[CLSA-2026:1792634026] alt-php54: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:53:57 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php54-5.4.45-203.el10.x86_64.rpm
    sha:b531974b6f76d1e8df5c66834e95997853a3180392f2a65b1fe0074f160aac68
  • alt-php54-bcmath-5.4.45-203.el10.x86_64.rpm
    sha:9a5c2b58f300dce92e93e9c2a855e35178d60338b55aaa13dad082aa01add6c7
  • alt-php54-cli-5.4.45-203.el10.x86_64.rpm
    sha:e4a649e28b50474f7f4023173f6ae4be4e59b397ecf48bbcf649d7f10afbb57d
  • alt-php54-common-5.4.45-203.el10.x86_64.rpm
    sha:621d9474564df44b7720f8ccd6fd70c66e8b63557b3b90ec06755e474e736161
  • alt-php54-dba-5.4.45-203.el10.x86_64.rpm
    sha:cd3d9065cc9f705677de32f4a88a3c27f33f255c7bb5370e74f494cc44f53721
  • alt-php54-dbx-5.4.45-203.el10.x86_64.rpm
    sha:2432bb0ed650711b74075be6e5af37995b3bc59d697ef004a1967db2db65041a
  • alt-php54-devel-5.4.45-203.el10.x86_64.rpm
    sha:3e7b3d2f5560391b996cee3686963e52541fe9c30e064a77dd5f071efe7e8685
  • alt-php54-enchant-5.4.45-203.el10.x86_64.rpm
    sha:824610bdfe8dfc806a04302be01b5cb9f577c953bb465a159c808812fa1c6116
  • alt-php54-firebird-5.4.45-203.el10.x86_64.rpm
    sha:381fb29a6bdcc830d9f4644f6b130db5e90bfe16ddabe332d0e93bfdd41a9f49
  • alt-php54-gd-5.4.45-203.el10.x86_64.rpm
    sha:ca077410b250bcb304615ca9a18678bb4576125705768d4021f58cee65f2cdb3
  • alt-php54-imap-5.4.45-203.el10.x86_64.rpm
    sha:4f0f44e247dd47dc03ef37ce858363f4f19d3eab18bcd0a94a9a0cab05778699
  • alt-php54-intl-5.4.45-203.el10.x86_64.rpm
    sha:85414ae4df3c9ed06b31f510df58ada1fd0d67ea1999fe9a5e7c7b6fcfca0306
  • alt-php54-ldap-5.4.45-203.el10.x86_64.rpm
    sha:e0c3648e2ea9421e23cd46c08f49909fc0730f8101335ccb57caba130f20d48b
  • alt-php54-mbstring-5.4.45-203.el10.x86_64.rpm
    sha:0ce5bcab012ac7d343814c9d060abacc971d63ae5c11a29527b061934b135d8a
  • alt-php54-mcrypt-5.4.45-203.el10.x86_64.rpm
    sha:66070de1456d605440920e5c5a40910361c3fbca0b498ef390e35ef5970d4d84
  • alt-php54-mssql-5.4.45-203.el10.x86_64.rpm
    sha:45cff637e22caad9086dc00f63e5e5405947ffa78bddc7c22871405808bfc00a
  • alt-php54-mysqlnd-5.4.45-203.el10.x86_64.rpm
    sha:72239c81bd4ade7ca1b11d60a427ef59b614646746b05f8c7d4bc97212b8e1ab
  • alt-php54-odbc-5.4.45-203.el10.x86_64.rpm
    sha:d99d3af3ba0eed0fe63724e041de3cda57333a72bcefa16c665661734d63614b
  • alt-php54-pdo-5.4.45-203.el10.x86_64.rpm
    sha:a947962ab0a46f28267465011be315ac2fed2173b6fa90f85ac09840b4c3e996
  • alt-php54-pgsql-5.4.45-203.el10.x86_64.rpm
    sha:b3368fdab4b0c4ce4bbf1631c93b7bfc30f5720cf3ab9a8fca63709d74e10dce
  • alt-php54-php-fpm-5.4.45-203.el10.x86_64.rpm
    sha:e8ba4c5134137b69410b5d2fa28ead708af5c97cb2e47947ed47012cafe0ccf7
  • alt-php54-process-5.4.45-203.el10.x86_64.rpm
    sha:cdd75006e78a118294ece13a5a64f4b0ae1e90624d9d6cd45c4851e17110b522
  • alt-php54-pspell-5.4.45-203.el10.x86_64.rpm
    sha:47690f64886ff6d717c5c511c278ea86387bb90d77cab7f78749033f8cda29ee
  • alt-php54-recode-5.4.45-203.el10.x86_64.rpm
    sha:88cb71b15671cdfaea6c45720462725cf7e6d334f68843c3003c051c0e8e85c3
  • alt-php54-snmp-5.4.45-203.el10.x86_64.rpm
    sha:59e8a72d587b4bcca90dd70a9df95a7460681cae6e9931c9926883a26751a2b4
  • alt-php54-soap-5.4.45-203.el10.x86_64.rpm
    sha:d145a1110ed71c63c9e827a5ce650441c0acf49645d063762de9d5d9829879b4
  • alt-php54-sybase-5.4.45-203.el10.x86_64.rpm
    sha:de19c1e73d28ce88cd01971b1b8ccedbed7050c0c97b63951f265e8b7716c685
  • alt-php54-tidy-5.4.45-203.el10.x86_64.rpm
    sha:1e492e0e6088c75c91f554b26578e71aa7998cdb0d64afb70c03977bd9409ccd
  • alt-php54-xml-5.4.45-203.el10.x86_64.rpm
    sha:1a43cb579059ef07e9708a0624a8d0af7b0872fe51b4b62a1bba95d7088ea863
  • alt-php54-xmlrpc-5.4.45-203.el10.x86_64.rpm
    sha:9fc0ebdbcdc5cd8e85dcf9c0a5ed5e24a34f543544265b5dca361157f644cff6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.