Release date:
2026-05-21 14:36:04 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
(5.6 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
intentionally omitted because ref_map is heterogeneous in 5.x and the
dtor would corrupt the xmlNodePtr entries — see patch header)
- CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
- CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
- CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
(5.6 backport applies HTML entity escape to both HTML and JSON /status
endpoints since php_json_encode_string() isn't exported on 5.x — JSON
consumers will see HTML entities in request_uri/query_string fields)
Updated packages:
-
alt-php56-5.6.40-122.el8.x86_64.rpm
sha:34f6103ef51ea563801935f2f0dbb6f77fcdf9fd60838baf76ff892f6a91438c
-
alt-php56-bcmath-5.6.40-122.el8.x86_64.rpm
sha:8c789016126d8e716c1c9928b1d5f52a3baae93f9ed9ae80052b482e6fbd5964
-
alt-php56-cli-5.6.40-122.el8.x86_64.rpm
sha:b74ddfe05d0a78c0ad4faae8d8520fbb71f333ee48fdb698ba71388a6ee4dd03
-
alt-php56-common-5.6.40-122.el8.x86_64.rpm
sha:9ba8baaf51d0cb4b01e1b96645e4c1ae3d610c68fd2315aa2ae1f4a5330a59dd
-
alt-php56-dba-5.6.40-122.el8.x86_64.rpm
sha:9b422c086d044b54a2343ade49a7fc195f70b300dbaa332ef8080fe3e37f9a37
-
alt-php56-dbx-5.6.40-122.el8.x86_64.rpm
sha:08bf15186e318bc889c7418adf31dd94e594bdd3784bbe89f20d37c4f590c602
-
alt-php56-devel-5.6.40-122.el8.x86_64.rpm
sha:db7e483c8740ef5de6505d415158b3e119f17b47549a613fd7dc8f78de55a344
-
alt-php56-enchant-5.6.40-122.el8.x86_64.rpm
sha:cfb6b146bdad9911c622af4f685773cc32f8dd78f5596dc9bda098c157b99d3c
-
alt-php56-firebird-5.6.40-122.el8.x86_64.rpm
sha:d1acc5b99ad749137d55fcc0a1f9e75ec9d50cc5831465749dfe4087fb99cc5f
-
alt-php56-gd-5.6.40-122.el8.x86_64.rpm
sha:dd4060767ccd59ddf3c2b135aff486b921d10110872071b999c0a95447c40af6
-
alt-php56-imap-5.6.40-122.el8.x86_64.rpm
sha:01490ace7a48b733a5f2d42a6b1716e6fbd8b328c378a742106d469f39c1269a
-
alt-php56-intl-5.6.40-122.el8.x86_64.rpm
sha:8067f79ba2e35d9aa305b7fffd65e405d08a0215179548a7161aef72501b4140
-
alt-php56-ldap-5.6.40-122.el8.x86_64.rpm
sha:e1823867115ce4af3de1d739e0daee09df8d352138867d778af26b5a3a09b0bc
-
alt-php56-mbstring-5.6.40-122.el8.x86_64.rpm
sha:6cced16cf468589cf21f19bf61ba956158ebeb267412cc0804908b40424b506a
-
alt-php56-mcrypt-5.6.40-122.el8.x86_64.rpm
sha:c8c5631b0535977aa63c8e90be3d80714c02dc4ef6bcefa2c6847d9a33b60120
-
alt-php56-mssql-5.6.40-122.el8.x86_64.rpm
sha:961ce12d781544f2fd53dc218df7f3473a995352090511fb8677c6ded9628328
-
alt-php56-mysqlnd-5.6.40-122.el8.x86_64.rpm
sha:7d1b1a99d93a1251af7411bf3f30bcd7e22ba523dba1f7b07e4e0b0fb3d88427
-
alt-php56-odbc-5.6.40-122.el8.x86_64.rpm
sha:b99133195981f5d5d2927c0220e26321f6dc3ef31e3761f6a3f0b48d9aa5c44f
-
alt-php56-opcache-5.6.40-122.el8.x86_64.rpm
sha:8eaabd03079d13b95ff88fc469304001e8979db8660a7ef50d4e37ec5f7483f0
-
alt-php56-pdo-5.6.40-122.el8.x86_64.rpm
sha:40993409b323ed7609aecf2362e2973bb56f7c23befb228a896006883d122537
-
alt-php56-pgsql-5.6.40-122.el8.x86_64.rpm
sha:e4a09182c3bf14ce8cc658c49ecd80e63dd768fe707b5f8fac90ba65217bff70
-
alt-php56-php-fpm-5.6.40-122.el8.x86_64.rpm
sha:76afd42933b8c66c8f323655cc6092ea04ead88570df4efee30ac22aec4679e8
-
alt-php56-process-5.6.40-122.el8.x86_64.rpm
sha:5caf11337ac3af975e6986e997459ef944bf914514de609c082ff3eeac6cb9a9
-
alt-php56-pspell-5.6.40-122.el8.x86_64.rpm
sha:bd23915ad32225b9b55de570ecc94a60c37b84b50933aa096f6c6ce8a21cdc8b
-
alt-php56-recode-5.6.40-122.el8.x86_64.rpm
sha:e2ac1415a00b3ef555b3d53e1ba4fa8d48f76827a498e7473345b56dccb4276e
-
alt-php56-snmp-5.6.40-122.el8.x86_64.rpm
sha:e6d2aafac5380d6c8f3bdebb24e415e5bdc34b2f77804e9a0e168d7b17ef03b8
-
alt-php56-soap-5.6.40-122.el8.x86_64.rpm
sha:dbe17a4de27ab227ecd12de29bb65887bac1c4b5a54b902673f4e3dbbb39a509
-
alt-php56-sybase-5.6.40-122.el8.x86_64.rpm
sha:f5c8cce16989d242b165c79492e207750fbabb0247c5016fdbf461061df1001b
-
alt-php56-tidy-5.6.40-122.el8.x86_64.rpm
sha:b2537b8246e4a8ba7bfa7a379c1f65fc4109b1e3427f10fcbdacdb7919a4b7fb
-
alt-php56-xml-5.6.40-122.el8.x86_64.rpm
sha:a48dfe11a58d8cf7b90341e95b25e3cfd2fcb11d9d2add184e6e6600cf2ce403
-
alt-php56-xmlrpc-5.6.40-122.el8.x86_64.rpm
sha:b0d644278c13c3cfcb66ab85b3ce20ea6e9f2f51e7091da9e33511c56b202a86
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
