[CLSA-2026:1792690133] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 17:29:05 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-5.3-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; adapted from upstream 712e60f9 (PHP 7.4 branch) - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • alt-php53_5.3.29-221_amd64.deb
    sha:0162271156d1fedd68887211ee257e099c9f5eca
  • alt-php53-bcmath_5.3.29-221_amd64.deb
    sha:754ab69ed34aa5907fc68060758daac8f4049069
  • alt-php53-cli_5.3.29-221_amd64.deb
    sha:631564464c421bfca08b9a891d6792bcb2d25a8c
  • alt-php53-common_5.3.29-221_amd64.deb
    sha:9e3ce1e7e4c764b4c2621809fc14a96b808c1536
  • alt-php53-dba_5.3.29-221_amd64.deb
    sha:cd318be048cbaadcb73d2d9c0713640133d6da65
  • alt-php53-dbx_5.3.29-221_amd64.deb
    sha:16eec33a37c08f77885782fd2a6b4b7046bb148c
  • alt-php53-dev_5.3.29-221_amd64.deb
    sha:96feff295a395abb8a7b0c8b44ebcdf1eaa8263c
  • alt-php53-enchant_5.3.29-221_amd64.deb
    sha:d61a08401f1006342f45d2ad510d9337b263852d
  • alt-php53-firebird_5.3.29-221_amd64.deb
    sha:b9df24421fdffd865f57c2974e31a9c1472db385
  • alt-php53-gd_5.3.29-221_amd64.deb
    sha:5700fb87650e4c366c7a36c58ffa30bd57a317e1
  • alt-php53-imap_5.3.29-221_amd64.deb
    sha:248b5dcd50edb4ec1f80ed9c484e9c96eed8dce1
  • alt-php53-intl_5.3.29-221_amd64.deb
    sha:765854c179672dc246e2bf70c6014d5d9bc33f36
  • alt-php53-ldap_5.3.29-221_amd64.deb
    sha:7a4ae4a8b4292c3e0f37effa59f5983dd9ab6705
  • alt-php53-mbstring_5.3.29-221_amd64.deb
    sha:4b6ba100b615790d42e6d84e00ff7c54d0e13f66
  • alt-php53-mcrypt_5.3.29-221_amd64.deb
    sha:3c6c0b35a3d9f0c6d1b9eee6b533c1486dd7c191
  • alt-php53-mssql_5.3.29-221_amd64.deb
    sha:77b049fbf035150ef5b8cd652afe426a698dca22
  • alt-php53-mysqlnd_5.3.29-221_amd64.deb
    sha:79011b6883b99a4c72363a32012ae97100b4ec03
  • alt-php53-odbc_5.3.29-221_amd64.deb
    sha:279c4b7dfe81c42441c5c489e1fcf221031c2179
  • alt-php53-pdo_5.3.29-221_amd64.deb
    sha:b3f1aa253b5077ca32003bf712dc65e5273caabe
  • alt-php53-pgsql_5.3.29-221_amd64.deb
    sha:656b0b8c73c53de6c21bcc52692d571851ea3a28
  • alt-php53-php-fpm_5.3.29-221_amd64.deb
    sha:86e521c428dc4bbfc07f765f58999d0bbed4b8a8
  • alt-php53-process_5.3.29-221_amd64.deb
    sha:26bc175ba1ec4e550a1be1b498e613b2d4864871
  • alt-php53-pspell_5.3.29-221_amd64.deb
    sha:a8871444ad41c5161a34bd7ce7290ea63e2a9739
  • alt-php53-recode_5.3.29-221_amd64.deb
    sha:3b14185d24695f50ba9f7a8134d60b4253d20ad4
  • alt-php53-snmp_5.3.29-221_amd64.deb
    sha:6357420eaa75c621b68f72ab882fb06b54e4f872
  • alt-php53-soap_5.3.29-221_amd64.deb
    sha:7cc0ddc6b68356803b7bebea4dff386925b8999d
  • alt-php53-sybase_5.3.29-221_amd64.deb
    sha:cfda9a66a348936752f1512c059547d557ef7eb2
  • alt-php53-tidy_5.3.29-221_amd64.deb
    sha:9dbf5f04c37400a1be7786f09c399133b9e2f08f
  • alt-php53-xml_5.3.29-221_amd64.deb
