[CLSA-2026:1779463954] alt-php73: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-05-22 15:32:41 UTC
Description:
- CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure when SOAP_PERSISTENCE_SESSION is set - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX byte input on 64-bit builds
Updated packages:
  • alt-php73-7.3.33-57.el9.x86_64.rpm
    sha:bf9f754f8827b3f36abe05cffd6f8c69092ec936f8c9c9e53d43aaca57a0a367
  • alt-php73-bcmath-7.3.33-57.el9.x86_64.rpm
    sha:791d47451ed3a8f77fb721a672221d0415d4168258baa99c99725524cfba11da
  • alt-php73-cli-7.3.33-57.el9.x86_64.rpm
    sha:47c86c27f5f92066d507cb3bd69f69f9b7e3dfca62575ecfd62b85d043299d89
  • alt-php73-common-7.3.33-57.el9.x86_64.rpm
    sha:cfdf280f2d453a98a162316668a672ba18b005975c08d185f044b503a4b660d0
  • alt-php73-dba-7.3.33-57.el9.x86_64.rpm
    sha:cc263113f5cc4c003754c41e8f97f4236bcc799586927335463d4357ce36d087
  • alt-php73-devel-7.3.33-57.el9.x86_64.rpm
    sha:da9cd615796499ae2968cbe6922621ded05e083b2c2feed1bc15adb70d057d4d
  • alt-php73-enchant-7.3.33-57.el9.x86_64.rpm
    sha:60a00d3ce15427ac452cf927ee613c7cd00d4ca92ebc8d6e4901f1be63576541
  • alt-php73-firebird-7.3.33-57.el9.x86_64.rpm
    sha:d5ee7cddcc4f99283477dd5ec08584bac41c1c29e4b6dbcfbbd2adc40f268d90
  • alt-php73-gd-7.3.33-57.el9.x86_64.rpm
    sha:911de0523c3e41c90b8c30f0d502586f3dd1020d9bb3f73b2de38583781b6f2a
  • alt-php73-imap-7.3.33-57.el9.x86_64.rpm
    sha:4f904f8be09f3b9f4d3b0b4cd7d9b518ec4eb51fefd6e1edc0eb0412738bb5cc
  • alt-php73-intl-7.3.33-57.el9.x86_64.rpm
    sha:c5f64c58eca31e2ec4f9ac70f1103628efe220255d8027e9e7bf1d19887f62fc
  • alt-php73-ldap-7.3.33-57.el9.x86_64.rpm
    sha:7707a749703fb01fce5de9b1e3f20a5df5ee6a514d98541ca3c3acfe7698cf93
  • alt-php73-mbstring-7.3.33-57.el9.x86_64.rpm
    sha:c5397a96f482ecd9f0f11d12853049e47fa2ba293e2747e11b644066f8cc401a
  • alt-php73-mysqlnd-7.3.33-57.el9.x86_64.rpm
    sha:22249fe091efaaa115964772060c43ca8734d8d1638376c730ff159a60a8f5e3
  • alt-php73-odbc-7.3.33-57.el9.x86_64.rpm
    sha:8bb5ed117a168225cbcbd48a8f9f8b552822facb9088c93173f1d368bb549d87
  • alt-php73-opcache-7.3.33-57.el9.x86_64.rpm
    sha:3c7435fb2399dd723ade3a679b8aa03b77e5f8db255641969075ea0d767ea64d
  • alt-php73-pdo-7.3.33-57.el9.x86_64.rpm
    sha:7d3602022124e3729f0f47ebbf8a54b9ba61af01b7b5c6bfefb59d710ee0664f
  • alt-php73-pgsql-7.3.33-57.el9.x86_64.rpm
    sha:2c83215f8d3afc1d2bde20470ba6d16f9240038100ca0e31508ab0e7345add41
  • alt-php73-php-fpm-7.3.33-57.el9.x86_64.rpm
    sha:622a1f81b4066ccac7b100a17190aedf05d1049d05670b9229ec67d57756dad2
  • alt-php73-process-7.3.33-57.el9.x86_64.rpm
    sha:545bb18cc60757b4a1b68d7fba7f6e1785416b7a26ea4a5822d07dbe35e85a4d
  • alt-php73-pspell-7.3.33-57.el9.x86_64.rpm
    sha:b1107e6a02fd5a51f7a6ad52242140b25d1eb21e632466b09a3e86653d7a8545
  • alt-php73-recode-7.3.33-57.el9.x86_64.rpm
    sha:501d1e0005d483deb1ae85f65a548752fe9ae9e9f5ef8d501cf3b25d20843138
  • alt-php73-snmp-7.3.33-57.el9.x86_64.rpm
    sha:cedffa8e635835a4b75aac43299943517b28a709164ea68d26ddd23b24cb21f9
  • alt-php73-soap-7.3.33-57.el9.x86_64.rpm
    sha:8d53d85218777703b715d43182517f48ac529d341d407f43ab6ca8d6b8e03c7f
  • alt-php73-sodium-7.3.33-57.el9.x86_64.rpm
    sha:4a0f3b9ecf96d889aa4d4b6e4883c49eeaf737159802fdb5c499f323293b42fd
  • alt-php73-tidy-7.3.33-57.el9.x86_64.rpm
    sha:558c28b7a4dcd01021ea7617c4c32bed5a5c8b22a0babd97aef97b9efb4731f4
  • alt-php73-xml-7.3.33-57.el9.x86_64.rpm
    sha:aad58bf70183bce35eca4c458f1d860f5bbae8413da49566e904a3524e1f3617
  • alt-php73-xmlrpc-7.3.33-57.el9.x86_64.rpm
    sha:51c25061115744201ecaeb3190feb8ad2a6efb2ac0bab4ed91feff191756978b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.