[CLSA-2026:1779438274] alt-php52: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 08:24:39 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys (5.2 backport applies addref half only; ref_map ZVAL_PTR_DTOR is intentionally omitted because ref_map is heterogeneous in 5.x and the dtor would corrupt the xmlNodePtr entries — see patch header) - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
Updated packages:
  • alt-php52-5.2.17-221.el8.x86_64.rpm
    sha:78f30b3f40408e3bee5b21c2c7fd1a3069d5dae2cd93a87e0cb89dd3a6c32eb3
  • alt-php52-bcmath-5.2.17-221.el8.x86_64.rpm
    sha:afd265608535c796a9e63946211d222853c7c074963eac41cf39ce753c751ee7
  • alt-php52-cli-5.2.17-221.el8.x86_64.rpm
    sha:a1dc60f9745eff63a6fc70fbc070e8dcefd966d6b54ad0bc9efac3c10f8b10ca
  • alt-php52-common-5.2.17-221.el8.x86_64.rpm
    sha:613009046f6c25a394318e2a2b49db6af912cb61ab94eed5937cb2da415150f4
  • alt-php52-dba-5.2.17-221.el8.x86_64.rpm
    sha:b7665cc42370b1e073cc2c76d345c2861665c7e535b27cd868df94dffa9cc459
  • alt-php52-dbx-5.2.17-221.el8.x86_64.rpm
    sha:f74bc18a7fe91ab71d219fb76ecd978b6dd983e7b5841d64800c722276d20ad7
  • alt-php52-devel-5.2.17-221.el8.x86_64.rpm
    sha:58444ddafc99e1ac608b070d810eb83571262d586e7370b652a5ba5dbbc77366
  • alt-php52-enchant-5.2.17-221.el8.x86_64.rpm
    sha:96b2278ff2d2e23807e896913c0be05a32b3909584d4ad1cd2e702720f78fcea
  • alt-php52-firebird-5.2.17-221.el8.x86_64.rpm
    sha:ac6fcd7e0160dcbb885feef972b809db0721e54ebdcc8a12cdc8491fd6da8ec1
  • alt-php52-gd-5.2.17-221.el8.x86_64.rpm
    sha:744033b30cabdfadcea32e6c2f075a346d87788bad5a0463ffdd63160474ff2c
  • alt-php52-imap-5.2.17-221.el8.x86_64.rpm
    sha:8dbed5a9c55069d0e617fad7eb4bc87798009d67b8a9ab1d4c9cb7e4359bf3f7
  • alt-php52-intl-5.2.17-221.el8.x86_64.rpm
    sha:7b088d455101c2379b255115229677d7859b98913a7a4d050a82c4dd68c3cb60
  • alt-php52-ldap-5.2.17-221.el8.x86_64.rpm
    sha:9344505aa1fb532cff8b382d15e1f568105911b8029cb4f11d3b67b3c7420452
  • alt-php52-mbstring-5.2.17-221.el8.x86_64.rpm
    sha:1f96bd9f01ca7f6e441ae096bd5334205a94b487946095d8a8a64c0d3e110f51
  • alt-php52-mcrypt-5.2.17-221.el8.x86_64.rpm
    sha:1ca801a297c92b32113e5ad133ed9093d4c8b0ff7b49212cef239487b4b5ed99
  • alt-php52-mssql-5.2.17-221.el8.x86_64.rpm
    sha:846b7558454ce691290e5f2b67c68f0050b367b1e567397ac12181a1fea7180b
  • alt-php52-ncurses-5.2.17-221.el8.x86_64.rpm
    sha:7110017e848d878c3bf7f161ba264cf3312b4b853ab9c4c9cff8b97614d7db4f
  • alt-php52-odbc-5.2.17-221.el8.x86_64.rpm
    sha:39ce40d0684dbade716c7a801ae44afea2e49b878d2b802e4652e08419647010
  • alt-php52-pdo-5.2.17-221.el8.x86_64.rpm
    sha:748e998fafdb678bdd9ab39b61a95dd6f846f37cbf1ba442819f020d6637c9db
  • alt-php52-pgsql-5.2.17-221.el8.x86_64.rpm
    sha:a5ecc7c7be6ea63c1b6afc5a421742c7983d07fe7499d434e40b02c7cba3420e
  • alt-php52-process-5.2.17-221.el8.x86_64.rpm
    sha:7de59dc6a9797cd9c6a6d1522fd85e208c247b2397d69264afa1c20f687ed8b1
  • alt-php52-pspell-5.2.17-221.el8.x86_64.rpm
    sha:746aa3a7b1ba61cb5b855eb2efa9db01706f9c5f89e8cf491af205c7df699a97
  • alt-php52-recode-5.2.17-221.el8.x86_64.rpm
    sha:654a1a7d6c69f4ece155452644eed62d952d690ca0cae5e399bd976e9e3f04d3
  • alt-php52-snmp-5.2.17-221.el8.x86_64.rpm
    sha:362b99e1c8619e80103070728693613a31a9fd6f7faeaf6ea40b2d9749f23226
  • alt-php52-soap-5.2.17-221.el8.x86_64.rpm
    sha:7d8608fd3cd505b1e8cafe5fe3f8f084031121ad3915165d0887d2b56efbc2ee
  • alt-php52-sqlite-5.2.17-221.el8.x86_64.rpm
    sha:7e81d5413c091f1335768076846985f3a5110e15b0299d14ff2608d850834781
  • alt-php52-sybase-5.2.17-221.el8.x86_64.rpm
    sha:80f922b05590909ba21abcdee9e189bef33d412c2dc01c7c15ef8db2060ffd23
  • alt-php52-tidy-5.2.17-221.el8.x86_64.rpm
    sha:127122a017d512959a382298690e061f9782f3054764722dfdc6b7b8440a74fb
  • alt-php52-xml-5.2.17-221.el8.x86_64.rpm
    sha:a6bcf5333af0ec5256f5af2ac0853deaa2955b4c17470b84124cf0d428fa7afb
  • alt-php52-xmlrpc-5.2.17-221.el8.x86_64.rpm
    sha:b4d24533061c6bc5f3d4f6344578902a9a40f7e64a51657430d59d7c0cdd5ff5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.