[CLSA-2026:1792635731] alt-php56: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:22:23 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php56-5.6.40-147.el7.x86_64.rpm
    sha:a2092cc6b8a34d21342f42a660c3fef4c0ab85ed7df77bd46be0dc7e2c913c27
  • alt-php56-bcmath-5.6.40-147.el7.x86_64.rpm
    sha:826a08b0aeca0797f78a2cf8f2162efe773ddee746517d8b62fb23b8571a8992
  • alt-php56-cli-5.6.40-147.el7.x86_64.rpm
    sha:c447c3ae65eaa198a66dd9702eb4ce251caf2c7d3f5e39c01fd74e9572b0e307
  • alt-php56-common-5.6.40-147.el7.x86_64.rpm
    sha:ef2a3a6ee21c29a42e2472bda5cb1372f258491eb28d62b9f1bed093cb554927
  • alt-php56-dba-5.6.40-147.el7.x86_64.rpm
    sha:5c4229d521e7070e232f7f91488345460c9c1c1ae7dd8bf7998248daebdaaf65
  • alt-php56-dbx-5.6.40-147.el7.x86_64.rpm
    sha:f14ee65cdb2e606b35e41d6c6dd7e7bd516d38270b212d3c967836a8722f0c7a
  • alt-php56-devel-5.6.40-147.el7.x86_64.rpm
    sha:6f00b9089d765fa274a98093bfbd31bfac4c24d40c9096bfcd62d1154fea5fda
  • alt-php56-enchant-5.6.40-147.el7.x86_64.rpm
    sha:e3f62106cd3eb8c784f13edcb9d0f55cc2bc3320214a2edc81521d5cdf7c0f33
  • alt-php56-firebird-5.6.40-147.el7.x86_64.rpm
    sha:5d25ed44d705e8d905f844cb32702ea36ce4a5e788ab6d09681918f240f6e8c7
  • alt-php56-gd-5.6.40-147.el7.x86_64.rpm
    sha:73bbd084306fb629d439e8259fb6d31db9c84f5411c7a0089081de68d08dbcc4
  • alt-php56-imap-5.6.40-147.el7.x86_64.rpm
    sha:06eb6f6e03eb897ff1ce88df8a0280f82140ac0353d3ddacc4d9a7aef1b6d39f
  • alt-php56-intl-5.6.40-147.el7.x86_64.rpm
    sha:2f1d2e81afc674856be4fe2766e9bd3b6b25da82535cbf78f283f402fb28d4f7
  • alt-php56-ldap-5.6.40-147.el7.x86_64.rpm
    sha:a32af734ed00c41652892b7a5c61b6871333a8577127c2a6fb3056db4038c0cc
  • alt-php56-mbstring-5.6.40-147.el7.x86_64.rpm
    sha:67c186f53d40ce24110b9dc3ba2efdd00eee3e50f746c6fb9e61d8dd776e749a
  • alt-php56-mcrypt-5.6.40-147.el7.x86_64.rpm
    sha:546ba9a1ea4d520912534f52e753407a53be2a88a9dbe2b9de57723cfcf2cdb6
  • alt-php56-mssql-5.6.40-147.el7.x86_64.rpm
    sha:05e90a6975088e803018faa4cc0d1ba87e8661f19efa3dbf6f846d951e9b06ce
  • alt-php56-mysqlnd-5.6.40-147.el7.x86_64.rpm
    sha:4481e9f7490b7e2569ddcb39887621c8ad1d39bfb49f16dd40850d4dcd829cae
  • alt-php56-odbc-5.6.40-147.el7.x86_64.rpm
    sha:74dd5b1b8db24f30128be4084bd4da2e94b503f5145803c660a0fa4723edeaf0
  • alt-php56-opcache-5.6.40-147.el7.x86_64.rpm
    sha:70935e4a35e0469e7064ee6da618ad7dacc3fe7b32dc0a6b943563582ef9c475
  • alt-php56-pdo-5.6.40-147.el7.x86_64.rpm
    sha:d374e17a95621adbce5e83336288f7cda98570b40bf8d7700e67c6ca93de8a17
  • alt-php56-pgsql-5.6.40-147.el7.x86_64.rpm
    sha:55d9c28d927ee01f0b210cb71bcf896bc16b34bdb68a4a175511663f266843ab
  • alt-php56-php-fpm-5.6.40-147.el7.x86_64.rpm
    sha:c0d3f708c487b1407b2676756c6f18aa8ce83da6c542f6f1e04f225be21466aa
  • alt-php56-process-5.6.40-147.el7.x86_64.rpm
    sha:f85dd56d2f9b6cc1f7f353767eb2c4f548221580cd0ef71a2cfead197e675970
  • alt-php56-pspell-5.6.40-147.el7.x86_64.rpm
    sha:d36a24cb3a898dc3bd571b3d88e6bbdb8f481b88cfcc4df7a0e0aa7a6ee6cdd1
  • alt-php56-recode-5.6.40-147.el7.x86_64.rpm
    sha:6b978c048d6284845880c32634d0b2c77eddad124c03f211421b7003a47a8978
  • alt-php56-snmp-5.6.40-147.el7.x86_64.rpm
    sha:ed4328e1c886fc19b6468c76ba57bebe358ebb69b7a610c5f1fbc3e122fa8263
  • alt-php56-soap-5.6.40-147.el7.x86_64.rpm
    sha:b34ad953050dd68a9f2ecc0e91cadaecaa8c7e84070f1e3db5accf80464afae2
  • alt-php56-sybase-5.6.40-147.el7.x86_64.rpm
    sha:0382095189665935ba40ff25c25bd09f15a3e532524fad5338dc0df4ca2cc21d
  • alt-php56-tidy-5.6.40-147.el7.x86_64.rpm
    sha:90fdb91f0cfb7068e297fc2ce92e0de9411835f9056c14e43971686d01573b54
  • alt-php56-xml-5.6.40-147.el7.x86_64.rpm
    sha:1035e1700b05037b8e87871c636a5cc91671b9dae569c7c6f73b5d5951e705e9
  • alt-php56-xmlrpc-5.6.40-147.el7.x86_64.rpm
    sha:31dd8e0c74bda63d1fbaf4920129ef5b217c04671a11bf60b72ffc975e22c114
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.