[CLSA-2026:1792634499] alt-php55: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:01:50 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-183.el7.x86_64.rpm
    sha:ab7e406b04321f1a95af90a11d2774c7ff3ce475935cb18dec2df0ff3e1e4847
  • alt-php55-bcmath-5.5.38-183.el7.x86_64.rpm
    sha:df3bd586eadfe93d2a0e4f361b07ea6d0c22cc75f7e114222259f037d827dd85
  • alt-php55-cli-5.5.38-183.el7.x86_64.rpm
    sha:5be6a774a7be26b524e59e4d889242bfb2723de23965e38da8cf10daca5cec9f
  • alt-php55-common-5.5.38-183.el7.x86_64.rpm
    sha:cd75bc3ccfa0db46e72571a7ebc5abd13ae6fabf7aa85260c765dda484c3e9a6
  • alt-php55-dba-5.5.38-183.el7.x86_64.rpm
    sha:05b0fd6b569e9a7a33f8defcc07a1bad33266c8cc0520f149f7966b2c4f721dc
  • alt-php55-dbx-5.5.38-183.el7.x86_64.rpm
    sha:0782d0b59ffd3d96eb85dc0ec8b796d11cf6d4d7b766c1e46909026e2be0fbff
  • alt-php55-devel-5.5.38-183.el7.x86_64.rpm
    sha:484ff215309a846c9591d8e97639984ced3ef5df144e628aae313819976e5b20
  • alt-php55-enchant-5.5.38-183.el7.x86_64.rpm
    sha:6bdd4d790495ec1ff3b25bc1fbea8899eb340ef9759c4941087eed9772f3df84
  • alt-php55-firebird-5.5.38-183.el7.x86_64.rpm
    sha:807a39eabd7c0b4722efdc28c94d09a8ca31c54e33d1307681ffb5d705ffeb30
  • alt-php55-gd-5.5.38-183.el7.x86_64.rpm
    sha:72df7c5aa2cf88183137903adb57ed224bb418243a2f8dda8c2d8be1f4ec4e5a
  • alt-php55-imap-5.5.38-183.el7.x86_64.rpm
    sha:4ef5073a0d352fb466aa4681f8706949ce8f0f9f5d9db88c42965c953c314469
  • alt-php55-intl-5.5.38-183.el7.x86_64.rpm
    sha:9900cbdcac25b67daa34f0878cb02ca0f4ee6bd5cbad10a35fdc0717f2186fa8
  • alt-php55-ldap-5.5.38-183.el7.x86_64.rpm
    sha:f8e0fbe8a832a63b574210429e2f8a830cafd3a2192fece107ffd1c1da6bbeeb
  • alt-php55-mbstring-5.5.38-183.el7.x86_64.rpm
    sha:b0454bee1fdc0fdd159a2b091674faafe8a7627de8d7d86e516c7b9e4a404435
  • alt-php55-mcrypt-5.5.38-183.el7.x86_64.rpm
    sha:b55814592e66eb545806da6773e020fdd0f5e8a3b0be9bc522e2facbdc12cf2b
  • alt-php55-mssql-5.5.38-183.el7.x86_64.rpm
    sha:73e492b214b6962493bc1e4c89dc482a19966ef60bde123fa96bc7b4160df296
  • alt-php55-mysqlnd-5.5.38-183.el7.x86_64.rpm
    sha:af5ce5c51600693c851a2a6c1a50b3d9a7a3773c1836a6fe20a30400ca80f633
  • alt-php55-odbc-5.5.38-183.el7.x86_64.rpm
    sha:78b28862be136e1b1706b11d67583454b917e96b0cb5161c7cff8b2a41a0ec4d
  • alt-php55-opcache-5.5.38-183.el7.x86_64.rpm
    sha:eee6f4e896b0c702f8f54b20dd23a95ef5e38352995133209d609034b09fcf75
  • alt-php55-pdo-5.5.38-183.el7.x86_64.rpm
    sha:df3d7f3dfcbf996b5e6bb3490c7c069afdc0b3de8a761d4f4925172f2dc6b2b7
  • alt-php55-pgsql-5.5.38-183.el7.x86_64.rpm
    sha:d94d646f6e47bb08e46bcd34792682304801d443f345c0d834d7400d66f74f36
  • alt-php55-php-fpm-5.5.38-183.el7.x86_64.rpm
    sha:1ed25090a32aaac86fa52fe2ca80fd3655aec87a30e00e9a649ce61b1bc7a0d5
  • alt-php55-process-5.5.38-183.el7.x86_64.rpm
    sha:da126d7c4faf536fa841745295dfd094c4ea445a7151a22bf8f43c605374ae58
  • alt-php55-pspell-5.5.38-183.el7.x86_64.rpm
    sha:e7618ab1c77ccd014edf7d420086b3662be83eebe7d25cbd85684e47a98a9538
  • alt-php55-recode-5.5.38-183.el7.x86_64.rpm
    sha:4be43ad88a12fe8b4b3674fe94ffe2b25c3d9bad9b1ba4b32271735da3f1beb8
  • alt-php55-snmp-5.5.38-183.el7.x86_64.rpm
    sha:3fc66a895f9802ad7a83c523eb780b5c8b8b7390170749a1884aedfa0990aa34
  • alt-php55-soap-5.5.38-183.el7.x86_64.rpm
    sha:e57aa3bc32ef5c49652665543c20d4481ae30309ed6aa1f2efa6a0f5e9f8baa0
  • alt-php55-sybase-5.5.38-183.el7.x86_64.rpm
    sha:b8817147c44ac978700c452fb7a933361c463535bb1faa094b03233db93087b5
  • alt-php55-tidy-5.5.38-183.el7.x86_64.rpm
    sha:747d04b56eded3dc113edb3365aa1a305a599731925708f21fe3e561c6aae2bf
  • alt-php55-xml-5.5.38-183.el7.x86_64.rpm
    sha:c4554d72aa8f0a59fd03b938fe8d1295814c7e48f7a1df49af39883eae624a41
  • alt-php55-xmlrpc-5.5.38-183.el7.x86_64.rpm
    sha:34c48094dbd93de740fb83102b7dcfb0da1483c4142338ffa828e3920f51f736
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.