Release date:
2026-05-20 16:29:22 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
(5.3 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
intentionally omitted because ref_map is heterogeneous in 5.x and the
dtor would corrupt the xmlNodePtr entries — see patch header)
- CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
- CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
- CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
(5.3 backport applies HTML entity escape to both HTML and JSON /status
endpoints since php_json_encode_string() isn't exported on 5.x — JSON
consumers will see HTML entities in request_uri/query_string fields)
Updated packages:
-
alt-php53-5.3.29-193.el8.x86_64.rpm
sha:cec5210e558a0816f7b70ac25bfb7f6ee2492149b37a9c85432015f144a7151b
-
alt-php53-bcmath-5.3.29-193.el8.x86_64.rpm
sha:fe0eeecc8f7e08bb9d2c04093427ff690a2c6ee4a37c1d6098031dfd695e037e
-
alt-php53-cli-5.3.29-193.el8.x86_64.rpm
sha:11e6f039a7c1a2741fcdbf95a9605eee9b7d9ffff435b6b49356f56bdb273895
-
alt-php53-common-5.3.29-193.el8.x86_64.rpm
sha:df17906db4426c732b1a056ed4c1707724acbca52a7624772473d1a6f52d0df2
-
alt-php53-dba-5.3.29-193.el8.x86_64.rpm
sha:e573954b9471b0c88217081bc57f2d6bededa9fc51e4631ddcb1d7dbc7cd618a
-
alt-php53-dbx-5.3.29-193.el8.x86_64.rpm
sha:5708a3aae7caaaa5398d82d70fdd747af027e33a09f909b8605110e28341c3db
-
alt-php53-devel-5.3.29-193.el8.x86_64.rpm
sha:bc33d6c91fe71b4e372dbc8f5c2a435a0acb297d99e40110c23bbbb51ee71b1c
-
alt-php53-enchant-5.3.29-193.el8.x86_64.rpm
sha:a7f3c82c6aefded0e96b64deea77e0a96b1ad607dcf11ce74f3f29b01dbb0cb7
-
alt-php53-firebird-5.3.29-193.el8.x86_64.rpm
sha:2acdb990c58189f626a5e8ec9477a5746913182ed4e036f3554fc4d19dc147e6
-
alt-php53-gd-5.3.29-193.el8.x86_64.rpm
sha:b8be9aa31c4e7c856bdc81d38e87e270a27a7f85baca2b885b916013af894fd2
-
alt-php53-imap-5.3.29-193.el8.x86_64.rpm
sha:4102c05ba48485727ae7e15a3446b3333331f0df8271227c4a102d5f32889e8c
-
alt-php53-intl-5.3.29-193.el8.x86_64.rpm
sha:10856f864681e1cf36dde9bb6f2c5fb0fa16325be2d34c15022a0f736fd7f7c3
-
alt-php53-ldap-5.3.29-193.el8.x86_64.rpm
sha:4c39e9db532ff1446c5bd06a0ea32d886a192e728363b1a67484433b166fb570
-
alt-php53-mbstring-5.3.29-193.el8.x86_64.rpm
sha:848f073d8d936080347bdc77af834427b615044b2a43c93591464eab0c35946e
-
alt-php53-mcrypt-5.3.29-193.el8.x86_64.rpm
sha:76a7704ecbe9e8dfab2c3b773928ea760dd9620b4ae1f91838317d44bb9d2702
-
alt-php53-mssql-5.3.29-193.el8.x86_64.rpm
sha:244566089465dc6f43b785fd2245708fcdf9980a4c6a3fdec9cea1d76e95d5a1
-
alt-php53-mysqlnd-5.3.29-193.el8.x86_64.rpm
sha:7a9e43f224a39e03f4d00b556bfc0c8658119afb4b925f0bdfd68645e680abc9
-
alt-php53-odbc-5.3.29-193.el8.x86_64.rpm
sha:e25ac78f3bdaa83ca33e720bc4429bf634bf053999f6a18825214aac75e98d0b
-
alt-php53-pdo-5.3.29-193.el8.x86_64.rpm
sha:ca4f2afc4aebd01bec788f71269ba2df500dccf793ef3ce06da0f9aaaa8d9863
-
alt-php53-pgsql-5.3.29-193.el8.x86_64.rpm
sha:2dc1c9888f088ecd4847294992838a5a44ba3b63fa50134b6c34cb0b8808a2df
-
alt-php53-php-fpm-5.3.29-193.el8.x86_64.rpm
sha:227d6d281042f3f11bf6d3129a3d475d81917dea5785d054ad7eb424c7adc54a
-
alt-php53-process-5.3.29-193.el8.x86_64.rpm
sha:5dd265c33fd633791950e842a8483f6e0140fa22eae2a68571c5d8464fd8dd29
-
alt-php53-pspell-5.3.29-193.el8.x86_64.rpm
sha:5e5ebc490f019ea8de9f3b0e8113b04b63bb2fea613e2bf4f3b5f5ced6e67730
-
alt-php53-recode-5.3.29-193.el8.x86_64.rpm
sha:65d950c0a064084f827e67f991039c821187d510ea8d3d81d120bfbc7ad92b52
-
alt-php53-snmp-5.3.29-193.el8.x86_64.rpm
sha:8152ce4bbbd0d2cf32a234ae0e62eae54256095751b3772f3b55baa04f59997c
-
alt-php53-soap-5.3.29-193.el8.x86_64.rpm
sha:58b4a4b2ee885d40e5498b88d382b8e058ed5934cdd27acb6bfd8efca518bdef
-
alt-php53-sqlite-5.3.29-193.el8.x86_64.rpm
sha:b8cce5b508f3251d1ce9b44804972d772edae353144d4c602bef4386c0b224da
-
alt-php53-sybase-5.3.29-193.el8.x86_64.rpm
sha:041a6e811434e5c8f51b7889bb68644940b44f43cead4adcf5248cc75c35e502
-
alt-php53-tidy-5.3.29-193.el8.x86_64.rpm
sha:ebd45038d153003f6b2aac14719b5973c6209501f28a94302280afb112005962
-
alt-php53-xml-5.3.29-193.el8.x86_64.rpm
sha:c464e8e610661552aab129e034e8af5d83493271de260e6fdda8ea368660e4dd
-
alt-php53-xmlrpc-5.3.29-193.el8.x86_64.rpm
sha:287ded313dae155f012029625e99ab78beda68a441ce97e99738fbe03e042aa7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
