[CLSA-2026:1779463609] alt-php73: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 15:26:53 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php73-7.3.33-57.el10.x86_64.rpm
    sha:b96a5ff06eccde55e84adcf6ddb399cc845ae88ef5d5413b7bbef0f3da2e622f
  • alt-php73-bcmath-7.3.33-57.el10.x86_64.rpm
    sha:4fb1ef050334ec4795dc72c9f6648508e4181f4858f535c18186102d0ea2b212
  • alt-php73-cli-7.3.33-57.el10.x86_64.rpm
    sha:d609c226a85329e1eddb86d982afc66f78b3bf76302889d0142f8af77407a44c
  • alt-php73-common-7.3.33-57.el10.x86_64.rpm
    sha:91eabc2f7888c7e14664e25e8423fd9da4634060c8ad3b9d73e30dc71107f739
  • alt-php73-dba-7.3.33-57.el10.x86_64.rpm
    sha:a980aa9abe193337585ad59627f3f2534373c894a9a1f8f88c11730c2f7c8b92
  • alt-php73-devel-7.3.33-57.el10.x86_64.rpm
    sha:bbf37833e1b2bd2ae9fe557d740c9b15b9f9ab436d67ead3c3b219df72c5211b
  • alt-php73-enchant-7.3.33-57.el10.x86_64.rpm
    sha:bb20c99e49097b69ac43411e90d92ae893b276f2b83f0f6bd9d68acbbfafd466
  • alt-php73-firebird-7.3.33-57.el10.x86_64.rpm
    sha:7342ed2c7bb948500c732c40bcd3de610db4e82f5d06ed81597a0b5a95d95275
  • alt-php73-gd-7.3.33-57.el10.x86_64.rpm
    sha:45c421f630210108febc4f75924dfabd6517fbd1777e532b2c02a5f2c04bbee9
  • alt-php73-imap-7.3.33-57.el10.x86_64.rpm
    sha:f03a37d4d71e679d791254cedba8bae79d632dcf29759c3216ad52784fc25e4c
  • alt-php73-intl-7.3.33-57.el10.x86_64.rpm
    sha:9ceb0a9d132a220f9d2473e869517088f57a586813f8a6e9dd627c9d25263a8f
  • alt-php73-ldap-7.3.33-57.el10.x86_64.rpm
    sha:f472647dfce607dba4eeb231291373ef4c092ae2d73832c76abf00b1aa1b81aa
  • alt-php73-mbstring-7.3.33-57.el10.x86_64.rpm
    sha:d020c53c459c1308c5b2e9d8007e5e2074a82d227bf7c6f25d7df3e1d980640f
  • alt-php73-mysqlnd-7.3.33-57.el10.x86_64.rpm
    sha:8b81bb0d3f15fff7853d3a7e6f27befd1983aebfebcdb90a9d83fe240f758960
  • alt-php73-odbc-7.3.33-57.el10.x86_64.rpm
    sha:965279260432151a64b0b66f58e490cb5b6b0ce53d944e3691c173164e872610
  • alt-php73-opcache-7.3.33-57.el10.x86_64.rpm
    sha:daec5b6913a63487d39181093efad3e8908f55277a4cfb33e621557e7ada654c
  • alt-php73-pdo-7.3.33-57.el10.x86_64.rpm
    sha:71cb50f24cabc3de0740acaccd4c29c770a6c1e49d396eece36b00ce8d6e62ed
  • alt-php73-pgsql-7.3.33-57.el10.x86_64.rpm
    sha:05248ff51b0840f21d186f60e92d4dac5833a6a95e8c11c68f655f4d5e21b12e
  • alt-php73-php-fpm-7.3.33-57.el10.x86_64.rpm
    sha:8610b63884701ccb081ab0cb386e785d6bec6a64d6e957515c940a0174731f08
  • alt-php73-process-7.3.33-57.el10.x86_64.rpm
    sha:214f7c89c672d89b943f1a30ff3ba7ef2b5e152a74f0bb5cc3c68e4827c5e658
  • alt-php73-pspell-7.3.33-57.el10.x86_64.rpm
    sha:7564ef7188407c8a1445e12c660d769e9e433716abceae561e5bcda7e0d20040
  • alt-php73-recode-7.3.33-57.el10.x86_64.rpm
    sha:faccdfd0a5619bec1406f8fb5dfd278070f1d278f123ff01d828e93bade96de6
  • alt-php73-snmp-7.3.33-57.el10.x86_64.rpm
    sha:070fbe7b9a8f4d4f051068701ecade410c092a22eee90ada1e00b43feca75c31
  • alt-php73-soap-7.3.33-57.el10.x86_64.rpm
    sha:ebefbb333c07308eddfc8dbd0977bb134f3c3287297360e0df643230278e376c
  • alt-php73-sodium-7.3.33-57.el10.x86_64.rpm
    sha:7f62e8c8472eb1c09d302f3033535c5719d5b36350ef5b3cf201d71bb3468ee0
  • alt-php73-tidy-7.3.33-57.el10.x86_64.rpm
    sha:95b90c8df2b0f27f13c85c01ebedb69a227629382e3da90a039eacfd8bcb9abe
  • alt-php73-xml-7.3.33-57.el10.x86_64.rpm
    sha:deb81a048de30ed89381cc24d299eba2783e604bbd97e3f3d3fd7c415d8c2b5c
  • alt-php73-xmlrpc-7.3.33-57.el10.x86_64.rpm
    sha:889d45453acdf74661eb9026bdee6f10085613097eae0a14e7c13f8039822b09
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.