[CLSA-2026:1792690544] Fix of 9 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 17:36:01 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-5.6-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect; adapted from upstream 712e60f9 (PHP 7.4 branch) - CVE-2026-109618 - CVE-2026-109619
Updated packages:
  • alt-php56_5.6.40-150_amd64.deb
    sha:3fe2a211a8bedb75f2c97a9629dd970198e7a681
  • alt-php56-bcmath_5.6.40-150_amd64.deb
    sha:f1f60cc2e663b36ed7d62afe7162261f442ea8f8
  • alt-php56-cli_5.6.40-150_amd64.deb
    sha:024a03f8111f179746e9142903e09b72b62963e1
  • alt-php56-common_5.6.40-150_amd64.deb
    sha:6427f7ea6da07e5dd101c0473935485831593235
  • alt-php56-dba_5.6.40-150_amd64.deb
    sha:5b6c1cf13b93cb864a0648356df4a6756c45094c
  • alt-php56-dbx_5.6.40-150_amd64.deb
    sha:cee772e459d31a1ae3f7deed05c1771c7305b731
  • alt-php56-dev_5.6.40-150_amd64.deb
    sha:d0e4866af236deba2750c63904ac9bb554566504
  • alt-php56-enchant_5.6.40-150_amd64.deb
    sha:e0db3f188c5a7216ffe81dc66c5bed192a2eae09
  • alt-php56-firebird_5.6.40-150_amd64.deb
    sha:c1dc80cb17509d0848b13a406f0c005475e1156a
  • alt-php56-gd_5.6.40-150_amd64.deb
    sha:2b1ec22cb491ad4ff236ef330d979829aa2f34fb
  • alt-php56-imap_5.6.40-150_amd64.deb
    sha:6a745f4b2828181d524a42514d9dc49f10167411
  • alt-php56-intl_5.6.40-150_amd64.deb
    sha:03cf77c3c1e191662f51cb41a3996e734c92dd56
  • alt-php56-ldap_5.6.40-150_amd64.deb
    sha:d90fd849dc944c34e49fab49dca74c814343ff5b
  • alt-php56-mbstring_5.6.40-150_amd64.deb
    sha:516369428f4fd45286930a605b1fbda12f5ff8a8
  • alt-php56-mcrypt_5.6.40-150_amd64.deb
    sha:8eef3ea1badf3b70ff130dbfe3049f61aced5409
  • alt-php56-mysqlnd_5.6.40-150_amd64.deb
    sha:05b31b1d116247a501b877fbfa039d17ae03d7fc
  • alt-php56-odbc_5.6.40-150_amd64.deb
    sha:6bb56e0f6163ef5847fb9dd796631fd31474796b
  • alt-php56-opcache_5.6.40-150_amd64.deb
    sha:cce94d359bda7d3c7c27e11500cd23bc860882b5
  • alt-php56-pdo_5.6.40-150_amd64.deb
    sha:e23c9ade1f40687c99fe630d148b3158b2717b57
  • alt-php56-pgsql_5.6.40-150_amd64.deb
    sha:996a46efbe81f252a06d5f7a088f9e4b4069761b
  • alt-php56-php-fpm_5.6.40-150_amd64.deb
    sha:dd2223493953bd16d1b4c8d839180b4f6bd98a9e
  • alt-php56-process_5.6.40-150_amd64.deb
    sha:a1ee79e3d795adf09a99db8877086d19de09a467
  • alt-php56-pspell_5.6.40-150_amd64.deb
    sha:8fbce8134b48cf5bd2e5f8dbada65791ba73a439
  • alt-php56-recode_5.6.40-150_amd64.deb
    sha:9de934cf4d1ba4e12a6ef809f23293df61cf93be
  • alt-php56-snmp_5.6.40-150_amd64.deb
    sha:27f91ce39c7e0bec2ca32e2f35fbbd73b64539f4
  • alt-php56-soap_5.6.40-150_amd64.deb
    sha:4a765bf110ec4b98eb8ef3b04f4e2183168d5498
  • alt-php56-sybase_5.6.40-150_amd64.deb
    sha:9f6306d42912b349fde41e6ee86ee6ea105fc43c
  • alt-php56-tidy_5.6.40-150_amd64.deb
    sha:9e1a3afd2d5f721f8536a11e2bd942522cdd8d1c
  • alt-php56-xml_5.6.40-150_amd64.deb
