[CLSA-2026:1779460916] alt-php74: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 14:42:01 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php74-7.4.33-54.el9.x86_64.rpm
    sha:86f9ff5a6aecdd2845f45793fa636074a2d523efbebda4e2aef9655fb415ef60
  • alt-php74-bcmath-7.4.33-54.el9.x86_64.rpm
    sha:03fd4705d1d3391047bb8e4ee2cb4967f87c21db009eeef908fd737d38376d91
  • alt-php74-cli-7.4.33-54.el9.x86_64.rpm
    sha:e77ac5a9a098a6b147b2615898dad2c43bc165140029c66bdafc164fea72cfd2
  • alt-php74-common-7.4.33-54.el9.x86_64.rpm
    sha:49d270f34d086f997ea3597806b0e8b614eda015458cc3e74fc2b2b153d1d48f
  • alt-php74-dba-7.4.33-54.el9.x86_64.rpm
    sha:d7715c4f677d8a9e11e6df0763a98ef7723aa2ab94aca152ef43fa8cc562c5c4
  • alt-php74-devel-7.4.33-54.el9.x86_64.rpm
    sha:f4c02840b034bd0d8c34397aaec85e729a2fbe00e7a3764c9c2800f760dd56aa
  • alt-php74-enchant-7.4.33-54.el9.x86_64.rpm
    sha:025a06565ea670ea73cfc9e4e80acc4c871e5dc511807c625aa8537b5e2da9f3
  • alt-php74-firebird-7.4.33-54.el9.x86_64.rpm
    sha:baa08200208b5975ff998bf7a64d6ac2e725639cd15bde83e0cc258e88e293a1
  • alt-php74-gd-7.4.33-54.el9.x86_64.rpm
    sha:8b103a4f2de2d18f9c52d513e9c6981735240983d759e84855d957dea606de3f
  • alt-php74-imap-7.4.33-54.el9.x86_64.rpm
    sha:170f3becd8b2bfae5a1739170d0e574a6f908cd9843140ed5fabcfc962478063
  • alt-php74-intl-7.4.33-54.el9.x86_64.rpm
    sha:4dfc1938e8eac1ad52df6392c20079d8d9cddeabd245d46be4a0b1a2923730be
  • alt-php74-ldap-7.4.33-54.el9.x86_64.rpm
    sha:05fc1c7119bcf1b5dc584bd0defa378a9729a42dce0b1cc528588c7b54d74ed4
  • alt-php74-mbstring-7.4.33-54.el9.x86_64.rpm
    sha:271d04b272ad9c8a82fe61add390f7f93d4968a18fb2a459c8f0fc1a5ee5225b
  • alt-php74-mysqlnd-7.4.33-54.el9.x86_64.rpm
    sha:71d08aaa01ef751eabeee74aaf285dd76c8afd94083aa918976cc3a3544977b2
  • alt-php74-odbc-7.4.33-54.el9.x86_64.rpm
    sha:aec08261d5c8db88355c9d6e4db9b2f199381d80d504c888984f3652c93eed0b
  • alt-php74-opcache-7.4.33-54.el9.x86_64.rpm
    sha:e05dc7cfca508eda259481e20fb48f63517ca33486ec509fa1c34592af3844cd
  • alt-php74-pdo-7.4.33-54.el9.x86_64.rpm
    sha:3eaf24aabfa7454416cb675659cd9985a2e404226131cd1bacc738abf85b6719
  • alt-php74-pgsql-7.4.33-54.el9.x86_64.rpm
    sha:0652b169bde86e365ba306fe0f1238b6f6c1c2a280e31855ddebbdde784494b9
  • alt-php74-php-fpm-7.4.33-54.el9.x86_64.rpm
    sha:8b1b0721f41c4e85a47e63e61841d33eae2b47ec745097c5632cb3d19b6e3dc2
  • alt-php74-process-7.4.33-54.el9.x86_64.rpm
    sha:685489c33e288166a05fa43bc24f5e814cc6fe78cf7aa9d38ec8129165a5296a
  • alt-php74-pspell-7.4.33-54.el9.x86_64.rpm
    sha:e9833f4f7e3220d74c3db6c8306c1f2c32c0172fc807ecdb18d3af754e7ad40c
  • alt-php74-snmp-7.4.33-54.el9.x86_64.rpm
    sha:c79015724a4c55ca5906881d0a77f954d8ef65c1a9de8301c3cd40fce7234836
  • alt-php74-soap-7.4.33-54.el9.x86_64.rpm
    sha:f537789ae0c694dcba5e9672750430bd9ffb98ebc76cb08925f136eedf91b5cb
  • alt-php74-sodium-7.4.33-54.el9.x86_64.rpm
    sha:99a940ff259a220655fb2429a3cb5f840ff6e9d8b9d73632b6d982f167b0ae7f
  • alt-php74-tidy-7.4.33-54.el9.x86_64.rpm
    sha:139352c140fb0ffb1124122e7530ea3731c05ed6f0caa4ff73a8d280d5b3de5d
  • alt-php74-xml-7.4.33-54.el9.x86_64.rpm
    sha:4bd5effdf304dd37827c885e0e2c494d433a42d87a93aae66fffeac1a60df2d8
  • alt-php74-xmlrpc-7.4.33-54.el9.x86_64.rpm
    sha:ec7b30a2fbb9c26618b4b8d9f0616d4d9e196cd59f82ce9d7b2721e36cd250d8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.