[CLSA-2026:1792689834] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 17:24:06 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-5.2-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; adapted from upstream 712e60f9 (PHP 7.4 branch) - CVE-2026-109618 - CVE-2026-109619
Updated packages:
  • alt-php52_5.2.17-242_amd64.deb
    sha:331a22fc8d4951d3a2070dfa16cde7b655238486
  • alt-php52-bcmath_5.2.17-242_amd64.deb
    sha:d80c964e50d6138b6dc15059353d4126f52d0a6d
  • alt-php52-cli_5.2.17-242_amd64.deb
    sha:85af5dc23d667e157d1ae7cef68270c3cc5fddfd
  • alt-php52-common_5.2.17-242_amd64.deb
    sha:d152c5d8025a08cee551a67786d63c8f9e4fd7f7
  • alt-php52-dba_5.2.17-242_amd64.deb
    sha:b2ee4c9dc6a1259724c6afcb04c0d9752f39f388
  • alt-php52-dbx_5.2.17-242_amd64.deb
    sha:969dc199146ad0eea477580027e16f006dd71ec3
  • alt-php52-dev_5.2.17-242_amd64.deb
    sha:b17078a935ab5c2e2f62bedf3fa0b0131f027b15
  • alt-php52-enchant_5.2.17-242_amd64.deb
    sha:f29b1b482873c89120e6b341b8a6985f603248dc
  • alt-php52-firebird_5.2.17-242_amd64.deb
    sha:59772aee58b8461cbe1638068f3545334876b1a2
  • alt-php52-gd_5.2.17-242_amd64.deb
    sha:324527e66b01310bc2a414d19b0e9eb2eff40b2c
  • alt-php52-imap_5.2.17-242_amd64.deb
    sha:c727c7c308b4812173c3b1eb6050a964f066bd43
  • alt-php52-intl_5.2.17-242_amd64.deb
    sha:22b662a95b6c211035b4032f64b7171aadcf2d99
  • alt-php52-ldap_5.2.17-242_amd64.deb
    sha:8d7b9eaf50440267ce87487a1345d9bf62df9bec
  • alt-php52-mbstring_5.2.17-242_amd64.deb
    sha:0663cc84699bfad8b1a5ef39ce03d378a2cfa6ca
  • alt-php52-mcrypt_5.2.17-242_amd64.deb
    sha:01937d28b62aaa7211c27b693fa2c504b3fb72cd
  • alt-php52-mysqlnd_5.2.17-242_amd64.deb
    sha:643ccc57e13b8a275866984a4bbe4db055791b77
  • alt-php52-odbc_5.2.17-242_amd64.deb
    sha:4b13c1877ca4b8947e7bdfb9f84ce05612d3f9be
  • alt-php52-pdo_5.2.17-242_amd64.deb
    sha:00131e8d4619897ba37d023ca4fe573a4d431ad7
  • alt-php52-pgsql_5.2.17-242_amd64.deb
    sha:cc2cb95886652c1ffe57d87736f4476f6cf31d57
  • alt-php52-process_5.2.17-242_amd64.deb
    sha:03de19f9452cc34244277e18587d969bc23c99a1
  • alt-php52-pspell_5.2.17-242_amd64.deb
    sha:207e167904bf9e92c477d8cd8f16f972c5593d37
  • alt-php52-recode_5.2.17-242_amd64.deb
    sha:1c3479cd9027fa98d6c04467a623ac32b0e45056
  • alt-php52-snmp_5.2.17-242_amd64.deb
    sha:cf673303760b42261095edb26beb1c0c65ad16ba
  • alt-php52-soap_5.2.17-242_amd64.deb
    sha:0e42fd9b6d8f57119d61437a43251c38fab1465a
  • alt-php52-sqlite_5.2.17-242_amd64.deb
    sha:9974e7f9717c93ab798aa6746038e011cf89fd66
  • alt-php52-sybase_5.2.17-242_amd64.deb
    sha:72d0c261c21cb0aa458fb0c02f6b24f397785a87
  • alt-php52-tidy_5.2.17-242_amd64.deb
    sha:7fea0431e1355dcf451757b7ef63bde6463a7971
  • alt-php52-xml_5.2.17-242_amd64.deb
