[CLSA-2026:1792597867] alt-php74: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 21:28:31 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 712e60f9 (PHP 7.4 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php74-7.4.33-81.el9.x86_64.rpm
    sha:523af2b39a8dcdacbb74bdf7e35f851fbc0329563acaec8cb32118070aebe44c
  • alt-php74-bcmath-7.4.33-81.el9.x86_64.rpm
    sha:501955149a081f1495482f3065fbffbda98a08324409650508558e95976d9c8d
  • alt-php74-cli-7.4.33-81.el9.x86_64.rpm
    sha:f3846b53ae2931aca7732f62027a098e3ffebab689223dbbcadd1c97ea8a3cbd
  • alt-php74-common-7.4.33-81.el9.x86_64.rpm
    sha:1880cae44ac6502060599520fd5b13e8315f7b2582339418534c5d1fc9ea84e0
  • alt-php74-dba-7.4.33-81.el9.x86_64.rpm
    sha:bd4c1b8a7f3fee6982572d97f913f1c585ff7204eca3ce5f663e01eeb96bf1dc
  • alt-php74-devel-7.4.33-81.el9.x86_64.rpm
    sha:b59cd7a3f288e5885c02e00df503e9c55e0f4df0e96559950235214fde210a2f
  • alt-php74-enchant-7.4.33-81.el9.x86_64.rpm
    sha:1667d862e06e44b0dbe3636b1a8dcfbed8647e32294a3be349a327c61752ef28
  • alt-php74-firebird-7.4.33-81.el9.x86_64.rpm
    sha:c2d79b682e54b840b46ff256f48194246ed3fcb89cd286adcd3895d08406dc3d
  • alt-php74-gd-7.4.33-81.el9.x86_64.rpm
    sha:201ac39fee2c5b874767fc9b4f82201772bc510e9c9c14b1745987ea9b99bd70
  • alt-php74-imap-7.4.33-81.el9.x86_64.rpm
    sha:0cc5bdeeb94fe6eb23499555be6da0106a40083217e2580d6dacd95fe8f78835
  • alt-php74-intl-7.4.33-81.el9.x86_64.rpm
    sha:785911eb1c0a2383d70f2924ce2e8ae02e8e7234efd3502a3ab3b0c1776b1fe9
  • alt-php74-ldap-7.4.33-81.el9.x86_64.rpm
    sha:c19e08c6510e3b4c5526426f0d04511697301a46fcc19bb02c8e58d03383e062
  • alt-php74-mbstring-7.4.33-81.el9.x86_64.rpm
    sha:78b6731033351dd9c176b9f09b81a823322a612c1d9ffd9751dd6035cc81f43c
  • alt-php74-mysqlnd-7.4.33-81.el9.x86_64.rpm
    sha:9d17d145c01c7dcc126bc7d9f440737553c9daab6d5e5b1f31e734c30f0ede60
  • alt-php74-odbc-7.4.33-81.el9.x86_64.rpm
    sha:e5259be8b2e4aa2f99caab1db653f065fea958c76931e9c35f7bc410ea7c0b98
  • alt-php74-opcache-7.4.33-81.el9.x86_64.rpm
    sha:9026e71131176b69f6be2594e968c3b788eb89bc5bbdeb0244379679f9b5809e
  • alt-php74-pdo-7.4.33-81.el9.x86_64.rpm
    sha:4d4199d1cd0aba0247b889921ee354c0427475fedfab2a9d5ca374f679f8145f
  • alt-php74-pgsql-7.4.33-81.el9.x86_64.rpm
    sha:08123637bf6a05d01380461e4bfa4aeb5589453389bd1c1e18c1b65846e1885a
  • alt-php74-php-fpm-7.4.33-81.el9.x86_64.rpm
    sha:77676fe7d599db4102cc5b0e003d19eac9af6e6f7358411e53303a8ad83836af
  • alt-php74-process-7.4.33-81.el9.x86_64.rpm
    sha:7c3b0ef86dc38fa33fa5dd102ddc6e3b72cc2f826bd2e460aa17ac1935126919
  • alt-php74-pspell-7.4.33-81.el9.x86_64.rpm
    sha:4d7da6599ef869d745c1df352156ff2b75ca0016f47d0e71ecc8094a1e7b353c
  • alt-php74-snmp-7.4.33-81.el9.x86_64.rpm
    sha:706c1b9e11c8bd95b6c3c3f9be0d27ce582449db2723526253ec74e2d3e28ea2
  • alt-php74-soap-7.4.33-81.el9.x86_64.rpm
    sha:aa40b4aa40c213971e7339af10c2b805c6359d40b4828117f8ebd206feca0215
  • alt-php74-sodium-7.4.33-81.el9.x86_64.rpm
    sha:298e6745861cacb6f38b02a79cf18109bb8251ab87952970d4639328e158c750
  • alt-php74-tidy-7.4.33-81.el9.x86_64.rpm
    sha:8864f7555d7d8bf74398def63f8cf8d8aa8fe787b117280fffd503a024bc7cf2
  • alt-php74-xml-7.4.33-81.el9.x86_64.rpm
    sha:90cb871c523c891d2db8401ab64a25e227f5abae815aa371d2ecc40b6ee1e6d3
  • alt-php74-xmlrpc-7.4.33-81.el9.x86_64.rpm
    sha:9f437e0ffc4223cf9dae57f35eb7881f3b3614784b0af08717b13057087a28a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.