[CLSA-2026:1779451633] alt-php74: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 12:07:19 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php74-7.4.33-54.el7.x86_64.rpm
    sha:051134d9b051bb9b065857a44c1da61aaab3135e884e46529d67325b30ac1069
  • alt-php74-bcmath-7.4.33-54.el7.x86_64.rpm
    sha:ef8712503af5a85fe5af8882cd5ac69cdf557df78372d11df11a69d125d6db32
  • alt-php74-cli-7.4.33-54.el7.x86_64.rpm
    sha:2bb05146abf0dc4d7b4bdba6cc86020defcb1c1066a79e074a606e78977a63d2
  • alt-php74-common-7.4.33-54.el7.x86_64.rpm
    sha:80c0fccd827a705bff536206acfb3b0d883b0c000046ecd05c4c76376ac7b547
  • alt-php74-dba-7.4.33-54.el7.x86_64.rpm
    sha:156942fdbfd782bf543531b77ed0a1d43bc5ec5cde180df9363a28f643a8b257
  • alt-php74-devel-7.4.33-54.el7.x86_64.rpm
    sha:80658d8ff26a631ddeeba93bbfc2aea6e2936298da725ea781f282be65f6b1ef
  • alt-php74-enchant-7.4.33-54.el7.x86_64.rpm
    sha:653a45e931e86ccc6d981af62c2829214ee100907c7cdfab48122e7609666e11
  • alt-php74-firebird-7.4.33-54.el7.x86_64.rpm
    sha:599a411131cc5617a1e4414426732621fe9bbc11165700098ed0b99a6f4840ab
  • alt-php74-gd-7.4.33-54.el7.x86_64.rpm
    sha:7f61415ded8f6e266b8a8f0c5b45a04d3d2d76aff2c0360d6672e2d66b98190c
  • alt-php74-imap-7.4.33-54.el7.x86_64.rpm
    sha:39ac22f7929a0d0eeba472b641ec199169eff5676c4946015581bb8991035fb5
  • alt-php74-intl-7.4.33-54.el7.x86_64.rpm
    sha:0d68ae1bb9a145c458e41b0dac61bb1173844c1b21985da7aa2f25cb33f45911
  • alt-php74-ldap-7.4.33-54.el7.x86_64.rpm
    sha:b7c428d7e169bd8a0ef65e967a811f269ce58b381137f3d1b2921847fe5dfac7
  • alt-php74-mbstring-7.4.33-54.el7.x86_64.rpm
    sha:55170b08a146ff700c04f3d1497ac030c04f6bb02fecce6fe968ee4e646179a4
  • alt-php74-mysqlnd-7.4.33-54.el7.x86_64.rpm
    sha:4733fe0ba60f714b4d99ea7265facd9d9fb47f925ec9579a3eb4cb05b7994ce1
  • alt-php74-odbc-7.4.33-54.el7.x86_64.rpm
    sha:f02169be8c596be2d92551a5d44e3fa4ae8a007e6df6f90fe95fb6e90f2722d5
  • alt-php74-opcache-7.4.33-54.el7.x86_64.rpm
    sha:a42f5f2fcb45923a81e28766aa904ef540ad0b2f24050c0709f0959ae14e8d0c
  • alt-php74-pdo-7.4.33-54.el7.x86_64.rpm
    sha:5547e85adda0d9f6d9b2677848a8ebaf0e1ac4500b8c8952bfae35852dcd8468
  • alt-php74-pgsql-7.4.33-54.el7.x86_64.rpm
    sha:678d64c2db5e1d15b31d39263d1744df5c9a407eacf21312ee91ef7a4327ed5d
  • alt-php74-php-fpm-7.4.33-54.el7.x86_64.rpm
    sha:e6e83153fa754410fc5b4a98b058ab70d77e6f35c65b8c8305961e4a5b372ad4
  • alt-php74-process-7.4.33-54.el7.x86_64.rpm
    sha:e97afc5755a516973ad5ecc85369d63a5bf4f540f260c9f565154e1a49c57ec4
  • alt-php74-pspell-7.4.33-54.el7.x86_64.rpm
    sha:233ef4bfa1ea1658677e316caa6eab12e9970fa4731f3e977d8d173facf9c2e6
  • alt-php74-snmp-7.4.33-54.el7.x86_64.rpm
    sha:b27b949cb19f9628dd0b06c4cbf9aebdfacb2a1449d526dc5658be1d1f2296bc
  • alt-php74-soap-7.4.33-54.el7.x86_64.rpm
    sha:78a954b97e9c4cab27d84764d72a7f91cc1f6b7ae37d059580cb98b4fcadd4d7
  • alt-php74-sodium-7.4.33-54.el7.x86_64.rpm
    sha:bbd4717bcf6412a2c7449d0b0077603fbd2d4b12ee4c579d5ef0317a57e4626f
  • alt-php74-tidy-7.4.33-54.el7.x86_64.rpm
    sha:5d9e5d52ca0b22a090cbcd23157f00239a4bc6343bb08798145b45f7fb5f3c4c
  • alt-php74-xml-7.4.33-54.el7.x86_64.rpm
    sha:4b3e7155235e490034293fe9e09e5b4d211b3fe05028322cb4fda564186da94c
  • alt-php74-xmlrpc-7.4.33-54.el7.x86_64.rpm
    sha:723bdc7144965d66792ef3312292dffe6d8f014f8ccacd095f42bca4ee923338
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.