Release date:
2026-05-20 13:30:01 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
(5.3 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
intentionally omitted because ref_map is heterogeneous in 5.x and the
dtor would corrupt the xmlNodePtr entries — see patch header)
- CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
- CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
- CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
(5.3 backport applies HTML entity escape to both HTML and JSON /status
endpoints since php_json_encode_string() isn't exported on 5.x — JSON
consumers will see HTML entities in request_uri/query_string fields)
Updated packages:
-
alt-php53-5.3.29-193.el9.x86_64.rpm
sha:e56019b28c54293a0cfb392a0581244e2ee6404412e0e6a9aeefe19f688aaa52
-
alt-php53-bcmath-5.3.29-193.el9.x86_64.rpm
sha:95f2fbe2f79faaf6ee7cfe2e8f9632938e834d677194b416154dc7eada07c096
-
alt-php53-cli-5.3.29-193.el9.x86_64.rpm
sha:aaf4cc73e59c0ffa0fa2ff3e8a1c64e796ba8316f44de737b1f1344763bfcd85
-
alt-php53-common-5.3.29-193.el9.x86_64.rpm
sha:8bc224cdb1e61d4ce0149389300817113e52512dd76ac41d8f3e9699445ffc55
-
alt-php53-dba-5.3.29-193.el9.x86_64.rpm
sha:b66f557c98226f6da16f631eb573a5d2609ff5e02288a5ae2220d201263eeff0
-
alt-php53-dbx-5.3.29-193.el9.x86_64.rpm
sha:dae357a817a83e300ef214ece2d20b5717fd66676c85b02088420cc944d7c9ea
-
alt-php53-devel-5.3.29-193.el9.x86_64.rpm
sha:6b443526db86a1a7368d76c217f238fabe141eea3038f36fa0e4e9588b1ecb27
-
alt-php53-enchant-5.3.29-193.el9.x86_64.rpm
sha:9d5688519ca12008e10c4cf07a0d0cec4eae811ded80ca77767437bdeaf9b0eb
-
alt-php53-firebird-5.3.29-193.el9.x86_64.rpm
sha:4545ccbd13ecbfd3dcbac041336cf90b24973fc1667290e419d7c705fc8c30b5
-
alt-php53-gd-5.3.29-193.el9.x86_64.rpm
sha:4ce068a36ac03808103df7d69b7a5539e3cc40fa5aa00b44fdfa22f85d7164d8
-
alt-php53-imap-5.3.29-193.el9.x86_64.rpm
sha:cbb259067912e1017dc73a2fb2a519d9d8050ed9d982bf6a14a2b15b61fc4e32
-
alt-php53-intl-5.3.29-193.el9.x86_64.rpm
sha:9fed7931df63cf52041c70357a92d437422bc5fd1db52609a363762e16a513b7
-
alt-php53-ldap-5.3.29-193.el9.x86_64.rpm
sha:d0d89489f95a9cf1420c38996efa0ca29b1411a5f90d8f6dfaaab4ab43e4e6e2
-
alt-php53-mbstring-5.3.29-193.el9.x86_64.rpm
sha:45759c99e6b44a88c00b801f2908576eea0bfca0f5fd827862cc8452d17c328b
-
alt-php53-mcrypt-5.3.29-193.el9.x86_64.rpm
sha:06289fbee012062daad40500d71a36e1710ccebbefddd807d17500476e5fa2aa
-
alt-php53-mssql-5.3.29-193.el9.x86_64.rpm
sha:11a9531750d9d3ecb4be8a81a5914f69a8a348fce3b6dcbcdffe74f9e3a9e89e
-
alt-php53-mysqlnd-5.3.29-193.el9.x86_64.rpm
sha:dbf1464db346ba87c04eaf0223fe8be8a62d52b99a86e9f7badf24a4005e18a9
-
alt-php53-odbc-5.3.29-193.el9.x86_64.rpm
sha:f31eed9bbfe42f7b1ffb94a04162088d9641aae2d425ffa4c44b4feb6214a52d
-
alt-php53-pdo-5.3.29-193.el9.x86_64.rpm
sha:623698f5112020aac7c11389125daa79421a728e7f21bb5e8b324e3a06e8a8c4
-
alt-php53-pgsql-5.3.29-193.el9.x86_64.rpm
sha:e305264b53834b1c8ccea595908cacd920f288ab89bb5d84930ba0a4c3ad9456
-
alt-php53-php-fpm-5.3.29-193.el9.x86_64.rpm
sha:db56acb6066dd86fa4e3bd9124d06c96736ddc92637228c12ff20361a153bf63
-
alt-php53-process-5.3.29-193.el9.x86_64.rpm
sha:2c8efd5770386994fed3eb715402c02e56f9497717808ecf03f7c0db8e47f205
-
alt-php53-pspell-5.3.29-193.el9.x86_64.rpm
sha:2dddfa5247593aa48c1aa033f129e0a3449b5748ef8725067243f4420de0472b
-
alt-php53-recode-5.3.29-193.el9.x86_64.rpm
sha:7cf478827acd0689bc3b9c7fcb79ac23a439e8558d0ee26207c5e682b0a887f6
-
alt-php53-snmp-5.3.29-193.el9.x86_64.rpm
sha:2a303cebceabce34ab14a9cc52b2802fe1fb5d713222831f64365e243e03ae88
-
alt-php53-soap-5.3.29-193.el9.x86_64.rpm
sha:d33182c8d97bf2d021da04646f4316611aa8f4dc832ebf52ffca2c088a2c107f
-
alt-php53-sqlite-5.3.29-193.el9.x86_64.rpm
sha:2a3b04714f6cd6c5359f77d125dd93743e300e09570c7e5e3d02535588e01a8a
-
alt-php53-sybase-5.3.29-193.el9.x86_64.rpm
sha:dd7ba493a513c5d01504a207bb203739bfffb950b459cd047d6cc5f614ea6aff
-
alt-php53-tidy-5.3.29-193.el9.x86_64.rpm
sha:90445aabf1e09a0463360bf0a3d7e1f767f5a342e680404821f7e3209be425d9
-
alt-php53-xml-5.3.29-193.el9.x86_64.rpm
sha:8f49657dbe9cf068be23282a90d8ed022e84ec3ec43cfbad5112002b217f00c8
-
alt-php53-xmlrpc-5.3.29-193.el9.x86_64.rpm
sha:d7072c344fea2809cf5728b6308ae1420cef4e6e35aa605fa3f55355a65d842d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