    sha:ecbc9b6e3c80473871e16cf35fa1912111b5c78a
  • alt-php53-xmlrpc_5.3.29-221_amd64.deb
    sha:6842db39f9e83d63101ece180f7ebc7c09c7c4bb
  • alt-php53_5.3.29-221_arm64.deb
    sha:6701acfa2b1b4dfcfb731ddd0cff58e09272b110
  • alt-php53-bcmath_5.3.29-221_arm64.deb
    sha:75d81130fb2f4c8a772e4134579570142e5bce95
  • alt-php53-cli_5.3.29-221_arm64.deb
    sha:410861fb22c9e2b2eb10ba74766ee7619711eb7d
  • alt-php53-common_5.3.29-221_arm64.deb
    sha:28d99833b8937b7e5771c32306fa982440c72f78
  • alt-php53-dba_5.3.29-221_arm64.deb
    sha:95b14c0bf79a85b31152bf57de929bd7fe29d563
  • alt-php53-dbx_5.3.29-221_arm64.deb
    sha:9477adddfffdc827e3cb1b596229c2ef00ff7ff6
  • alt-php53-dev_5.3.29-221_arm64.deb
    sha:3df5c90da82aa05288b5cbc929434a9634272343
  • alt-php53-enchant_5.3.29-221_arm64.deb
    sha:550a551b8a39d796f1ed20b5af30f1ee65e7486a
  • alt-php53-firebird_5.3.29-221_arm64.deb
    sha:74083105f885311a9750d6ad626715c50bf675d6
  • alt-php53-gd_5.3.29-221_arm64.deb
    sha:3f072b5a98da5de75d70df85a373e2e88fbf7142
  • alt-php53-imap_5.3.29-221_arm64.deb
    sha:8a966ab94bf309d6660f017404782af97608a43c
  • alt-php53-intl_5.3.29-221_arm64.deb
    sha:42bac1eb9d23e9af6216bcf352dc5b2b4cdb1ba4
  • alt-php53-ldap_5.3.29-221_arm64.deb
    sha:bcf693878c898e928000b5bd62e5011520fbcef9
  • alt-php53-mbstring_5.3.29-221_arm64.deb
    sha:d1ce6765a12ee1bfc5d590ddfa46385cae63f90b
  • alt-php53-mcrypt_5.3.29-221_arm64.deb
    sha:2a6a49c1e433b90a988211d789adc182c19fc781
  • alt-php53-mssql_5.3.29-221_arm64.deb
    sha:21a7c6decdced158eac341883fa9e24d14193c1c
  • alt-php53-mysqlnd_5.3.29-221_arm64.deb
    sha:f8ccef21ed73f7bf9c400d63a4bd65b5ca02383a
  • alt-php53-odbc_5.3.29-221_arm64.deb
    sha:7d6b2749003bc59fbdf71456527090800dbe1694
  • alt-php53-pdo_5.3.29-221_arm64.deb
    sha:d635f0ccf70ebc5cdee9ee2599d18244bb72030f
  • alt-php53-pgsql_5.3.29-221_arm64.deb
    sha:74b9c54929f675c9142e77b910d75bba1471995f
  • alt-php53-php-fpm_5.3.29-221_arm64.deb
    sha:81c15ea91f21d2418b723421c786f74463995d66
  • alt-php53-process_5.3.29-221_arm64.deb
    sha:6767faea51edaf7a61abf8ddaec524a8556632b9
  • alt-php53-pspell_5.3.29-221_arm64.deb
    sha:9eafec88922877ac272d2f062e37e37808b4bc2b
  • alt-php53-recode_5.3.29-221_arm64.deb
    sha:07aad6ea91c5d5366bf7ea8adf2a57ba712dc42a
  • alt-php53-snmp_5.3.29-221_arm64.deb
    sha:5ea6c2d5a2164ced92eb297e1aa54f5cee57aa57
  • alt-php53-soap_5.3.29-221_arm64.deb
    sha:5900916de77a6adf6f206a6f9073195aee334f42
  • alt-php53-sybase_5.3.29-221_arm64.deb
    sha:70c6579ccf331a143510ff3af827ed873340d421
  • alt-php53-tidy_5.3.29-221_arm64.deb
    sha:e8678ea94e141b4c53f2788be1b7a93c02ac36c9
  • alt-php53-xml_5.3.29-221_arm64.deb
    sha:f2b56f4fd1043084e3d7bb7304ebd659a50fb5f5
  • alt-php53-xmlrpc_5.3.29-221_arm64.deb
    sha:411ac1f2f138e7ea61df18d5ccffff3a2bb52baf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.