[CLSA-2026:1792592495] alt-php74: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 15:48:52 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 712e60f9 (PHP 7.4 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php74-7.4.33-81.el6.x86_64.rpm
    sha:5e55fe2bfba0245fc1de54a4e9142375847857973244d38437c05baad0dc78d5
  • alt-php74-bcmath-7.4.33-81.el6.x86_64.rpm
    sha:52746ecc2575d15fae01dfe552f85b570ece42ffd0ea01aeffe667f37329d32f
  • alt-php74-cli-7.4.33-81.el6.x86_64.rpm
    sha:bc5a8f17f8fd663234e1248f02f96add9e86d02b62f905e601c1a788140fedd3
  • alt-php74-common-7.4.33-81.el6.x86_64.rpm
    sha:1613af5d66e254b43dcedb616d0598b0ce83a2c6caeeb542c0659e177cf2b845
  • alt-php74-dba-7.4.33-81.el6.x86_64.rpm
    sha:0a0ec0e7134796f6e4f743d2079a140db7186f9995da2baa2014ab6b55135a11
  • alt-php74-devel-7.4.33-81.el6.x86_64.rpm
    sha:584afb543063239fa3034f2782605deebbb7390180efab6c7a540e3a6841140d
  • alt-php74-enchant-7.4.33-81.el6.x86_64.rpm
    sha:794a3b08eca73de63a927b946c942d742c9d087ddaa06843a0aeb95d43ff7601
  • alt-php74-firebird-7.4.33-81.el6.x86_64.rpm
    sha:88678e71ce37c44b2c20f303622b6f34e7f73f15456a99e7d4b933c45f15ab1d
  • alt-php74-gd-7.4.33-81.el6.x86_64.rpm
    sha:c80d9f4bf3559d8377fb105a694c4b8ec02ea3f446c3b71321ccf4b77915bda1
  • alt-php74-imap-7.4.33-81.el6.x86_64.rpm
    sha:8690b44f33dd71c73d99e599a0df3a0a76a00d591cf58d07bd30bc39422c1e31
  • alt-php74-intl-7.4.33-81.el6.x86_64.rpm
    sha:59972a858e1330123b5008cd9ff31723897270d72ff256e7edc4c2d5b312b409
  • alt-php74-ldap-7.4.33-81.el6.x86_64.rpm
    sha:3aa5ef9a3a980ca5b884eff6e134ac6ef90e396199cf8143c2c4d4642368f76d
  • alt-php74-mbstring-7.4.33-81.el6.x86_64.rpm
    sha:d9dbd12904dfa1b2c5ac434174861bc97d3ef0b875cd7a41efe90ccb3350dfc0
  • alt-php74-mysqlnd-7.4.33-81.el6.x86_64.rpm
    sha:63b5eac31d7c651e8ce5be87c4ee8cec4bd6c0950b7b1806f30efd44118b690f
  • alt-php74-odbc-7.4.33-81.el6.x86_64.rpm
    sha:949338adc438fc7b56052bf3025955108a1ca2a1b13e2d3c8029a0074ff7d2ca
  • alt-php74-opcache-7.4.33-81.el6.x86_64.rpm
    sha:154e7ccd885916d55258d1f4e3bab67803ef88ebb74ca0d30e5b3733792a6461
  • alt-php74-pdo-7.4.33-81.el6.x86_64.rpm
    sha:a0f5b7480dcbd8dedfa48a32528536d11cfa66f816088441794282fb932f46b0
  • alt-php74-pgsql-7.4.33-81.el6.x86_64.rpm
    sha:ab1ff11c2a1fa914a50ec68f7a93e87d7239a0c8f25567617a28fd6e8bed4f20
  • alt-php74-php-fpm-7.4.33-81.el6.x86_64.rpm
    sha:037448581e57a40ffa77f1bab36b3ccbaa8d6813fd921574fb93b37a0c81abc7
  • alt-php74-process-7.4.33-81.el6.x86_64.rpm
    sha:ef447a15b079e132552f31458d1006a949f4c0465936f589e89653782263135b
  • alt-php74-pspell-7.4.33-81.el6.x86_64.rpm
    sha:588de8362d2fddcf53f070bbfadcf1b1f9c7a1175c7b4552327274ee28377d96
  • alt-php74-snmp-7.4.33-81.el6.x86_64.rpm
    sha:66b09e01e897cb1998ac986eb006d500ab84f2bf0b8fc5e6f4cb2bd0aecdf69e
  • alt-php74-soap-7.4.33-81.el6.x86_64.rpm
    sha:51537918e15ab8a37eb9750f080e74cb746bd8d973c7d4ca2085e36cb56d15e3
  • alt-php74-sodium-7.4.33-81.el6.x86_64.rpm
    sha:8e911aa817660b9a06469213d589d28f45d8e6c91a9ffab5693e49e4a4143a1d
  • alt-php74-tidy-7.4.33-81.el6.x86_64.rpm
    sha:aa89fce71955b952e07e94f4a672fc9407b076da8529ce89ed677e44848ef12a
  • alt-php74-xml-7.4.33-81.el6.x86_64.rpm
    sha:6460d81499f5a37c44f3c8c8edd04629e811d89eebd0dd0796bc7bd971c9cad6
  • alt-php74-xmlrpc-7.4.33-81.el6.x86_64.rpm
    sha:215b72714916defaedd797bab8b21b9c303ac93c3489e365755716b7668b4710
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.