[CLSA-2026:1792634231] alt-php55: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:57:22 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-183.el6.x86_64.rpm
    sha:56ed2381d5bedbf70f1c7855efa49626dd03a23cff31fb4484a4c26b7a149839
  • alt-php55-bcmath-5.5.38-183.el6.x86_64.rpm
    sha:16b918220e0c10ff74ad33da96f52941c319c9dd5c0de928f9463da392809540
  • alt-php55-cli-5.5.38-183.el6.x86_64.rpm
    sha:5168e7a917f6282f5ec8997a5449e009199a473a29f6c4db811a126515b1e756
  • alt-php55-common-5.5.38-183.el6.x86_64.rpm
    sha:3c4f4d827d11828ac93c055b5e4c293d6842e4f992529477c3d3473a1ae4ee88
  • alt-php55-dba-5.5.38-183.el6.x86_64.rpm
    sha:b677d30bd832b74bcaf74f626f7f16f996b629ec76cbb1177def5577e4be7f17
  • alt-php55-dbx-5.5.38-183.el6.x86_64.rpm
    sha:f56a0f1b4ce81878248353919bda01dcfadc5bb09808fc86bca793bb324c3036
  • alt-php55-devel-5.5.38-183.el6.x86_64.rpm
    sha:83a66fb5e53105c3a2ae2655c9262b4b658a45a1d604694856a55bf627036ec5
  • alt-php55-enchant-5.5.38-183.el6.x86_64.rpm
    sha:fed04bd8f22fe5bae5a293d555a8af973e335c2e524f343dfa4b43aba6e078d8
  • alt-php55-firebird-5.5.38-183.el6.x86_64.rpm
    sha:10f7a2334f3cef8877b77e640ad12d63d0e8d2a00580c5c57b62b6c137318149
  • alt-php55-gd-5.5.38-183.el6.x86_64.rpm
    sha:b2278f181ba1c6f4b1c0b5324a19baec0c8274d8807747eade52e004c3672f18
  • alt-php55-imap-5.5.38-183.el6.x86_64.rpm
    sha:a50256e1b3ec73e8becf3a4999208dbadd79a3f0675fc62c4dc98ebac259ec44
  • alt-php55-intl-5.5.38-183.el6.x86_64.rpm
    sha:6a270a53c14717eb55046b44da30fcfa0db9c193a7e7d13ea835675b3329ff0f
  • alt-php55-ldap-5.5.38-183.el6.x86_64.rpm
    sha:4292741e03f8d0bc86a8331b08b9ebd2a30842ebeac6d57e5e365fb9e79c578d
  • alt-php55-mbstring-5.5.38-183.el6.x86_64.rpm
    sha:1b751ecb4f3f03b9a1317d81df74102692c3b7cd74dcb14377ba3a6b2d7da317
  • alt-php55-mcrypt-5.5.38-183.el6.x86_64.rpm
    sha:64067b196e667bdfbe3bf72ea3b27756dda01500536aa905821a1091ec42c08e
  • alt-php55-mssql-5.5.38-183.el6.x86_64.rpm
    sha:b301fef8210a3a6e26f62816b8a2b266a45983e0142f6bdb819e926f6c7ac402
  • alt-php55-mysqlnd-5.5.38-183.el6.x86_64.rpm
    sha:70019cd5d8358c1e9b2ba0b938e85b6dce0e9a65e04e552cde28a85dad34ec25
  • alt-php55-odbc-5.5.38-183.el6.x86_64.rpm
    sha:fae03a310196ee32adcda9270c79e3e4c8f6c57cf64193e54ae9cc86a8f65cba
  • alt-php55-opcache-5.5.38-183.el6.x86_64.rpm
    sha:14762c63ac69ffdf3df99ed717c3645ae8aaa1a2e689d0afa691acab2588ca87
  • alt-php55-pdo-5.5.38-183.el6.x86_64.rpm
    sha:6016fe3b6d02944e9ee54153845b655744c48a9a1cf5c7cf3e76e5d35366626f
  • alt-php55-pgsql-5.5.38-183.el6.x86_64.rpm
    sha:00fe44f267820f8c0021bfd24ba9bbcbe13780b6aa7c57a6daf8953306174510
  • alt-php55-php-fpm-5.5.38-183.el6.x86_64.rpm
    sha:d593ca843e1a097e36d5856a2423407d5207361223886fc88a7b72c0c2ace95b
  • alt-php55-process-5.5.38-183.el6.x86_64.rpm
    sha:98776510a7dca482af0590308959909ec8ea0ec4e7f983fb9db4d30cd62b3039
  • alt-php55-pspell-5.5.38-183.el6.x86_64.rpm
    sha:d0ab13b57826cac5d3f62dcd3b4f05b0515e656e35fb4ec3e15c111664196337
  • alt-php55-recode-5.5.38-183.el6.x86_64.rpm
    sha:d422dd640ebfd631ff78817058ade9c2a11d110c916d8f300ab68bdb51c76cc2
  • alt-php55-snmp-5.5.38-183.el6.x86_64.rpm
    sha:5f8dbdbb3df162c2d10ad8499aac69c480a937aa5acaf307d76d5541f2a843bc
  • alt-php55-soap-5.5.38-183.el6.x86_64.rpm
    sha:4341162c82e7444116af695c7517ff21b315673ea7ea2ddaae1472b39a496a0a
  • alt-php55-sybase-5.5.38-183.el6.x86_64.rpm
    sha:df2db0c21278c205bdfc29c59c594b330d9dcac6a6331db235ec00075ae04bef
  • alt-php55-tidy-5.5.38-183.el6.x86_64.rpm
    sha:92d756c358c16f80e3aaed20a0280d69b23519b6cf72052ff7cf3128c0ac67ff
  • alt-php55-xml-5.5.38-183.el6.x86_64.rpm
    sha:ef2d11d6e6a6a918913b88b7b8b48fe475eb836f51b9f85600aabf8c5482951d
  • alt-php55-xmlrpc-5.5.38-183.el6.x86_64.rpm
    sha:17011c7f9cf2b1bca08e64bd8d6755a5be5d3ffd818759395daa859baf920c9f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.