[CLSA-2026:1779437860] alt-php52: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 08:17:45 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys (5.2 backport applies addref half only; ref_map ZVAL_PTR_DTOR is intentionally omitted because ref_map is heterogeneous in 5.x and the dtor would corrupt the xmlNodePtr entries — see patch header) - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
Updated packages:
  • alt-php52-5.2.17-221.el7.x86_64.rpm
    sha:7eb8d320a1e64f10379daaf12f89a5568c18948ff70bd902164731f8ec08cb12
  • alt-php52-bcmath-5.2.17-221.el7.x86_64.rpm
    sha:71dc3a7d7870bb5ef83e84659530c838aeb4072cdf848db6015edc19f6c8e42a
  • alt-php52-cli-5.2.17-221.el7.x86_64.rpm
    sha:4aafab2f6376e13e5f0cd7f65e71cfc7abad1ff085b2dc23ad7cd4a18e177ec8
  • alt-php52-common-5.2.17-221.el7.x86_64.rpm
    sha:cdeed99e76117cf7f81480ab129812141d9c1cc3c54172b2211d7b7815b200e5
  • alt-php52-dba-5.2.17-221.el7.x86_64.rpm
    sha:5f50ada955f6ec818cd98e2b0b3d4b535b206564dfc137a1e80ab04adad4fd87
  • alt-php52-dbx-5.2.17-221.el7.x86_64.rpm
    sha:63054b1022e867dcc43ce2ade1731ded9baf331f471ae1b0b4f81d584f07eb38
  • alt-php52-devel-5.2.17-221.el7.x86_64.rpm
    sha:dbb6c587bbef947dd8596fb3b29fa309c74c80b69ffa29fa6c9441f8a7f698e4
  • alt-php52-enchant-5.2.17-221.el7.x86_64.rpm
    sha:4ef6ca9ae91f5e5e9eb8a4508f0b2af33667e7bf25b1e482c695a02cf5c436ac
  • alt-php52-firebird-5.2.17-221.el7.x86_64.rpm
    sha:00db0d1c6d63597dc4cc7fcdf6a9b3e3bd7b40458ab1de40dcef2b23ed3247fe
  • alt-php52-gd-5.2.17-221.el7.x86_64.rpm
    sha:4c161ff68b2f1758adf4ce4795c14d440a116ed441d434cce51ea41af12a6053
  • alt-php52-imap-5.2.17-221.el7.x86_64.rpm
    sha:61cca39227d44972d6eeeb286b7a2154788729b7ef464278e962502c9eb2e0dc
  • alt-php52-intl-5.2.17-221.el7.x86_64.rpm
    sha:81c21df1e794ce5683f3e9540075c0eabbdce139c3a7c6e42b955adbc20f7a03
  • alt-php52-ldap-5.2.17-221.el7.x86_64.rpm
    sha:7f7d842beed3eafc68a4c14a92070ff3dfae2bc16bb403df93743d82293f5f7f
  • alt-php52-mbstring-5.2.17-221.el7.x86_64.rpm
    sha:4088c039475c4232ca988d4cc3ec10e90a49966d06e33ff956b02b5682052716
  • alt-php52-mcrypt-5.2.17-221.el7.x86_64.rpm
    sha:6f275c086a61fe2bd514f0f06dda08f24a55f839ddfbee84166fee822446e0b1
  • alt-php52-mssql-5.2.17-221.el7.x86_64.rpm
    sha:7e974c7e6b8af03a7d15dfe76458e9e79e0b735ab9281acdc9c69363d83cd397
  • alt-php52-ncurses-5.2.17-221.el7.x86_64.rpm
    sha:6ab81cc42b1e8a8e4c98626201771406c2c944bd98bd4ef804bbd2225e499070
  • alt-php52-odbc-5.2.17-221.el7.x86_64.rpm
    sha:49504629ad1705d91d8afbc221c80bf7f5b6029d1ed695e0178dc2c1918ed429
  • alt-php52-pdo-5.2.17-221.el7.x86_64.rpm
    sha:dc37897b13a2e0e6989b466c3b47121f18745f54a58f33711d0f03154bede1e5
  • alt-php52-pgsql-5.2.17-221.el7.x86_64.rpm
    sha:34e2c509481b318390663e09aabab5c9580d87a7fd2777d1643b5644b76003d2
  • alt-php52-process-5.2.17-221.el7.x86_64.rpm
    sha:713285f920d1f1951d2bc7fe4cdb3ef35d75bf4eedcb31ee529949ba731027b7
  • alt-php52-pspell-5.2.17-221.el7.x86_64.rpm
    sha:39cfc638a93080d3b9a5d7a7679ba59a010709748755c6ddfd3f79b5fe8d274d
  • alt-php52-recode-5.2.17-221.el7.x86_64.rpm
    sha:489fdaad2e7860b371424f53281dd9a221f29beca9adf1d0a260444334375edc
  • alt-php52-snmp-5.2.17-221.el7.x86_64.rpm
    sha:c7990c2ea71bf778ce903c7bb58a90189f643bd70c689be8cc2c49b1841a7db4
  • alt-php52-soap-5.2.17-221.el7.x86_64.rpm
    sha:aa0bd5e27c3df3e85fc52a6f18680dab3260eb269ab00f8756d55e0aed5e4d04
  • alt-php52-sqlite-5.2.17-221.el7.x86_64.rpm
    sha:535baa9561ab4f7050504f2fd322b6955e8eb772fb9eb2e9287af96bccc8a26c
  • alt-php52-sybase-5.2.17-221.el7.x86_64.rpm
    sha:afdf57434a0579dd5e3575672cb2e912634dd97dc282e64913a1d118dc761ed1
  • alt-php52-tidy-5.2.17-221.el7.x86_64.rpm
    sha:d9ba490e9355ccab08380348410e1677400aec28695277695bd0c447ce3f2458
  • alt-php52-xml-5.2.17-221.el7.x86_64.rpm
    sha:5efa15eb33a62e7128bec63e7f0c469923798dd95c4cc538b0baea79ceec9a01
  • alt-php52-xmlrpc-5.2.17-221.el7.x86_64.rpm
    sha:859ef540f04d21c380048ee3cd9f697744d0d09bab5c5ef8d8fb7f79f13be1ec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.