[CLSA-2026:1779452390] alt-php71: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 12:19:56 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php71-7.1.33-89.el7.x86_64.rpm
    sha:e6327cff58b5f596add13e408acb35ad105056f7f6306709250502a11fd4c0c5
  • alt-php71-bcmath-7.1.33-89.el7.x86_64.rpm
    sha:df8f91af9f6d622b64bd2d37775b054c272f074aa26f3ca85d8fdde9a8851a86
  • alt-php71-cli-7.1.33-89.el7.x86_64.rpm
    sha:fc5dcb93f07c8d0b58f42af53419887c44b2d63694e80786d2ce922a26ad546e
  • alt-php71-common-7.1.33-89.el7.x86_64.rpm
    sha:b2da23906a3b373a120b2fa8b3257c212823ec120969e065b36cb94a2a578d1e
  • alt-php71-dba-7.1.33-89.el7.x86_64.rpm
    sha:411125c1af34450434007f5584c935701eb6f67e3ce1f1982cc4157a9201a2ed
  • alt-php71-devel-7.1.33-89.el7.x86_64.rpm
    sha:5b22ccdef0010d7a32331c88446bb2918b95526eb3d3b5f0f01cb1f9ea24b859
  • alt-php71-enchant-7.1.33-89.el7.x86_64.rpm
    sha:ef27165834c65ea832fbe211f7c4f161a5e912b6b87de6826387334f9f3df72b
  • alt-php71-firebird-7.1.33-89.el7.x86_64.rpm
    sha:d6acf4e2164b2e2b2611c5635f11a09634a5ce7ac4d2c58f8fd38f0604130675
  • alt-php71-gd-7.1.33-89.el7.x86_64.rpm
    sha:fb6faba54beb21e79806759f23281e44a0568fd8429fd79f9561ada30d17a95e
  • alt-php71-imap-7.1.33-89.el7.x86_64.rpm
    sha:b702cc5acb6631a79e9d406360a27b0f33655a1758f8fca8f4f1e7b752d8a6dd
  • alt-php71-intl-7.1.33-89.el7.x86_64.rpm
    sha:bcc22dbb7ddaec85570ba9db1ab658f2ed0a83eb81344e91df7f733bb9c20f69
  • alt-php71-ldap-7.1.33-89.el7.x86_64.rpm
    sha:beba37e7f0f8e4e5c27436d7b4fdc7d3195833e288f3166b47891a6179e838e3
  • alt-php71-mbstring-7.1.33-89.el7.x86_64.rpm
    sha:636b849bc9044ce9777f2bbd3a382220484708af92caa12f9de4fd986021b8a3
  • alt-php71-mcrypt-7.1.33-89.el7.x86_64.rpm
    sha:b6862b552cc9246b386967d5c6b4fe0a1300ab4dadf4e6ade957430020ba6728
  • alt-php71-mysqlnd-7.1.33-89.el7.x86_64.rpm
    sha:d979bdb27620a794536710f3929b7f471fc7553cd454420aa55bb0b668f2b6cf
  • alt-php71-odbc-7.1.33-89.el7.x86_64.rpm
    sha:bac8182fbceef58793074508e20baa3f1ad78b25e1af4a8618dfbc3452c2212d
  • alt-php71-opcache-7.1.33-89.el7.x86_64.rpm
    sha:6c8b6ac2405effb69d463848dcb4f20e708e775fa7a0caa1ffe17eb1605b6b18
  • alt-php71-pdo-7.1.33-89.el7.x86_64.rpm
    sha:daddaae9ab10dc561eb7bac6552bfa72458f1fe9868c2daeb3e5e4bf5ba54f6f
  • alt-php71-pgsql-7.1.33-89.el7.x86_64.rpm
    sha:d6a5f7a3c8e3cf4f38ae3e9c18344ac9438c57217385d8fd3b28c80bbdde6d4a
  • alt-php71-php-fpm-7.1.33-89.el7.x86_64.rpm
    sha:23020d972fbf732058e92ee1f96751ccf51d5218ecb62af8ec6cce1f862f37c5
  • alt-php71-process-7.1.33-89.el7.x86_64.rpm
    sha:9bc3787bd14b44449331d8e9fec75b838cec6e389cd334672b51a8f97bba2b1e
  • alt-php71-pspell-7.1.33-89.el7.x86_64.rpm
    sha:ca541ac5d4e13090a5095f74a79cb24212d2809fa4bf360482ed1c8c30657468
  • alt-php71-recode-7.1.33-89.el7.x86_64.rpm
    sha:467bbcf952b6dea922fcb6864940bc9f75b8e96db6ef223fb79edf9d77e37ba3
  • alt-php71-snmp-7.1.33-89.el7.x86_64.rpm
    sha:4354725e1d775f1ae14b803caf0183999c4bcf59184f91ecfc9c800e33f00f78
  • alt-php71-soap-7.1.33-89.el7.x86_64.rpm
    sha:cfb51fb0cec76efa43908cdef5e91f1898b89a9744833861fdd046a6b585c4e5
  • alt-php71-tidy-7.1.33-89.el7.x86_64.rpm
    sha:b9cd3b5ff29c037039379aa7b392bba33db9270ae55a8f62f7d62886fa98d828
  • alt-php71-xml-7.1.33-89.el7.x86_64.rpm
    sha:3eaf12d899cc8524b516c8ab94e01607d456e10333a27f9270df3f1667db66ed
  • alt-php71-xmlrpc-7.1.33-89.el7.x86_64.rpm
    sha:f2de44dc523f6a7f8674d3e190b652acc4e3ee935f3e5c1b1a0d59f16007f66a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.