[CLSA-2026:1792637668] alt-php52: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:54:39 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php52-5.2.17-242.el9.x86_64.rpm
    sha:9e652c4ee067d136400155fc0d21c63d8392facc1a6d2fa232f6815556b25d68
  • alt-php52-bcmath-5.2.17-242.el9.x86_64.rpm
    sha:e2c191c3252504f02a830eb6dd4164f2434af7331296a7774da92c538ddc6f22
  • alt-php52-cli-5.2.17-242.el9.x86_64.rpm
    sha:484005852b20b547176d4fe872f8fc9d722bc050fa4ddbb3d45209c7bec82c6c
  • alt-php52-common-5.2.17-242.el9.x86_64.rpm
    sha:e56ce469712300eb4b99a29c5b389912f1ca34a30a5d3b80664d068015ab7536
  • alt-php52-dba-5.2.17-242.el9.x86_64.rpm
    sha:bdbfac075d2a66b89349351f51db7e385daa2dd74025f3f0d061024752581d1b
  • alt-php52-dbx-5.2.17-242.el9.x86_64.rpm
    sha:52c2787c25e262a138b138e9c63e05a337b6d9014c247451899db981b857fe0e
  • alt-php52-devel-5.2.17-242.el9.x86_64.rpm
    sha:be333fc2e409c05d61449231afad7147a5cb25ee1b16129f1acc94aab8e9581a
  • alt-php52-enchant-5.2.17-242.el9.x86_64.rpm
    sha:5ef2e5dc96254bf55dc492508805c394eadb5058e9c09631b9c69610c2a84de2
  • alt-php52-firebird-5.2.17-242.el9.x86_64.rpm
    sha:398d33a390ae6a04f7a3a1f599fc69e36d8fb162e613b3ec8057e173774b807d
  • alt-php52-gd-5.2.17-242.el9.x86_64.rpm
    sha:4b8929e6a255b255055438bb0198c2b7992d88a77cb4bc185da909d00109df3e
  • alt-php52-imap-5.2.17-242.el9.x86_64.rpm
    sha:f54656d9895452f3557cf583b5e0b36e142861eea8e0a51b3b368b77f9656c0d
  • alt-php52-intl-5.2.17-242.el9.x86_64.rpm
    sha:c32dff3d0fc35f681b9dab896e7f5a0b1889b05c8b97304ec1602ce702c53939
  • alt-php52-ldap-5.2.17-242.el9.x86_64.rpm
    sha:79be860fa6b9b61926fa796f018692200e0ac7db80bfc3b1b3bf7ffd6a245250
  • alt-php52-mbstring-5.2.17-242.el9.x86_64.rpm
    sha:4ff3b39cfbb924b00609f54f8b8e7f2ec3cbb429c4d9143fbd381741eabf0c1a
  • alt-php52-mcrypt-5.2.17-242.el9.x86_64.rpm
    sha:2a873c1e688b438b4842615ff84e6dc6b13485f2e7f9a97747a9cda8e6210ad8
  • alt-php52-mssql-5.2.17-242.el9.x86_64.rpm
    sha:4b9cf58c1b67b33ed87bed9437e0196e100715980a59b52094cb1798d5fbc33f
  • alt-php52-ncurses-5.2.17-242.el9.x86_64.rpm
    sha:201d3547eade9b2c3c1c7bccca4061eb772bbeda96b9d36b7f9feac3fea66531
  • alt-php52-odbc-5.2.17-242.el9.x86_64.rpm
    sha:851f761c38d7ef2003390ce46c8d0d7bf9b585658f9fa611cbc68116e11304a9
  • alt-php52-pdo-5.2.17-242.el9.x86_64.rpm
    sha:33e40da487000a3c1d82df3f07cc90c0526bcaedd5db5b92d0c85452e3a11c6f
  • alt-php52-pgsql-5.2.17-242.el9.x86_64.rpm
    sha:8440284b25e72ab955d1e2e9f8d5ab09c6d3e034052298678865dea99a7b6103
  • alt-php52-process-5.2.17-242.el9.x86_64.rpm
    sha:62502e8aba95499960d52d1e61fdd6e336bf08e9eca8084d845d26466356a1ab
  • alt-php52-pspell-5.2.17-242.el9.x86_64.rpm
    sha:e45620caa9f9ae5fbe92615bf7aa0aa7775e7ab7d5a88760754a7082d23cece1
  • alt-php52-recode-5.2.17-242.el9.x86_64.rpm
    sha:3b5a7c3232af092c62c3752e1ec0a7dd621bf391898f4c43954bde0dbbf5729f
  • alt-php52-snmp-5.2.17-242.el9.x86_64.rpm
    sha:ca75d80094a1fba81d5081f6ca41c1bfa59984aae66263655a0f9f358ed65f5a
  • alt-php52-soap-5.2.17-242.el9.x86_64.rpm
    sha:e5eac17d095f32fafd40d7820c098fc0955b749cdcc6f8670cc4d891c51c14b8
  • alt-php52-sqlite-5.2.17-242.el9.x86_64.rpm
    sha:b9ca032c17940ec57faaea1b71f380e587aedd96e46adedd4fb9c219f695a0fa
  • alt-php52-sybase-5.2.17-242.el9.x86_64.rpm
    sha:f8399575c36098ce195bd7946a24984a38741b576e9f6a38f5fd13b9b6a3fc08
  • alt-php52-tidy-5.2.17-242.el9.x86_64.rpm
    sha:64e1f569465f42819ccb555ab0dd4d214625567e9710e176813305b822b5eac5
  • alt-php52-xml-5.2.17-242.el9.x86_64.rpm
    sha:24168e4349f6ee86bf18de501bc0379387d5f03cb2a2b05bd63f0f10447c2693
  • alt-php52-xmlrpc-5.2.17-242.el9.x86_64.rpm
    sha:588caf764a7140cab88718674830bc90d89cf1793c3f60aff0b628116d25df51
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.