[CLSA-2026:1792759053] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-23 12:37:46 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-5.5-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect; adapted from upstream 712e60f9 (PHP 7.4 branch) - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • alt-php55_5.5.38-185_amd64.deb
    sha:f464700aee2eb11aa30bf79d44f6f40c2e44e28a
  • alt-php55-bcmath_5.5.38-185_amd64.deb
    sha:b1b72b2e01a05dc90390a678669e3672d0672f15
  • alt-php55-cli_5.5.38-185_amd64.deb
    sha:5f8214c81dd84abc25b2ecb9e4228d23ad631e4a
  • alt-php55-common_5.5.38-185_amd64.deb
    sha:7297fe1a7e7cd31e0f3468891dcecf0a5d591b6b
  • alt-php55-dba_5.5.38-185_amd64.deb
    sha:f1dd0a0da5375464eddf3f441368630ec4a0df4c
  • alt-php55-dbx_5.5.38-185_amd64.deb
    sha:9ad70cd2035d00911adc1f393938ee0922db1670
  • alt-php55-dev_5.5.38-185_amd64.deb
    sha:197245a2ca5325fc752ae36bb9beefc12e42bc86
  • alt-php55-enchant_5.5.38-185_amd64.deb
    sha:5ee505918689d4b33c181bfd0227644e811f880b
  • alt-php55-firebird_5.5.38-185_amd64.deb
    sha:504968f8d53af2bf5fa1e59b5cda4434b4ece1ae
  • alt-php55-gd_5.5.38-185_amd64.deb
    sha:8a010569c3e2e20b4f15e0758d7cc95759fec5e4
  • alt-php55-imap_5.5.38-185_amd64.deb
    sha:002f5c23b36f0fa9a628ba5d96ea8aaec0cb2d9f
  • alt-php55-intl_5.5.38-185_amd64.deb
    sha:6284a2b7019ba1b80809dd4d8b33d6602bf210b5
  • alt-php55-ldap_5.5.38-185_amd64.deb
    sha:44d9b8a470b8db255a94352a05f9ddf4f0a9d35b
  • alt-php55-mbstring_5.5.38-185_amd64.deb
    sha:a6fa3eecfa54651a0d8a51638584fe0ca0447ce8
  • alt-php55-mcrypt_5.5.38-185_amd64.deb
    sha:82b45712179cebd97aa5c252f3460f619d58d296
  • alt-php55-mssql_5.5.38-185_amd64.deb
    sha:d7c9e4ac7d3e8e33370d1973c24f56e22032f582
  • alt-php55-mysqlnd_5.5.38-185_amd64.deb
    sha:67a0dbaf6465afc9a176e93e0d22bb0d33d80268
  • alt-php55-odbc_5.5.38-185_amd64.deb
    sha:d320af81551ad49724f688976ba5d630737c1c88
  • alt-php55-pdo_5.5.38-185_amd64.deb
    sha:26a5b7e66e196318d779e3d5cd59ca4b61c29010
  • alt-php55-pgsql_5.5.38-185_amd64.deb
    sha:bb1206bb7b137a464cc2f910eb1211d1fe8a8c70
  • alt-php55-php-fpm_5.5.38-185_amd64.deb
    sha:245276238b0ffb030fea2807d2b0d00c53749bed
  • alt-php55-process_5.5.38-185_amd64.deb
    sha:80a0329b6d98226c39d92eccec6b29e444393eae
  • alt-php55-pspell_5.5.38-185_amd64.deb
    sha:4d4ff6e67c9efdc434576954d29b4076b0a9aee0
  • alt-php55-recode_5.5.38-185_amd64.deb
    sha:68ce283ea788502135af467b52ce2e4cdd2bf786
  • alt-php55-snmp_5.5.38-185_amd64.deb
    sha:3b76289dbdfe01f0c755c5a0d3229e8e40cccbc5
  • alt-php55-soap_5.5.38-185_amd64.deb
    sha:555d8262be29712b2c33da49e3c5ef78ac283a64
  • alt-php55-sybase_5.5.38-185_amd64.deb
    sha:4b7fb8d1b21391d73a87268ed3180a1421871347
  • alt-php55-tidy_5.5.38-185_amd64.deb
    sha:7f111a9e43cd96a2b71555f28dafd04438e149e8
  • alt-php55-xml_5.5.38-185_amd64.deb
