[CLSA-2026:1779471198] alt-php74: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 17:40:48 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php74-7.4.33-54.el10.x86_64.rpm
    sha:a19f65c66e9409785050fa95b4288e144c9f9b41080e2bae4d757449ac59ecd1
  • alt-php74-bcmath-7.4.33-54.el10.x86_64.rpm
    sha:55bf526f058a47d185d6bd094606bff6f65c49863cd232b642bb2376c6125b0a
  • alt-php74-cli-7.4.33-54.el10.x86_64.rpm
    sha:2bd5901e5d2571b44be9b526719055109a84f1a26c14aa308415a517d19c9dc9
  • alt-php74-common-7.4.33-54.el10.x86_64.rpm
    sha:25c818f6975578a82a29a4e0db1ab238388d80ca551f5acd80d53a7032407856
  • alt-php74-dba-7.4.33-54.el10.x86_64.rpm
    sha:a39c4db6b0426dd1f9839025f0057b0f812d4b6529b7c7a532cee92ebca638e2
  • alt-php74-devel-7.4.33-54.el10.x86_64.rpm
    sha:e45383115fbaeb5cb7e0199c6f36ca6e7b1c8dd8caeb16f9e6eae7bec25621bd
  • alt-php74-enchant-7.4.33-54.el10.x86_64.rpm
    sha:e0b892155aaa34ea5fde350283bd1e4958db5f19bb663949e4b8b289fd35a4cf
  • alt-php74-firebird-7.4.33-54.el10.x86_64.rpm
    sha:3d004990eb483339a0455ad01a59e8cd8ff9917d912ec2236367b9efd4eddf6f
  • alt-php74-gd-7.4.33-54.el10.x86_64.rpm
    sha:b0ea3d457fdcaa153e52b8805f9288245cfbf5d0f61501dc5afcf271163360d1
  • alt-php74-imap-7.4.33-54.el10.x86_64.rpm
    sha:f4a41ef7ede287c41c7f48457ddbcefe6a22feea67a8e173e6a7df660628b9eb
  • alt-php74-intl-7.4.33-54.el10.x86_64.rpm
    sha:c7ff249f52fc5df39847ea640c226694c0dcf15844d4bdbb3cbc26cdf32bd8d6
  • alt-php74-ldap-7.4.33-54.el10.x86_64.rpm
    sha:9ae706efbf5f4ab1decf564608998cbe5bb37e648300e287cb9d94d3b60f765e
  • alt-php74-mbstring-7.4.33-54.el10.x86_64.rpm
    sha:60c95321dbfbf9c9ba7366e9adf40b049beed216ff9e9d17c4efa4159948d6bf
  • alt-php74-mysqlnd-7.4.33-54.el10.x86_64.rpm
    sha:19d13bf9b0da9b4ccc566e1a8c0ca8d1de36f94953aa13d8f6f4739c3f8367a4
  • alt-php74-odbc-7.4.33-54.el10.x86_64.rpm
    sha:b48444c75d6e9220903d69ca825ac14e280356fbb0b23d10d82add9f5274808a
  • alt-php74-opcache-7.4.33-54.el10.x86_64.rpm
    sha:709fb3f780c1aa25317ee264baa3477eae636c7ad92f8e7ee1fc8e4e174d8db7
  • alt-php74-pdo-7.4.33-54.el10.x86_64.rpm
    sha:a0da4aa033a2d554883e03da8a81a9d8161b6c8141822dc2276e452e3f556fb1
  • alt-php74-pgsql-7.4.33-54.el10.x86_64.rpm
    sha:58231e75e02ace03b28666f38ee201cc6aff0a7bc2f1f8f9d60e45dd69bb1fa2
  • alt-php74-php-fpm-7.4.33-54.el10.x86_64.rpm
    sha:f21fe9020c117ac5d2a8cdbe71ce92213ddc87dfc64c803106577ef4f32849ee
  • alt-php74-process-7.4.33-54.el10.x86_64.rpm
    sha:9c2a454c1f81bdbaf9efcc82a64a18bef4244aad7bb7512dd3f7a696114824b7
  • alt-php74-pspell-7.4.33-54.el10.x86_64.rpm
    sha:409f363ac33649b0d824aa0189789e9e31d310a62c9160e58bdf4908f81767b8
  • alt-php74-snmp-7.4.33-54.el10.x86_64.rpm
    sha:194cca086653057f862c8e8d294e93b3e088213a190acd1eac43ab4258e51eed
  • alt-php74-soap-7.4.33-54.el10.x86_64.rpm
    sha:b599092a6be643aa0c629657fa00896846679e2339f407679a5337b8a12a1e5e
  • alt-php74-sodium-7.4.33-54.el10.x86_64.rpm
    sha:466dce1bcd254f02622aeab60c389784ab7b6611f08846c402f02170c45a328b
  • alt-php74-tidy-7.4.33-54.el10.x86_64.rpm
    sha:b33fa1ba38c2c2a06db6f930ea9b8e6a134c657ff95f91a746cfa6f3f1fdc1d5
  • alt-php74-xml-7.4.33-54.el10.x86_64.rpm
    sha:079ae0bd2b5092d629b943e0b10681ff3cdeb1461e0c69cc25d43d0997f1e49b
  • alt-php74-xmlrpc-7.4.33-54.el10.x86_64.rpm
    sha:70ce39881e3cd4f6642e930664ef184784226ff892d0a7c5fe3a9d7539dee2d6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.