[CLSA-2026:1792612635] php: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:31:04 UTC
Description:
- CVE-2026-109618: fix use-after-free from state left behind by an out-of-memory bailout during request parsing - CVE-2026-109619: fix session upload progress handling running before session initialization
CVEs fixed:
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:81bd0d3828bd5e791891fde9147e450b43d8946a1b7aed401622e8df381efe96
  • php-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:2d2da850f0b15f9d466122f846c64ff02177533c6d88f6de9b002be1a47383cc
  • php-bcmath-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:265da889914bce2fd335facb9f64000af2ee2345d5e94220b28388d691074723
  • php-bcmath-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:d60e2e349da1dce4e67445b7d13f82aed4a0a008a444f4737ce2d5a7aec65a67
  • php-cli-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:cd2fcda1a0e81fb3813b3addb03cf609438716bb109ce33459e0f7ce8261cdfe
  • php-cli-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:1bbc95fd5a866ff72affd2b70d8b6512f30a505ccbb62d1be7b1b0bef47511ed
  • php-common-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:0f49fa999cdf61a1a5b0cb6890acec43e6fe77443e185a14f96cff4d2f13a181
  • php-common-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:13aa648f83e9e252d07b62aebe225291e562575921f0e2f687f06dc0113a6f70
  • php-dba-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:d893ef87ce85db97c9649da0f136b20fd5dece2854e7d6d9ad5a1d4596444138
  • php-dba-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:732d5a5d122dd3ab679bf8f4717cfd92c5273929e7b0702142817892213ba8bc
  • php-devel-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:e5895093a18f40772082dcb8cbc038e96a106d6e41a7778e3df4c0b9671680b9
  • php-devel-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:63927bcdcc9313946f720a57a67627f53277673d3f6757e64d59af1e8c3beb4b
  • php-embedded-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:7e27212c8edfd5dd29f960cba1ce90d6b6fd890712a5cde0912fa40a3869cbb3
  • php-embedded-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:ee87431c3beb75bf2fb610667f930e32fb45caacf4ea1deb5d026bf6d4585f71
  • php-enchant-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:05133995269585d50bf4fafd0b179958e32b55b1c00e88c5dcb2fe14196d6603
  • php-enchant-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:bb80c6a57d2ba879143e8e679260811c8912a8a973cd81d38808fc4088b7d23e
  • php-fpm-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:7bd02dcb07bb47200497d6c26602bbfacd7a03c73ca0a7ef25014305a11e7581
  • php-fpm-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:463c0c11f859daf624ff62b94271f0d124d550915a4b0528d9ae449db6dd6327
  • php-gd-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:d46b390dd23348913f16efae76930405efac750ad02dbeabfbe54da6bf1b56b0
  • php-gd-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:308e49f87f5e61b4b6f6c99ba0a9002e4b9810d51cebe909ae4a086ae77521fc
  • php-intl-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:91e84124bcc44db1b41a93efbd78c27b9b35ed9b2a8c61288cae8dfd6a5e7b25
  • php-intl-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:b3327b4f9da93d242d8350eb4485d48476fd9df448b720e2c994731a13a488b5
  • php-ldap-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:f367103763e391d6cded2747e779a829e57f3b168ee7842041d00fa9443d903f
  • php-ldap-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:273e4f8dc5e6b2162e6e6e24faffbe937efdaa003eaf8dd196d1500f1bd5bd1f
  • php-mbstring-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:ba422493c79ea06e812d35183194f103eb26016772ac034b6ad6fe3fbaff1462
  • php-mbstring-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:cafeb76b0d88dd7a3e539ff194552f37f9d7ec40448c8943357c61dbbfc3b6f0
  • php-mysql-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:cb1f284228693c60fddf60d440661e8ae1174d56ca69a14f3bc1c9b92b83157e
  • php-mysql-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:2a40d54a57a2794a4c085f91589be50fa3a659acc19633379214d5899675652e
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:2567ff75915fd65351eeac396fca0ba1abb8afd440a4305710a6d07212dfa585
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:3eefef873ad41f0cb18da33bc77e77dbb592ebbe40b8478d8a5818ecb32f1f36
  • php-odbc-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:83ac012da10d8cc5ccd27a42890d073dcd9c718d3a6b7ee532eeca83276e010e
  • php-odbc-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:147b8f0667444af024fcf427a4c8be774187dfa6cf7632f5fbee88122b06eca0
  • php-pdo-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:f4d51d4451a7b3af130724315eda616a8b0b579048443273ff764d3b9399cc5f
  • php-pdo-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:801ffb0f8530aa3235630d80ca245c4044ae686c91dd3c2e41f8dcbe440b2b7a
  • php-pgsql-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:038cf086fab87127c0d8183bb3584be7141b29aec74e984956997a0ec40f6cfe
  • php-pgsql-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:f3b933747cf8c4dbe35424d2157666ac6f5030b7b8489a123bd2449e995b23ba
  • php-process-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:d78be05222cfb78049040e43c04245711e640180d581976394a5e873341dc2ed
  • php-process-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:965a47e41f09c24b7d067343f79597480a072fcf7271318913dd578d3cdd961e
  • php-pspell-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:80e48b34ae6233f8441523faa49cea979754a0ae723500a617bede3e77427396
  • php-pspell-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:cc1e5850f1f3969655c5184b6361b7122e45b992f34d81cf4cb1aa45b4a4c52e
  • php-recode-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:b3609e2d8d4e1a3454364137d923a0426788f505d5c7a8023cd9e14db1205db9
  • php-recode-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:82581145d4ada0fa466d1317cd4eb1f01acc29c407fb67e90e403cdb4b387a0e
  • php-snmp-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:a3e3021fca5941aad661069a2b4ab4add25cfd39489ec21824a82e773d804ced
  • php-snmp-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:f0f67d1865c9e8bd753b636cbdcdca7fb4c759860ce23126e54cffce92b55403
  • php-soap-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:da31d02af3ce243af554c58977ce7ece5a46136d9b5e3391165cb14b8ef61af3
  • php-soap-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:01ec526b8674e3d33381787f73522a524068c1877495838bdbdded65607c173d
  • php-xml-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:e16919bfe40a542e7531d76b3d731da8f73a2ab615a3406d38bdbc45b463dff9
  • php-xml-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:60c2de5fffd19a96362bf5227d28c3590627e89f8f9cd008e7b300f97e67b364
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els24.i686.rpm
    sha:45cff0cf0bb27bf3657f15dae2f7969a8383b1f0cc6024d63d25cd2914eb9f3a
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els24.x86_64.rpm
    sha:1809b3d47fdc7a99930bfad4a22fef86785ad66b39a5800c4e4e9b198cdabd89
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.