[CLSA-2026:1779470219] alt-php70: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 17:17:08 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php70-7.0.33-124.el10.x86_64.rpm
    sha:78e3099452d2c6db641ef20222dfb3e6f78589d572a2f42bd5f1ccf751222185
  • alt-php70-bcmath-7.0.33-124.el10.x86_64.rpm
    sha:075f5acc676932cd6340cebd9f6126feddeb8ac1d5cb33c1c0f9a0a9188a10e7
  • alt-php70-cli-7.0.33-124.el10.x86_64.rpm
    sha:4fe75cce16bfe3a876e9ce9ae8414869022c3b49f53ee45cdb49225bd6039778
  • alt-php70-common-7.0.33-124.el10.x86_64.rpm
    sha:ec302159df9d6a06f86e73715084e4b3bf241126b6da3555897f3bd610f72804
  • alt-php70-dba-7.0.33-124.el10.x86_64.rpm
    sha:b4dbbf834136991f2d6ef48d9af6058c6d2b5abfb5b9030b092f2af8d2a10b49
  • alt-php70-devel-7.0.33-124.el10.x86_64.rpm
    sha:08cba820112d76e65c5ae2374e69f84d8fc7ecff207a8d5e36ef10a783c34023
  • alt-php70-enchant-7.0.33-124.el10.x86_64.rpm
    sha:fe11388fd40034a9af14c1ada69cc212f0132070ab58bd54878d3dec5ffce124
  • alt-php70-firebird-7.0.33-124.el10.x86_64.rpm
    sha:481cfa5ba34768c4db5fcba466601f648eb7abcf625e8a8976ad5352ac740172
  • alt-php70-gd-7.0.33-124.el10.x86_64.rpm
    sha:619738022265bf045393dc3d3951f7b586f8593b4c8371b4ca5db6858bb98a89
  • alt-php70-imap-7.0.33-124.el10.x86_64.rpm
    sha:be3163c208a553be375687dc09df9b697f8971e674a4ca2f8db83dd77e1a0c7c
  • alt-php70-intl-7.0.33-124.el10.x86_64.rpm
    sha:6ac0167b5e893102ec76bcb00020ca7f924edca22876a4938c48bb61a656d803
  • alt-php70-ldap-7.0.33-124.el10.x86_64.rpm
    sha:5aab7490daeee51c587353e26c3207b1a3d79e1538e1d1d5e7223f7840136857
  • alt-php70-mbstring-7.0.33-124.el10.x86_64.rpm
    sha:296fd83a5461e1f7e85f20fcc7a1fd8acf826f70a5b0eba036952b543194d127
  • alt-php70-mcrypt-7.0.33-124.el10.x86_64.rpm
    sha:1acceb110806eff5db8355a80e59810416b8feed6d1f1cbb2932a192942bb4cc
  • alt-php70-mysqlnd-7.0.33-124.el10.x86_64.rpm
    sha:e925f7b926fb1db28082f4c74734fa65ddcb554a3fad1b67e0205047599783b1
  • alt-php70-odbc-7.0.33-124.el10.x86_64.rpm
    sha:461a99f0cd109323e6e4a886c339b38edf786da733955f327671f56d410394cb
  • alt-php70-opcache-7.0.33-124.el10.x86_64.rpm
    sha:986512dc13572edbc23d417d0db0163a0283067c1f519c55ea2f5f4aa07cb7f7
  • alt-php70-pdo-7.0.33-124.el10.x86_64.rpm
    sha:1c84d9fa7b64ce3890cc056dc77dc3ba4affcc4418296fbdd07b84a17b53ca29
  • alt-php70-pgsql-7.0.33-124.el10.x86_64.rpm
    sha:175c2ce4d37cc5f3b3ded5e39ad2f58796e5f3a66b6826555ac89f660cc100eb
  • alt-php70-php-fpm-7.0.33-124.el10.x86_64.rpm
    sha:310b0aec1ca2192da9f6995a73b707d7b8f41f0e4f52e1af0340cc4e7c206c55
  • alt-php70-process-7.0.33-124.el10.x86_64.rpm
    sha:044e90287c53386a2af040db85d17df5161f84770f9721b6866460853c62ba4a
  • alt-php70-pspell-7.0.33-124.el10.x86_64.rpm
    sha:6829fa6da7a8c43a2c1c724a6cb0d7bf464ea22c9913bba8d2d4df8eecdda4a0
  • alt-php70-recode-7.0.33-124.el10.x86_64.rpm
    sha:282ea05c5ea283c822b037056cd65e0ae6173c0d25d7d7bcb8476c0cf6dbd101
  • alt-php70-snmp-7.0.33-124.el10.x86_64.rpm
    sha:c9239138eb1fcdba48ad78ebbfc1d59102f8caa9b5260ef134a253f326ba7f9e
  • alt-php70-soap-7.0.33-124.el10.x86_64.rpm
    sha:c231a3010c6b7394cbd9d68d649a9cce72c118f19e26eecc2750aa7947db8087
  • alt-php70-tidy-7.0.33-124.el10.x86_64.rpm
    sha:5ef2436308790ace2069054d97126ee7c9017b6599ea0872c1e7d0b6114ddf59
  • alt-php70-xml-7.0.33-124.el10.x86_64.rpm
    sha:2209fac1515715ed98eaaf6ffeec1bb0fd34364e675de303469c85da8e4de7e6
  • alt-php70-xmlrpc-7.0.33-124.el10.x86_64.rpm
    sha:56332c7de1a73054f2a0c41eb6f02431a127496228ed74c3768cdf8a93b0203d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.