Release date:
2026-05-21 18:55:34 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
(5.5 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
intentionally omitted because ref_map is heterogeneous in 5.x and the
dtor would corrupt the xmlNodePtr entries — see patch header)
- CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
- CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
- CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
(5.5 backport applies HTML entity escape to both HTML and JSON /status
endpoints since php_json_encode_string() isn't exported on 5.x — JSON
consumers will see HTML entities in request_uri/query_string fields)
Updated packages:
-
alt-php55-5.5.38-159.el7.x86_64.rpm
sha:424f08d91c959053aa9484bb3ce3a0e2f9ebf5112f2472f30369964734afe210
-
alt-php55-bcmath-5.5.38-159.el7.x86_64.rpm
sha:76eb72b124e3a01cf86a142079fbe7c7a2e476c5906d42959473e682c84e1405
-
alt-php55-cli-5.5.38-159.el7.x86_64.rpm
sha:604bea7a248307f0971399087d6f17dffed00f12b193f3a4f32c15f90cf6d080
-
alt-php55-common-5.5.38-159.el7.x86_64.rpm
sha:76cfb95698b171e153c9eb8d5b138a6916a11e250825c4b1e35f5c1dcb8d2eff
-
alt-php55-dba-5.5.38-159.el7.x86_64.rpm
sha:86a5462a5395b8d63a7a67152a6d7040138704ff5d013d670f33768b04f10648
-
alt-php55-dbx-5.5.38-159.el7.x86_64.rpm
sha:e4080ac780a294065cba29545b7eeb1958af3081d251cacccd46eb65ccfd691f
-
alt-php55-devel-5.5.38-159.el7.x86_64.rpm
sha:4c0dc677dac5e8a29313c4c67683c794518049c1d1749ed753205e466c815065
-
alt-php55-enchant-5.5.38-159.el7.x86_64.rpm
sha:7d22b3d55e120586e6319675045a73c0a9602906002f507fc625088f49a49e50
-
alt-php55-firebird-5.5.38-159.el7.x86_64.rpm
sha:b91ee14a782d060c32bd2471559ddb3a7f2115bba383411b13ecf7a3f3f3c981
-
alt-php55-gd-5.5.38-159.el7.x86_64.rpm
sha:70561102341a375b62ef0a49d7e695717f28164c30da07294bae0471b5750a68
-
alt-php55-imap-5.5.38-159.el7.x86_64.rpm
sha:d3376cc599c65431afc403ee270022b43887feab7d1666f1464a3edb325f9047
-
alt-php55-intl-5.5.38-159.el7.x86_64.rpm
sha:de349bb823a6337383e1888901ee2d721b02e402d617bca388a59d86cc3186c3
-
alt-php55-ldap-5.5.38-159.el7.x86_64.rpm
sha:b40983baee7d1358afed575f8ef790b15170fa4726284c32187371f6067d138e
-
alt-php55-mbstring-5.5.38-159.el7.x86_64.rpm
sha:9069a4f31ea327fbac9a6f4106ce782556df225aab9e5bf2cb8ec51426599f8e
-
alt-php55-mcrypt-5.5.38-159.el7.x86_64.rpm
sha:feeab8b4ec3cb01352a0cab90237f4fd68d742b486d04bbe76116ecc3cf6c9f4
-
alt-php55-mssql-5.5.38-159.el7.x86_64.rpm
sha:61e4ab93f2decf3dc08a7a50cfa8233fea9dfb6dd1bdaf0b67d723fa1da02550
-
alt-php55-mysqlnd-5.5.38-159.el7.x86_64.rpm
sha:ea72fdee4da49e33e8d8d9a0ac0a0b55f1b72391de0bae1b151ffefe20cbf81c
-
alt-php55-odbc-5.5.38-159.el7.x86_64.rpm
sha:0aea986b9bcc5b649d9cbc6cb1345b56825e27871d50427063e827697e5cce0a
-
alt-php55-opcache-5.5.38-159.el7.x86_64.rpm
sha:2fb1c2692f7a7e249a9b503f6aa00ad4a15d6790ebf660edbac96ddcdd0338f0
-
alt-php55-pdo-5.5.38-159.el7.x86_64.rpm
sha:bf5861b912b3fccece67254ffd0dda9abc695d1095541e4ebcd58ce3474706c0
-
alt-php55-pgsql-5.5.38-159.el7.x86_64.rpm
sha:d561f9c22c99aeaaf369d24982b8986dfcf2ec69dc1bb3edf080e13ffabcc546
-
alt-php55-php-fpm-5.5.38-159.el7.x86_64.rpm
sha:bcffb25683990cbedb24321144b6a90a12aa46f4adbab8b41809d7076e06ce23
-
alt-php55-process-5.5.38-159.el7.x86_64.rpm
sha:e18bf30851adee194c7c8138835dafb91297cad3fe38a8fd420d78e03a1053bf
-
alt-php55-pspell-5.5.38-159.el7.x86_64.rpm
sha:f58a6c47c1b576dd229654c2f3d6ce8b88442baabd7ed4f1a8857fb52d4c1918
-
alt-php55-recode-5.5.38-159.el7.x86_64.rpm
sha:2b1f19b47447c9285f86a3696e6aa2e7211fcb61681c977b438db7f7105ea101
-
alt-php55-snmp-5.5.38-159.el7.x86_64.rpm
sha:8bb94388a5333b102caac94959558c660e37d8651709d2016598e5833491bf17
-
alt-php55-soap-5.5.38-159.el7.x86_64.rpm
sha:904ef74d5f02f35f3c5b98edd415804101ccdd17c2dfe41dd39dfb542d6d2a6e
-
alt-php55-sybase-5.5.38-159.el7.x86_64.rpm
sha:ccfff16abb739457b544b743f24fa1513b45201611d20edc0303bf1c87276026
-
alt-php55-tidy-5.5.38-159.el7.x86_64.rpm
sha:3fc6ca22709c3023a7bb963a0152eb366c9804dbe4de4e64ba77f46ffe2d63d3
-
alt-php55-xml-5.5.38-159.el7.x86_64.rpm
sha:28f3ae203e279cea74df77f9365f6d2aa808501a1e031c400579cdc17b3ac519
-
alt-php55-xmlrpc-5.5.38-159.el7.x86_64.rpm
sha:f8c0665d5b152869038421f6a75fe7e0592f8b4f735dfb74c5e9fe1bc0244342
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
