[CLSA-2026:1779455158] alt-php70: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 13:06:04 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php70-7.0.33-124.el9.x86_64.rpm
    sha:a7e051555f854722b830c4c7fa1b7860f8f56de9769628e3ffcbc8bc430bb683
  • alt-php70-bcmath-7.0.33-124.el9.x86_64.rpm
    sha:49afecc383f500e89545ed29fb48c1f1fee84b17d4ebb377e45ff06b3a42493a
  • alt-php70-cli-7.0.33-124.el9.x86_64.rpm
    sha:511b15e7caa88bea3cdf6a80f6a752ff9d3a2d1c1ee55c942f9f29fcadeb9547
  • alt-php70-common-7.0.33-124.el9.x86_64.rpm
    sha:d197e32375024e3235a211df8baf9688093488b56d3cb09589d41ae586312654
  • alt-php70-dba-7.0.33-124.el9.x86_64.rpm
    sha:966dc7e92fdf9da985cacee7259ebd4ff409338339770ea81b609b7523acbeea
  • alt-php70-devel-7.0.33-124.el9.x86_64.rpm
    sha:fd4b4c4fb46f4e865edffafed5e3c7db0aa430e9d189cc6236858d66a742babe
  • alt-php70-enchant-7.0.33-124.el9.x86_64.rpm
    sha:f1986099bfc25cbc170d5bbfcf0b23b756e5161db54ca4203ce3a13c252b8486
  • alt-php70-firebird-7.0.33-124.el9.x86_64.rpm
    sha:04a665c7d62f0fc3a882496e23833a77efb5230b4e6fb66fecb5c0e45e37adbb
  • alt-php70-gd-7.0.33-124.el9.x86_64.rpm
    sha:540bf95bb8edad844a53e9078f09aa7adac16201edc7fff7f41cffeab453697f
  • alt-php70-imap-7.0.33-124.el9.x86_64.rpm
    sha:1fadd213a00dcab4ec8d9e9342f63afaf3691989aab2236c7c84e41897fabdef
  • alt-php70-intl-7.0.33-124.el9.x86_64.rpm
    sha:ca120eb471355e49930fa100482980a27d80f1d07dd83d5ea245c26a5905a091
  • alt-php70-ldap-7.0.33-124.el9.x86_64.rpm
    sha:9f29151156077b6d1fb74a3607263f53b3973c67a2686a963b0d9beabbb7b026
  • alt-php70-mbstring-7.0.33-124.el9.x86_64.rpm
    sha:627046219573b60061a288b0d9b9c9be0dce2cdbe48ddf86b4b530785e2d4d9f
  • alt-php70-mcrypt-7.0.33-124.el9.x86_64.rpm
    sha:ded5afbe39797927fcae1dfc84309806d3dd6bf60d94941c088a9222a4a5865c
  • alt-php70-mysqlnd-7.0.33-124.el9.x86_64.rpm
    sha:97a0a7307be09fbdc1e975a489c52c85dcc0df308477635c1d1a9d4d7acb87c0
  • alt-php70-odbc-7.0.33-124.el9.x86_64.rpm
    sha:77f817bb51981dc27e845affb7c6566b14b5cfe017350c7c61a0b92b3667b746
  • alt-php70-opcache-7.0.33-124.el9.x86_64.rpm
    sha:a81fbdb6f5bd1aff09d7b73cba993445f8172d16a4d707e966282af3c5273aac
  • alt-php70-pdo-7.0.33-124.el9.x86_64.rpm
    sha:73c60c993f0195c5a4386527a7ae14c123f7f03e77d0f885247962f2174d6ed1
  • alt-php70-pgsql-7.0.33-124.el9.x86_64.rpm
    sha:3b01641c90e6314cda1992ba8fe49d8c3ade545fb2c80bc1ee128c8a30df2c42
  • alt-php70-php-fpm-7.0.33-124.el9.x86_64.rpm
    sha:a714c593bcdba81a14aeba224528f4b60381117fc4ab8ba419bb64e933d5594f
  • alt-php70-process-7.0.33-124.el9.x86_64.rpm
    sha:526c410f7f7915f11992ba31c4613919fcb479915a7f78f9ef70a3ff3f5fd85f
  • alt-php70-pspell-7.0.33-124.el9.x86_64.rpm
    sha:f8f73a138a01caa66f8b5f7bc923f0429389f60ded06af48fe266bfd88c3195e
  • alt-php70-recode-7.0.33-124.el9.x86_64.rpm
    sha:5ca3a4b39bed949cf6fd1eb4789d9dc4f956e04cb31d8507c3f4a161110e041d
  • alt-php70-snmp-7.0.33-124.el9.x86_64.rpm
    sha:1d2ccb5a4eae6b7a3ca5c14c37446c34deab45ad35592753007422e76278defa
  • alt-php70-soap-7.0.33-124.el9.x86_64.rpm
    sha:8ea9781c08737e3fa8218a17c642c18936da98d52016c2dd11bdfc6d2cee3b97
  • alt-php70-tidy-7.0.33-124.el9.x86_64.rpm
    sha:dbb7173699a1a47511c90a0797666543fa0dfeb448265dc7571200a99a2cf74f
  • alt-php70-xml-7.0.33-124.el9.x86_64.rpm
    sha:8e7e61c09a38dcacd1b06f38736bc9a1066e22c3fc214449fd5eb2afab690635
  • alt-php70-xmlrpc-7.0.33-124.el9.x86_64.rpm
    sha:cfd8a245fbc6f59c6b02b256fc425899b78277ed289c748961645cf820c54522
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.