    sha:59d2fbe1316eec494c9ec7c69a91c418319b3443
  • alt-php55-xmlrpc_5.5.38-185_amd64.deb
    sha:343f3f43eee1a2a70937fbc3866702c656ccefd3
  • alt-php55_5.5.38-185_arm64.deb
    sha:c099cc80ac4baa92f46c1d740bf8fdcf3a1bc77d
  • alt-php55-bcmath_5.5.38-185_arm64.deb
    sha:6a33c1f9dc47066047ffb2fa89d6028c74e43e92
  • alt-php55-cli_5.5.38-185_arm64.deb
    sha:b3c857331bd4b65f314d2a58782766267248ec71
  • alt-php55-common_5.5.38-185_arm64.deb
    sha:005ded754814a308c9b2ae7fa87ca5757fc94ba8
  • alt-php55-dba_5.5.38-185_arm64.deb
    sha:4047b4a1ebb787a678e35e747fdbc1749c9eb102
  • alt-php55-dbx_5.5.38-185_arm64.deb
    sha:2a52438856b76a3df0292117171965bd604cf361
  • alt-php55-dev_5.5.38-185_arm64.deb
    sha:2bf23b33acf6d78207052f302709ddd7ecded8ca
  • alt-php55-enchant_5.5.38-185_arm64.deb
    sha:8068069904e2ea8a47072718f7827a1710a457de
  • alt-php55-firebird_5.5.38-185_arm64.deb
    sha:901dd5964020c57357d13751cdb71fea6f6c45a5
  • alt-php55-gd_5.5.38-185_arm64.deb
    sha:4c4aa72ff2a0aa0876d9d7e746ff078edd6b799b
  • alt-php55-imap_5.5.38-185_arm64.deb
    sha:c33cdb810aa6fba107237c4728018d6c58eb5f8d
  • alt-php55-intl_5.5.38-185_arm64.deb
    sha:da0f3c2d2c2e7cd0ded6855cbd140fae36b1a727
  • alt-php55-ldap_5.5.38-185_arm64.deb
    sha:c973d3c69eef94912ce698a1f26b5c85a8f8a76d
  • alt-php55-mbstring_5.5.38-185_arm64.deb
    sha:bf243ab2ed5a1c56e1bc47c65f6dcaf539de6dcf
  • alt-php55-mcrypt_5.5.38-185_arm64.deb
    sha:cc318ab80eee4c4814949246b7f1cbcb1c97448c
  • alt-php55-mssql_5.5.38-185_arm64.deb
    sha:ffb25a9f4b7913d286dcc1f9e0fda3c80270da93
  • alt-php55-mysqlnd_5.5.38-185_arm64.deb
    sha:d2a0c737086e0dd5ef7c8b872e393a82f5c069d2
  • alt-php55-odbc_5.5.38-185_arm64.deb
    sha:6a4bb022b298222fa0bc162ea997826c1c48e40b
  • alt-php55-pdo_5.5.38-185_arm64.deb
    sha:d562d6166d8ffefe3eaa44817707cd0aea2b816a
  • alt-php55-pgsql_5.5.38-185_arm64.deb
    sha:35c08088f59e29444391c1556990d8ff35f88847
  • alt-php55-php-fpm_5.5.38-185_arm64.deb
    sha:048d960cb2e6b6cc3e2a1f308240218561a37775
  • alt-php55-process_5.5.38-185_arm64.deb
    sha:dcea3e00045d5278a71cc5e4c5e5e7580f51c5e1
  • alt-php55-pspell_5.5.38-185_arm64.deb
    sha:df2f0680ddb46c5e9f42a7037e1e435f1611751e
  • alt-php55-recode_5.5.38-185_arm64.deb
    sha:bebed1201b1f627477104af3dfdd4fd3b3cd40dc
  • alt-php55-snmp_5.5.38-185_arm64.deb
    sha:ec51046f0fbec97adb216bd16ea2918ae46e4ac1
  • alt-php55-soap_5.5.38-185_arm64.deb
    sha:e46cb78464ec36809543a3e2580f9392281b00d6
  • alt-php55-sybase_5.5.38-185_arm64.deb
    sha:6c3b155829e5cd0ba774032d9c31f22fae835a23
  • alt-php55-tidy_5.5.38-185_arm64.deb
    sha:a7dc865422e42ae5ffec5cfa41fae895026c0198
  • alt-php55-xml_5.5.38-185_arm64.deb
    sha:8c908ca68b612c562fd18c7a6261a38bd29d0fee
  • alt-php55-xmlrpc_5.5.38-185_arm64.deb
    sha:7071bb669d85b6e1f1c290abdd3194db36cd7163
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.