[CLSA-2026:1792636613] alt-php56: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:37:05 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php56-5.6.40-147.el10.x86_64.rpm
    sha:ef0a0cbdfc033ed43c114c1d6741825a9520c022c23cbe80f507059e8b02aef5
  • alt-php56-bcmath-5.6.40-147.el10.x86_64.rpm
    sha:a7057eee3e6a2d427ed47b36e4b95a446367f920e721c363b3745ef68b9281cd
  • alt-php56-cli-5.6.40-147.el10.x86_64.rpm
    sha:ba46c7a81670f640b72b66de47d0a6802d72b7d02db55a83d22ecca57517cc6e
  • alt-php56-common-5.6.40-147.el10.x86_64.rpm
    sha:78dadca9028c3cb5642414b21c2b3a7fc158babd71e84665ad6eeeee0c6748fd
  • alt-php56-dba-5.6.40-147.el10.x86_64.rpm
    sha:3cc7fc09a1dba2864442c26abd549562a19160bb20934ce7a19ad9705677d424
  • alt-php56-dbx-5.6.40-147.el10.x86_64.rpm
    sha:231a550476f3de744e8914348540a4f56d65f38ea64a85adf67afc251a9b5a13
  • alt-php56-devel-5.6.40-147.el10.x86_64.rpm
    sha:8b8553b660256fa6aa3c45ae73bd89f7a0733ff2ccaa58b7190580fa2d84161c
  • alt-php56-enchant-5.6.40-147.el10.x86_64.rpm
    sha:34d62d8032d3bb7eb1ba375c32f5caa9dc0918fd9fd94597c60b3abb645749af
  • alt-php56-firebird-5.6.40-147.el10.x86_64.rpm
    sha:8301cdfb0d63b8b0b443de3aedc0cabb8dc717223f812aebe72616982cf497a1
  • alt-php56-gd-5.6.40-147.el10.x86_64.rpm
    sha:3361744c28ac7b3feaadf7093ef78f20148d944a5cfc45326eb05353c0710ea3
  • alt-php56-imap-5.6.40-147.el10.x86_64.rpm
    sha:0a7a3933956817914a6870580b9e8bac8a4b36bc87deb0fc963878c5633758d4
  • alt-php56-intl-5.6.40-147.el10.x86_64.rpm
    sha:3500c5f4a1612fda2f8a19e71eb4a7fb3b00de5e25ff51bf9ee65d6e0deb020b
  • alt-php56-ldap-5.6.40-147.el10.x86_64.rpm
    sha:f31c59da18602b96dd84cb541d961d27ee012edc105f65f52ee1f7b6a2f52d3e
  • alt-php56-mbstring-5.6.40-147.el10.x86_64.rpm
    sha:ba7d6bee82bb8f998920f503cba8246978188fda4a13063e2cd3892a0dfbb4f7
  • alt-php56-mcrypt-5.6.40-147.el10.x86_64.rpm
    sha:b1767a4cfc81f2a76de02cf0198c9c6455839085d8440ad0db7d7d7392482323
  • alt-php56-mssql-5.6.40-147.el10.x86_64.rpm
    sha:5432afc4950b6163b219ce73dff72bbf94d0cd5bddc2465973a900c908a13db4
  • alt-php56-mysqlnd-5.6.40-147.el10.x86_64.rpm
    sha:38ba372bfa48abc74552b6715a094e4922d59001912b9f7571abdf9298bbb26c
  • alt-php56-odbc-5.6.40-147.el10.x86_64.rpm
    sha:209e8614d2f2b75ebdcf72c7076c8cc3165a0293c73945f75ba92d54bfff73db
  • alt-php56-opcache-5.6.40-147.el10.x86_64.rpm
    sha:ba7655682d70ad33aa42cbb7e50e8f9a1060e2bf032e82419e9358031038f656
  • alt-php56-pdo-5.6.40-147.el10.x86_64.rpm
    sha:9fd1e630ab345fef4912e8db9233af60c8edbe3dd490c1f394b089126633b984
  • alt-php56-pgsql-5.6.40-147.el10.x86_64.rpm
    sha:0c27d1e928f86a7744441f67a62929ed000e4165724d4a23a3dade6110eec9a6
  • alt-php56-php-fpm-5.6.40-147.el10.x86_64.rpm
    sha:4ecc948a5c5c72f68b54b4d77cf6caa4aac559a5bc1645b86bf14b11782584ad
  • alt-php56-process-5.6.40-147.el10.x86_64.rpm
    sha:4b8c07f449129bf84559f1d60d6ef3647161f4eb88e3ecb5ddfa5b01db39b6a9
  • alt-php56-pspell-5.6.40-147.el10.x86_64.rpm
    sha:e9e9a533ccbb2248aae9abcb18857a25a5a734acfd5c6f892108d3140b0208ab
  • alt-php56-recode-5.6.40-147.el10.x86_64.rpm
    sha:64d12ff4f3e71358cbf2bfa8a418ceeafaceff67b9c369f8594b6526394dd8fe
  • alt-php56-snmp-5.6.40-147.el10.x86_64.rpm
    sha:8a7847fd8de840bbb791f09b2b41d76a53bd749d97c69a8e3d5ffef3e9850cd6
  • alt-php56-soap-5.6.40-147.el10.x86_64.rpm
    sha:03036769eabe7c96acab1e8ca64c39e543ee76dc043ae04fcf55d7ddd926a477
  • alt-php56-sybase-5.6.40-147.el10.x86_64.rpm
    sha:bdf8282c0aaa7e9634df6cdb5613462d55ee18edee6891b8e9a778dd8c60e25a
  • alt-php56-tidy-5.6.40-147.el10.x86_64.rpm
    sha:e7acdb664c43264d32d8c3f106c4da6fa58f0450723cd18667dd941aad3aa4a7
  • alt-php56-xml-5.6.40-147.el10.x86_64.rpm
    sha:2b50ca80c12b020400624e3331c2b33acceca31d8d4faf87b49814923a73a07e
  • alt-php56-xmlrpc-5.6.40-147.el10.x86_64.rpm
    sha:06160cd8ca392326bb281291e43fd6127045b7c8cd2315a523f9941ad9443a78
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.