e0020479f728620f61a25520768727498b33e
  • alt-php71-soap-7.1.33-89.el10.x86_64.rpm
    sha:413695f70e73daeaccc4f5b00c5611cb205116d087159de6a1c18e301a1a1872
  • alt-php71-tidy-7.1.33-89.el10.x86_64.rpm
    sha:7a1ccae34d773d95979bc50d84473281708bab8ceb1f883482a9a41839eff887
  • alt-php71-xml-7.1.33-89.el10.x86_64.rpm
    sha:7ea57d305e98a9f77df78b097074cb9dfb09bc69323a74c010228d5d776fea03
  • alt-php71-xmlrpc-7.1.33-89.el10.x86_64.rpm
    sha:b47d7736b66f6fc8ea9d2009b73cd5e448fb362680877f503fc749461ddef73f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.