[CLSA-2026:1779461302] alt-php74: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 14:48:29 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php74-7.4.33-54.el8.x86_64.rpm
    sha:e75b2127d712f76cf39d4d40ec983a1248009f8ac909521bc027d369e9b2f769
  • alt-php74-bcmath-7.4.33-54.el8.x86_64.rpm
    sha:b290ccd5f36229034a24abd0e049ddac31dbf8a8bbfafdbeae96b8cd28d29899
  • alt-php74-cli-7.4.33-54.el8.x86_64.rpm
    sha:494ae4a302135c707e3b7e87bf747d99c70b504c54f43cc1eb36567af6c87214
  • alt-php74-common-7.4.33-54.el8.x86_64.rpm
    sha:da82221f508e3e038a96db44c0bc31ac818a902aa97b3a805edabdb4ec4601d0
  • alt-php74-dba-7.4.33-54.el8.x86_64.rpm
    sha:8be0c25159f302a1bbe736c61fa471e34409df81773c866928a6e2066fd9b763
  • alt-php74-devel-7.4.33-54.el8.x86_64.rpm
    sha:1c7229473ff3db5fd5cdee5ad2cb9b8b27208c3a257c43133e036294b6bc9649
  • alt-php74-enchant-7.4.33-54.el8.x86_64.rpm
    sha:1c76876e67807966f0561387e254fc7659cca4322fcbbf80e80f7d441ad853ae
  • alt-php74-firebird-7.4.33-54.el8.x86_64.rpm
    sha:a1bbe26a41a0b780d6955bd759809f0c2434e131ad0398c1e6e89b3f34c7ce81
  • alt-php74-gd-7.4.33-54.el8.x86_64.rpm
    sha:7c3d7739f739dd1f6042fd69d064085e2a3805f74cbc68c47057eaf72da0f6c0
  • alt-php74-imap-7.4.33-54.el8.x86_64.rpm
    sha:78365e0ae368e06a813c3aba40040164285994067fac87d1911a5bb5bf462d91
  • alt-php74-intl-7.4.33-54.el8.x86_64.rpm
    sha:697ba8619a116850fbc337179ecad39a452e5286b67c8134268458dc2c158b03
  • alt-php74-ldap-7.4.33-54.el8.x86_64.rpm
    sha:b4bb29b20cdbb41ebfb44cb520ba48784142d5a94fbcc134e078bd00a78d6257
  • alt-php74-mbstring-7.4.33-54.el8.x86_64.rpm
    sha:d6603426587fb70bc162daa99c274ce5e05276d2a0b1fa3784ce0af92789464c
  • alt-php74-mysqlnd-7.4.33-54.el8.x86_64.rpm
    sha:b895bde5b3dc71d44902146af84c723f27307eb08887264c32c21516b5a0f986
  • alt-php74-odbc-7.4.33-54.el8.x86_64.rpm
    sha:26198cd3e01bc6719bbf451c1f53be9296a9aeb08718d2c6373338a7e0f367bb
  • alt-php74-opcache-7.4.33-54.el8.x86_64.rpm
    sha:81b33c2c63db679a77b854b2a9eab1f5d14adc0ba00477302d4f7c394e8d5ef3
  • alt-php74-pdo-7.4.33-54.el8.x86_64.rpm
    sha:ceafeb37d42b12efdc6f72b9cad86c30a15c404c20346655e8aabed39d39a607
  • alt-php74-pgsql-7.4.33-54.el8.x86_64.rpm
    sha:49f0497e8094d74eb66bd5df5bc31c89f8f0c3264f8ff924f887d8826db4b93f
  • alt-php74-php-fpm-7.4.33-54.el8.x86_64.rpm
    sha:174fbeb0b107d075da08150397815f6c299ebe47f03beb56a814821e4c27f429
  • alt-php74-process-7.4.33-54.el8.x86_64.rpm
    sha:de3415a032c6dffb94aa645c1194335f4e6acd1099fac839826de6d52a2dcbf2
  • alt-php74-pspell-7.4.33-54.el8.x86_64.rpm
    sha:9fce006a88dc39bf0c532e568aea0e4b5605a76dfd4dd78a22b800c086c1e681
  • alt-php74-snmp-7.4.33-54.el8.x86_64.rpm
    sha:70b718292ce8f6b4ca3594924aece757e464eaff5726edb5979b4e2c1db6661a
  • alt-php74-soap-7.4.33-54.el8.x86_64.rpm
    sha:dee4b611af92aba70e1fc3f05d64d0cbd5ee26ea37ba020afe96bad43c66dd9b
  • alt-php74-sodium-7.4.33-54.el8.x86_64.rpm
    sha:bc89344b5cc7fc2be21e2b0c5ea76afc3644b8b30da42488e5946a9c012ffc46
  • alt-php74-tidy-7.4.33-54.el8.x86_64.rpm
    sha:bb83b6ce587189d67426cc20f35480ebff97b80c3852c65fea054ff004b9bfc8
  • alt-php74-xml-7.4.33-54.el8.x86_64.rpm
    sha:223cd9dd257f22be85452a0bd6f1c22e659b9c88c56d19b33fcbfd91e5696ba5
  • alt-php74-xmlrpc-7.4.33-54.el8.x86_64.rpm
    sha:a002fa51d95dd8645f6cf8e2ffe695c37d0f663b94a8c77f643f9129aedab96a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.