[CLSA-2026:1792633553] alt-php54: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:46:04 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php54-5.4.45-203.el8.x86_64.rpm
    sha:35a5a5e35331aba5c88b640ae33dde84da422214f835a6a13041066233a81f04
  • alt-php54-bcmath-5.4.45-203.el8.x86_64.rpm
    sha:13e2aa73ceac9fb3b6e9494a5dd42d547739cdb2c080e90d2348b443ec950b34
  • alt-php54-cli-5.4.45-203.el8.x86_64.rpm
    sha:8c516addc8076845e79f92345d410322248f215c07692d797931581deed0d1ec
  • alt-php54-common-5.4.45-203.el8.x86_64.rpm
    sha:fe1da35b1ca398b4efc0f4db9065d74ad85828be6aad42ccad8c35c00c1da359
  • alt-php54-dba-5.4.45-203.el8.x86_64.rpm
    sha:9f89df0f0bb19cbe3c2bcf70ef93cd6042f3bb0249f5920bae23e3caa554e66c
  • alt-php54-dbx-5.4.45-203.el8.x86_64.rpm
    sha:3d5ab2561bb08b024ff6d2f4b8c265f986591b799e149f835e8c1570ed71e5d6
  • alt-php54-devel-5.4.45-203.el8.x86_64.rpm
    sha:6a840d8904473e78be84acfd96b21f1b554deee330e05b2cca93c2f6fccfb34c
  • alt-php54-enchant-5.4.45-203.el8.x86_64.rpm
    sha:dd0ed59f6f315a6af8e8cc2055c66604962faade3ba49f5d7a2fe3538b0f5fdd
  • alt-php54-firebird-5.4.45-203.el8.x86_64.rpm
    sha:2d9f2b43839b3d45d0855c0f8e6bad66fe7e12358269422e1aac2acfceb992da
  • alt-php54-gd-5.4.45-203.el8.x86_64.rpm
    sha:449c4dbb47891f589f63269aad75bbb176a24ce6cb9941e415508c63ff7caf68
  • alt-php54-imap-5.4.45-203.el8.x86_64.rpm
    sha:98bc744c5dc428704e56765fd2236b95b4041596a6279ddba51121d0a43860f3
  • alt-php54-intl-5.4.45-203.el8.x86_64.rpm
    sha:6a00bc4935eb3c25577f87c28ba14f8cf6a69a55bc4874adf35e673b84bc8364
  • alt-php54-ldap-5.4.45-203.el8.x86_64.rpm
    sha:f16d1d7b9d0da94189923338fb93e561dd65eb64067b4fb3ea7cac76693262cb
  • alt-php54-mbstring-5.4.45-203.el8.x86_64.rpm
    sha:6b42a78a3d3330b5e4e5b136912475a05a208286b3628f6c8d58537533d5e725
  • alt-php54-mcrypt-5.4.45-203.el8.x86_64.rpm
    sha:e4a03d1a5d90154a74606d12c6c2a5fb41f5e03c28cdd4031f5f75a34276c343
  • alt-php54-mssql-5.4.45-203.el8.x86_64.rpm
    sha:36a9f39b224882fe6257c089732e47867d6e66d76cfd333e1c3ce07fb343ae3a
  • alt-php54-mysqlnd-5.4.45-203.el8.x86_64.rpm
    sha:046aaca8278fcab126e372573238f1997ade4d2fefae08be66ff463a5c25a92b
  • alt-php54-odbc-5.4.45-203.el8.x86_64.rpm
    sha:be034fd79f7f0232d81ae1c38acd3807d28d63a9c736fc16aab46d60bec99b56
  • alt-php54-pdo-5.4.45-203.el8.x86_64.rpm
    sha:a37440516e2cdd2479e8636aedb44405931607461f0f2f4559984ce63bd97ece
  • alt-php54-pgsql-5.4.45-203.el8.x86_64.rpm
    sha:683af6edf1091fc304c5593ee5ea665b203b30a204b105cfdcb69851c2dcfef9
  • alt-php54-php-fpm-5.4.45-203.el8.x86_64.rpm
    sha:941b7d95587a12a387706b683bffd9355c6008419296e3da6651aab23e5670d7
  • alt-php54-process-5.4.45-203.el8.x86_64.rpm
    sha:c9823d04aa5cac57fa8db03a62084b8eba20892eb49b1760ee49356f918d0137
  • alt-php54-pspell-5.4.45-203.el8.x86_64.rpm
    sha:607100feca335ae9df965e2a30e72f632fb4e7e2557aa2f41611f4559b8321bc
  • alt-php54-recode-5.4.45-203.el8.x86_64.rpm
    sha:ff51552276b462113a1151db157cf83e984271ab85b4fe56caad168dd37960c2
  • alt-php54-snmp-5.4.45-203.el8.x86_64.rpm
    sha:6b1d94186b7d82c1f59986c515a9c37486c1b6f484bfc19337c158a405103caa
  • alt-php54-soap-5.4.45-203.el8.x86_64.rpm
    sha:f5cceba58b1c84173387210ea676ba4d04ec53323220905e5db5217c1a6ccd26
  • alt-php54-sybase-5.4.45-203.el8.x86_64.rpm
    sha:403361a4af794962a7b68721d8f8c1e6ac0147212f6aff55674ba3f28de7ba4b
  • alt-php54-tidy-5.4.45-203.el8.x86_64.rpm
    sha:c3e679e6cead9ed6e526caf24f3168661580747cda56e8e9d7991ac738413195
  • alt-php54-xml-5.4.45-203.el8.x86_64.rpm
    sha:b0f3795d2f4d8670b2f4e1b636e91d4ed0dbd2278fb8595b0d96c8ae96db0be9
  • alt-php54-xmlrpc-5.4.45-203.el8.x86_64.rpm
    sha:8ebb358e1f2635986e999a51b12fee27634b54333d9e44f722f7f9359dcf5bac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.