    sha:f76bad2d059c209dd76c2ef484e07d114cc43742
  • alt-php52-xmlrpc_5.2.17-242_amd64.deb
    sha:4cad6a279dea38b74004b19720b2cec04cb07768
  • alt-php52_5.2.17-242_arm64.deb
    sha:63e1d39eccc6a259e7ba5ec71d1ff0ccc5686750
  • alt-php52-bcmath_5.2.17-242_arm64.deb
    sha:ba005b8c8c58c695469607fb13759f1320804188
  • alt-php52-cli_5.2.17-242_arm64.deb
    sha:90f9a07c14228f34758b98404662d18ccc80adb3
  • alt-php52-common_5.2.17-242_arm64.deb
    sha:71930abe2ae8e84d17eafae8d942db62963eb192
  • alt-php52-dba_5.2.17-242_arm64.deb
    sha:8a52631b6da27d04f34064c094d8424d510d4ff2
  • alt-php52-dbx_5.2.17-242_arm64.deb
    sha:3fc50c6b14b14af5196095a5da37eba3ae212eca
  • alt-php52-dev_5.2.17-242_arm64.deb
    sha:7c906ff45a0b01f9662846ce5adb1c5069d152d8
  • alt-php52-enchant_5.2.17-242_arm64.deb
    sha:ca8c9d4241db8a1675eb76d2f9e652ddad77ea0a
  • alt-php52-firebird_5.2.17-242_arm64.deb
    sha:0fe9c6d7be0db37b0e19d22b71c9b951d9ccc386
  • alt-php52-gd_5.2.17-242_arm64.deb
    sha:15313be85f0934e3cbc8932b5c699ba5ea0df9f9
  • alt-php52-imap_5.2.17-242_arm64.deb
    sha:7a745893bcbf679e14ed998989315c34e89fb6c4
  • alt-php52-intl_5.2.17-242_arm64.deb
    sha:2424b1e72167dda43500c565a704afc257a39135
  • alt-php52-ldap_5.2.17-242_arm64.deb
    sha:d8d6e6baa59ffedc0da0ce085040345373e0f4ea
  • alt-php52-mbstring_5.2.17-242_arm64.deb
    sha:a223fcdc33389e3198b25ac3ab71839ad8beaffc
  • alt-php52-mcrypt_5.2.17-242_arm64.deb
    sha:898bac518da4537a4b7c6c6e89eedc00611c1c00
  • alt-php52-mysqlnd_5.2.17-242_arm64.deb
    sha:b641fa066fb22f06bac518ce57f7d065019134ad
  • alt-php52-odbc_5.2.17-242_arm64.deb
    sha:43460f61b2b2ebefbea19e94f4f45266bcc819b4
  • alt-php52-pdo_5.2.17-242_arm64.deb
    sha:2a983fa106ee76ac3886b3db97df3ef757f8aab2
  • alt-php52-pgsql_5.2.17-242_arm64.deb
    sha:aca0921db0309a87f9a505a8bbe52c2c0e96afe6
  • alt-php52-process_5.2.17-242_arm64.deb
    sha:90554788ea1a7636cb37783d4dcf25aabebc41a0
  • alt-php52-pspell_5.2.17-242_arm64.deb
    sha:8a960306a5e06420026bf18c076af389625aef25
  • alt-php52-recode_5.2.17-242_arm64.deb
    sha:dcbeeba3e3252eb9bc2a4b669e8898162dd77a94
  • alt-php52-snmp_5.2.17-242_arm64.deb
    sha:0f1de356ee85aaf728b7dae67b386e0583f1d0f0
  • alt-php52-soap_5.2.17-242_arm64.deb
    sha:132a725792fc5c37246e1ae9ae38a100eefdf9c8
  • alt-php52-sqlite_5.2.17-242_arm64.deb
    sha:9c0d24d0007bc994898680f397e8dea3cdbcae1c
  • alt-php52-sybase_5.2.17-242_arm64.deb
    sha:1d8afc1b20e51dc55b7f302a1ba58f60ae95f830
  • alt-php52-tidy_5.2.17-242_arm64.deb
    sha:c8e98fded31e038e6809228184ddc3efd92ec211
  • alt-php52-xml_5.2.17-242_arm64.deb
    sha:84f208da759bc4c52249e9bb4db3cdbde86efcbf
  • alt-php52-xmlrpc_5.2.17-242_arm64.deb
    sha:159ab774ba62bee8ca6384087081ffce1e139625
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.