[CLSA-2026:1779457848] alt-php71: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 13:50:54 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php71-7.1.33-89.el9.x86_64.rpm
    sha:c6987ce81962688f3088aca0ffea9514ca06a2729e247814c34a360a553fe41e
  • alt-php71-bcmath-7.1.33-89.el9.x86_64.rpm
    sha:f7e443903bf630a028827dd572c6943328c7158bb1f9ad5bf110865742abb5b9
  • alt-php71-cli-7.1.33-89.el9.x86_64.rpm
    sha:ada1ad7a7edc2032b23ef903659f1b28f319dcc28a8371982540109886e76a41
  • alt-php71-common-7.1.33-89.el9.x86_64.rpm
    sha:9f615aba3b730f3a60a5ea675bfd6843aa4dfd6526d93dabfe6f3fd1210dbf76
  • alt-php71-dba-7.1.33-89.el9.x86_64.rpm
    sha:3741ed2df59299a28a35c77ec09e28a9c13a20a5c83da4a7019558bee43ce273
  • alt-php71-devel-7.1.33-89.el9.x86_64.rpm
    sha:e325b7320e85bcd34d36fd3cca76d90568d188c6e5ef0207a0accd5c9b4cebca
  • alt-php71-enchant-7.1.33-89.el9.x86_64.rpm
    sha:ee46b92f57fbbd99c051f9dc320d214afea5ec970cdddbc2de8e4b55a8c86d85
  • alt-php71-firebird-7.1.33-89.el9.x86_64.rpm
    sha:9872185915933e5b9c33be4a1e6f7fce9da019c8303b1f02e31697f1cec6dafb
  • alt-php71-gd-7.1.33-89.el9.x86_64.rpm
    sha:348e845e4b827c19f36f869e44688ad52e93c98d647b89bcd9c544b967c71081
  • alt-php71-imap-7.1.33-89.el9.x86_64.rpm
    sha:d987ee0a46685d1942f55a8d6288d28518ff2d20a051f4e7cf1be9f6f02344ed
  • alt-php71-intl-7.1.33-89.el9.x86_64.rpm
    sha:54c54569efb5c0adddcdcc1fe0e2e87c1d0c3b2e8e74250153b2c504c7dade0b
  • alt-php71-ldap-7.1.33-89.el9.x86_64.rpm
    sha:cf024389887846a4f222aa63d39e895faeb1caa08cd6bde5bd1d8b98083b2835
  • alt-php71-mbstring-7.1.33-89.el9.x86_64.rpm
    sha:85aab6e371752bca815f5bdb4fb15e092f5dac4f56fda34d36ec0bd24aebfb0d
  • alt-php71-mcrypt-7.1.33-89.el9.x86_64.rpm
    sha:3e498e5c2dca9efe66bd3cbc5279d42d8871250a4d12c890ac93cbfc2fe13eb0
  • alt-php71-mysqlnd-7.1.33-89.el9.x86_64.rpm
    sha:75a14b3e803c132b3e55d915db21896ef670a897cdeb2a89ce3551f976836785
  • alt-php71-odbc-7.1.33-89.el9.x86_64.rpm
    sha:9500fbfdcc0fd79cbca36f495c6d99a892cfddda7428836ab3ece85bb03c283e
  • alt-php71-opcache-7.1.33-89.el9.x86_64.rpm
    sha:3bd68019604c642613b0f563378d9008810deb2155d8bd8df29b3a25faaa755a
  • alt-php71-pdo-7.1.33-89.el9.x86_64.rpm
    sha:46d5e8c0cf89ede0aa49c5f16a05bea47ed70aa380f5ea18aae92b8a266a7a5e
  • alt-php71-pgsql-7.1.33-89.el9.x86_64.rpm
    sha:adf6e5be330a07f93ccbd70c07424b5f3baf46deb99289db07b2fec05b48336b
  • alt-php71-php-fpm-7.1.33-89.el9.x86_64.rpm
    sha:149e401d47845c235c48c2d15588ab0a01c9471ba2a546d980cad60ade427891
  • alt-php71-process-7.1.33-89.el9.x86_64.rpm
    sha:11f2762b47260adddb79bd21ca3003da28a7787b1f9fb80a50c4ed00e86e73d5
  • alt-php71-pspell-7.1.33-89.el9.x86_64.rpm
    sha:1f3efed167af4670fed3165f979acf7eed544432a16fef6e4a4beaa3ab7d89df
  • alt-php71-recode-7.1.33-89.el9.x86_64.rpm
    sha:e67d19a8ae46f2a235d5e4e9d774bdd2f40bbe1a17418b2650051c92e4583d6f
  • alt-php71-snmp-7.1.33-89.el9.x86_64.rpm
    sha:0aec2c36d852030acd6b00d3bacbb3173090ef70da350fcf1f0b323c651ce8fc
  • alt-php71-soap-7.1.33-89.el9.x86_64.rpm
    sha:ceb91b52583fd89663789a405490b6100778c2dfc94512265639bbd991ab9817
  • alt-php71-tidy-7.1.33-89.el9.x86_64.rpm
    sha:b137881f686c8884641acdc8444a4b42b8d59b40f52b3180b80c6d71614cbba8
  • alt-php71-xml-7.1.33-89.el9.x86_64.rpm
    sha:a62b366f72d9225a4119e1ea3bb9d90d13f1a9fb93bf45b9874af790843d859e
  • alt-php71-xmlrpc-7.1.33-89.el9.x86_64.rpm
    sha:da2e2bb05978f2a9e07a8155a1a89858420ebd826c63cf22b9380de0a40ff2ad
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.