[CLSA-2026:1792592079] alt-php74: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 15:55:34 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 712e60f9 (PHP 7.4 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php74-7.4.33-81.el10.x86_64.rpm
    sha:27ea4fb023b5fb47c401e5605be8447bdb4649b5d061ec93f704c81d6c84110a
  • alt-php74-bcmath-7.4.33-81.el10.x86_64.rpm
    sha:d9fb03e8998885cd3aae4b234eeb997cd6d931dd1437d97670205c35c691f11d
  • alt-php74-cli-7.4.33-81.el10.x86_64.rpm
    sha:21ca1ced9ded3fc37df25b71697092858a735949bb00e510713331826896be5b
  • alt-php74-common-7.4.33-81.el10.x86_64.rpm
    sha:6b0db2c74db21d1f8cad64fdab09af2e0fea4dc5d2c623eaab0703cc6efcbecf
  • alt-php74-dba-7.4.33-81.el10.x86_64.rpm
    sha:3cfa2a4bd71316f6f4623c4c5b3d4cee263f6d8b61bf82cdeff01590fa0360a5
  • alt-php74-devel-7.4.33-81.el10.x86_64.rpm
    sha:4ddb675ff9d16457d23824495912e1432da09e21307760b112aedd1839a2ce83
  • alt-php74-enchant-7.4.33-81.el10.x86_64.rpm
    sha:2f5937f0b860bb3b6e2107578e7d08082a460986bd6452cdd0e7c60f56c5c864
  • alt-php74-firebird-7.4.33-81.el10.x86_64.rpm
    sha:63e3f676760fa86df824c069b872272427365118567d82c13d81b4aab2bd17f1
  • alt-php74-gd-7.4.33-81.el10.x86_64.rpm
    sha:889a70beb86c0c6398a7ac55b230f21f3313393d45e70be261b13a898c9a5cb8
  • alt-php74-imap-7.4.33-81.el10.x86_64.rpm
    sha:bf8dc6890de5c9eb796f2a6acfd89e370472a4ac1017307417426d1462c3108c
  • alt-php74-intl-7.4.33-81.el10.x86_64.rpm
    sha:2a2812bd8b9037ac39f5c30d8b61779714b3c47b290172e6ecab65f6aef7cec6
  • alt-php74-ldap-7.4.33-81.el10.x86_64.rpm
    sha:140e142f9fdfcd6a1282f314e93b27f93b3a332a4c7d3c3609429b7a0e801dac
  • alt-php74-mbstring-7.4.33-81.el10.x86_64.rpm
    sha:5175d6a7e12e2ede8184d0b9cac82f881af9d93bf3ccef42e5ebf11a47193205
  • alt-php74-mysqlnd-7.4.33-81.el10.x86_64.rpm
    sha:463cb10c9323b8915865e34ca6f01892633ba6e7454b1c6547970917c8109d15
  • alt-php74-odbc-7.4.33-81.el10.x86_64.rpm
    sha:ffde1dd3ff27e7b35b506aced9a5ec18bd1c032e6893cb0da1b922dafdd13eaa
  • alt-php74-opcache-7.4.33-81.el10.x86_64.rpm
    sha:2ff0cdb449d73ba3175cfc995f4d5457cf77092c771bb75d068a5e314a97777f
  • alt-php74-pdo-7.4.33-81.el10.x86_64.rpm
    sha:4dee657f088835806e9612b78b10ae3235181e811142455cd209bcbe1638f187
  • alt-php74-pgsql-7.4.33-81.el10.x86_64.rpm
    sha:4a01201d3d83a65fca387afcbb55e6f7517484e5a92107522eb08d277cf446dd
  • alt-php74-php-fpm-7.4.33-81.el10.x86_64.rpm
    sha:decd479662dd4658dc7333dc9e75324779adfdf49354633b91c41af038b2322e
  • alt-php74-process-7.4.33-81.el10.x86_64.rpm
    sha:37542680b37012896ed4f35bc2a485cfcd726c2947396e23d7aab85bf078f1e9
  • alt-php74-pspell-7.4.33-81.el10.x86_64.rpm
    sha:92f75255c1ca5c30bd3301da874abbce75379c243f4aafa0a87cb57e44acf4bf
  • alt-php74-snmp-7.4.33-81.el10.x86_64.rpm
    sha:0aaefa88cbc35b85566bfe0cf9b7589f455bb2331cec6def76cf19b544516332
  • alt-php74-soap-7.4.33-81.el10.x86_64.rpm
    sha:5ff1e53a6fdc68127104cd3b5582acc0f132a215a0a432931d2198cb0b313760
  • alt-php74-sodium-7.4.33-81.el10.x86_64.rpm
    sha:6f5dea8c238fdd3670e337cbaeb4274a9728ace3b25ac57ac045b717431eb1cd
  • alt-php74-tidy-7.4.33-81.el10.x86_64.rpm
    sha:5894f987355de5d27f6b968eeaa8154f39fb481aafe77c20266ba5b2c01e094c
  • alt-php74-xml-7.4.33-81.el10.x86_64.rpm
    sha:4cea450fc7636e4901cd8bf8230e0aeab27dc532784333f46b5ba046b6dd70d5
  • alt-php74-xmlrpc-7.4.33-81.el10.x86_64.rpm
    sha:d303d93330ad7078c966d861adda44cdb1db950615d7060c689bb59313c2bc88
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.