    sha:431bbc20b351a7b816d1aeb272c0ad2532cfbb22
  • alt-php56-xmlrpc_5.6.40-150_amd64.deb
    sha:b4b7af5a809ea6f15a0a9da8a842fc1f17ea8de3
  • alt-php56_5.6.40-150_arm64.deb
    sha:c573bd7d5031db5e2bb33b63d4c805a0e85cc28a
  • alt-php56-bcmath_5.6.40-150_arm64.deb
    sha:0938746e8c5a3742cfe3351e4875fc33b2cd34f4
  • alt-php56-cli_5.6.40-150_arm64.deb
    sha:df95ef4de537695815bf8cd39437ec1074eaed00
  • alt-php56-common_5.6.40-150_arm64.deb
    sha:334dd025b94f8a7f7a563b24cd2538192bf4f343
  • alt-php56-dba_5.6.40-150_arm64.deb
    sha:391fd3a29b2c001ee64c8e1d4fb628c86bfd7382
  • alt-php56-dbx_5.6.40-150_arm64.deb
    sha:c2285055aaddb64e00aac3931a789f974f3a0dbb
  • alt-php56-dev_5.6.40-150_arm64.deb
    sha:b10cb4ac212ce1916612c3417e843008d455eedf
  • alt-php56-enchant_5.6.40-150_arm64.deb
    sha:48ae3c83be84a71e71091218de4cec40510c0aa5
  • alt-php56-firebird_5.6.40-150_arm64.deb
    sha:853ca11c04a42ad1767b01d08908928046be4abb
  • alt-php56-gd_5.6.40-150_arm64.deb
    sha:06106d8c259e3c84bc1f2605ba1dd438cb9238b9
  • alt-php56-imap_5.6.40-150_arm64.deb
    sha:7bfdef1f4d6248897b65f0a1593bceb1440b077c
  • alt-php56-intl_5.6.40-150_arm64.deb
    sha:60e8f9f79a4c1de85be699ebec8be6ef5b2f1d97
  • alt-php56-ldap_5.6.40-150_arm64.deb
    sha:f91408b2ad78b2fc9e284b2afc89007a79697f3f
  • alt-php56-mbstring_5.6.40-150_arm64.deb
    sha:3e271dc8b0e0bb9978856d8143b7bd2619acfca9
  • alt-php56-mcrypt_5.6.40-150_arm64.deb
    sha:44545b4ae58c68c12bf7ddeb1a283a4af01f1b9c
  • alt-php56-mysqlnd_5.6.40-150_arm64.deb
    sha:fe72c8a1a7684b77bd77e975bd46ba6872f622d7
  • alt-php56-odbc_5.6.40-150_arm64.deb
    sha:7b6b7402f4a80a6b7c91b720580ea709dbb4ea3a
  • alt-php56-opcache_5.6.40-150_arm64.deb
    sha:555eebec4df48cca614b34cad1eb15dedbc46a6e
  • alt-php56-pdo_5.6.40-150_arm64.deb
    sha:1c6215c4e067c43f231cf77caf0041f1da064ebf
  • alt-php56-pgsql_5.6.40-150_arm64.deb
    sha:e1272ed47073b3ed23e7b76741645784d6b56c01
  • alt-php56-php-fpm_5.6.40-150_arm64.deb
    sha:e2179dd19fa0f676ffcde66015d0c44d22662f77
  • alt-php56-process_5.6.40-150_arm64.deb
    sha:2239da27c7252df67a532b4653c35cc85019f4c6
  • alt-php56-pspell_5.6.40-150_arm64.deb
    sha:1bc712c8b4a2f49e6b32014dfbc92748ec6a77d9
  • alt-php56-recode_5.6.40-150_arm64.deb
    sha:677930e0d7f8b24b2a078867eb7c6ebe27262e66
  • alt-php56-snmp_5.6.40-150_arm64.deb
    sha:63df179aafa103ead13e93fc7b7c7413133fe8f9
  • alt-php56-soap_5.6.40-150_arm64.deb
    sha:dbc255d8a6729b9fb3595fcf7567a3e9d75e0f95
  • alt-php56-sybase_5.6.40-150_arm64.deb
    sha:ce6b75b4397bcc94ffd3131b344ef47c97dc8f68
  • alt-php56-tidy_5.6.40-150_arm64.deb
    sha:e94874e79691bc445cdce0ec71d629f08ef4d12a
  • alt-php56-xml_5.6.40-150_arm64.deb
    sha:44f812dc5e0cc474dadf759becf076250f27e49c
  • alt-php56-xmlrpc_5.6.40-150_arm64.deb
    sha:9b3f99effbc0871723914ddf5ca0243e30ea3a5f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.