[CLSA-2026:1779293666] alt-php54: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-20 16:14:31 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys (5.4 backport applies addref half only; ref_map ZVAL_PTR_DTOR is intentionally omitted because ref_map is heterogeneous in 5.x and the dtor would corrupt the xmlNodePtr entries — see patch header) - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string (5.4 backport applies HTML entity escape to both HTML and JSON /status endpoints since php_json_encode_string() isn't exported on 5.x — JSON consumers will see HTML entities in request_uri/query_string fields)
Updated packages:
  • alt-php54-5.4.45-178.el8.x86_64.rpm
    sha:adabc273724affd288c5638d94c337a2c5757755537888660f8e16bf935c068d
  • alt-php54-bcmath-5.4.45-178.el8.x86_64.rpm
    sha:2b1d6c6005d0489443c1d53dc12738a62170f8e6ced3f217ca00dab0a7d42d5b
  • alt-php54-cli-5.4.45-178.el8.x86_64.rpm
    sha:90dd2ba200e5255ada3e6bcb1fb2998cd42ca4b4bb45856402525649f4d66a1e
  • alt-php54-common-5.4.45-178.el8.x86_64.rpm
    sha:1afe906110a9bd594632e733fa3ca87366a1c93da256f73a227b5fb16a2fdfb4
  • alt-php54-dba-5.4.45-178.el8.x86_64.rpm
    sha:442a90787975077a7572de87f5c62cdac83ce77a99769052303e2be5d703821b
  • alt-php54-dbx-5.4.45-178.el8.x86_64.rpm
    sha:75db642d302e355a0bdaf1a081a56c11bbac86fbb0b506f685b8dc83c2f47429
  • alt-php54-devel-5.4.45-178.el8.x86_64.rpm
    sha:0906a22d5208ba28317d4374adec7bd96216801074e42101664ed67e81e321c7
  • alt-php54-enchant-5.4.45-178.el8.x86_64.rpm
    sha:000889345d5d263a83605499ffe9a2bb19f741ffdc38485ee16eeffe1f6341cc
  • alt-php54-firebird-5.4.45-178.el8.x86_64.rpm
    sha:460026adeb80c3065427bf54e5ae35078502de1e19830e2052eb1c7c21b609bc
  • alt-php54-gd-5.4.45-178.el8.x86_64.rpm
    sha:3adac5ae8e197161867b591b75f54845444ee42002c7d93a62916fcf5a8ee257
  • alt-php54-imap-5.4.45-178.el8.x86_64.rpm
    sha:ba26538eb0a4754c95a3a45be91974e4745a0802156e6ea3a9408c4c8f8a4928
  • alt-php54-intl-5.4.45-178.el8.x86_64.rpm
    sha:150548989e84aef7cefb04a337b5f409f322948665cafca0d44e7d4fcf2ea4fd
  • alt-php54-ldap-5.4.45-178.el8.x86_64.rpm
    sha:4293a032d463f6c36e2f86583809ee5defa0d006b0645cb240a033d94d40eb83
  • alt-php54-mbstring-5.4.45-178.el8.x86_64.rpm
    sha:31191a82cf91bf66013780205487622ecfd089e43534c4060c622afbbd794646
  • alt-php54-mcrypt-5.4.45-178.el8.x86_64.rpm
    sha:91be3d3815fc3478f321bb64bf3e0c1b20be037ad9fd9e894ff510d2069b2a42
  • alt-php54-mssql-5.4.45-178.el8.x86_64.rpm
    sha:f1d1bb435403cf5e5e2dc9519803c98c32c0ac09ccd71d4b16e217eb65af9878
  • alt-php54-mysqlnd-5.4.45-178.el8.x86_64.rpm
    sha:261bbfc66e87320ef46a4951c3f1e4d3c332396443430f7f2a7b3a3359e67fb0
  • alt-php54-odbc-5.4.45-178.el8.x86_64.rpm
    sha:d1e6c689750284b517b496f280ac17cffd7e7dc812c27acbb55823b2cf7e9ed2
  • alt-php54-pdo-5.4.45-178.el8.x86_64.rpm
    sha:e34c95822f980a8a94eb9ee5bf1eba7d376c8691df29d1ae475777f32fae0ab2
  • alt-php54-pgsql-5.4.45-178.el8.x86_64.rpm
    sha:552372e7412368dd64cc9db4f57f430bab45e47e2d5d154b87784d17e2c1f0bc
  • alt-php54-php-fpm-5.4.45-178.el8.x86_64.rpm
    sha:83f5cab78d8ed11fdb642e3195ed73f6f14afd1dfccb902ad267f83f6b7f6b58
  • alt-php54-process-5.4.45-178.el8.x86_64.rpm
    sha:85cb1aa4bbf42aa81f9fe48ec3ef368c37c5d4fefb5fdd532fba4b6d5dc7c1f6
  • alt-php54-pspell-5.4.45-178.el8.x86_64.rpm
    sha:8ff72fc47a1740cc7c82567adb6a6d64ad39c4337a7a00bd89facfe5c460541d
  • alt-php54-recode-5.4.45-178.el8.x86_64.rpm
    sha:e1ee5d213cc71977eaad0e3c29e5c7d40ba7c47f6089c78fef6e522eee4792d0
  • alt-php54-snmp-5.4.45-178.el8.x86_64.rpm
    sha:6b3b54ef2c3e58a9aef85a2403eb35226379df372d916d0eaca259976f230e4b
  • alt-php54-soap-5.4.45-178.el8.x86_64.rpm
    sha:23eb8911c31c0dfc015cd44be0650db420c5e73b1ae147814bd40ab5d97e1c53
  • alt-php54-sybase-5.4.45-178.el8.x86_64.rpm
    sha:803c14b80762ff9eb5fcd2002e2693b3a11e8af7fa724f9277dd4ffce9a9e40b
  • alt-php54-tidy-5.4.45-178.el8.x86_64.rpm
    sha:c25bc05b26fcdf25b5bc0c973e79ab5370b575d7233a4ec66a9c3c8b19c0db7c
  • alt-php54-xml-5.4.45-178.el8.x86_64.rpm
    sha:bf746e8222b34667075fcc3251f4e3fee6449b9b919e3e4b93a05d255372bf44
  • alt-php54-xmlrpc-5.4.45-178.el8.x86_64.rpm
    sha:60f078658068886a88626c71c8a3e3210f70ac3bd2d5be549c40ddd8bb97b874
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.