[CLSA-2026:1792635478] alt-php56: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:18:10 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php56-5.6.40-147.el6.x86_64.rpm
    sha:1980cf3e98d45f848894af97c70579a389e18e5908d18a474928332b1724a560
  • alt-php56-bcmath-5.6.40-147.el6.x86_64.rpm
    sha:d078b88353986e2c1e1846a2d16fee6b1789b7b216293a5fb117d14bfc6bec2b
  • alt-php56-cli-5.6.40-147.el6.x86_64.rpm
    sha:52fde59076d099c2c8ad273418a4c03e660f7c6d22abad54aa769b163bf5ec67
  • alt-php56-common-5.6.40-147.el6.x86_64.rpm
    sha:54235385632ecfbc62d186a3e1889c911393cfaa73cecdb492ca3b2c65a3bc85
  • alt-php56-dba-5.6.40-147.el6.x86_64.rpm
    sha:31cfaf8b8997e8f6fd65adb7b1390f9b102870aad67d29b5a446d2b7b151963e
  • alt-php56-dbx-5.6.40-147.el6.x86_64.rpm
    sha:163975450a825ce605bbbd3f78f347588f2648e807cfe412e13cea37c3cceaa9
  • alt-php56-devel-5.6.40-147.el6.x86_64.rpm
    sha:6c6c38d42884b6a2ac9d37eac629ab862e057e0ee8ae8d891723acc4d828a6d2
  • alt-php56-enchant-5.6.40-147.el6.x86_64.rpm
    sha:6529ead3454762abb46eb148333d605c73c1adf8aff14d9444667cc3b5b5685a
  • alt-php56-firebird-5.6.40-147.el6.x86_64.rpm
    sha:10cf2bd1b2bf342a97cffe8187b2066ff318b7caebb8b94c1efc415c89f8a186
  • alt-php56-gd-5.6.40-147.el6.x86_64.rpm
    sha:eb0f2dbd7ee324629db23710612f034e9dcde6ba9627508dc865f4c26d129a2e
  • alt-php56-imap-5.6.40-147.el6.x86_64.rpm
    sha:9f269822746507de976febf0eec15196a0fe2cf09fe270f4adb6600a015985a6
  • alt-php56-intl-5.6.40-147.el6.x86_64.rpm
    sha:d6a6d70fba264856b8de0d55087260b582fc5b7f23d65ac987417fd9b7aeade2
  • alt-php56-ldap-5.6.40-147.el6.x86_64.rpm
    sha:f84b15bdbffb8883a1d3eca4a1ac11dccc675dfa5ac7d2d22cda5f42f48f70d0
  • alt-php56-mbstring-5.6.40-147.el6.x86_64.rpm
    sha:305ff52da1db37d3227c48d41433ad874dda50ca15e52cc060e61b0c8c054d42
  • alt-php56-mcrypt-5.6.40-147.el6.x86_64.rpm
    sha:34cabef94b4742865313fb582fd7021fb4f1920b26063d2bac7d68f736f414d5
  • alt-php56-mssql-5.6.40-147.el6.x86_64.rpm
    sha:1ff37c63e0c4273b16dd8302aa28347fc53be97c1c91feaeb68a43462a607f3d
  • alt-php56-mysqlnd-5.6.40-147.el6.x86_64.rpm
    sha:160e21c9579fb07366cc64716344597f74338e333ed18011ec67b0251ec2f71b
  • alt-php56-odbc-5.6.40-147.el6.x86_64.rpm
    sha:1d39cd2ba7ac1d1095f84927aa16fd4de5e52787ec8868bd03d8463c1f2ffa98
  • alt-php56-opcache-5.6.40-147.el6.x86_64.rpm
    sha:a9168130b405e09024f5c5c7434533658e5014a3ca186c7f728642e2875fe174
  • alt-php56-pdo-5.6.40-147.el6.x86_64.rpm
    sha:261b3f3a53c8b19294788c2d28e3fecb55c6e9add3236879ee33e3eaa034e556
  • alt-php56-pgsql-5.6.40-147.el6.x86_64.rpm
    sha:9ff5adf5f668023f56525c11d3ee9fe7eca4e593d0a9ba2dec2c80b25c44203e
  • alt-php56-php-fpm-5.6.40-147.el6.x86_64.rpm
    sha:cca864cd93febc10024c893a31dbdab23af9b9638c955b48488926186312fd64
  • alt-php56-process-5.6.40-147.el6.x86_64.rpm
    sha:c1f35790b3a2ee31b1fd7fda5ca83eac98be3da2ea7ef46fe89673def8addde1
  • alt-php56-pspell-5.6.40-147.el6.x86_64.rpm
    sha:349f9e04e57c53c2f73248c6d67dfac88100b81a6d2f60d28f1a5b97178aae59
  • alt-php56-recode-5.6.40-147.el6.x86_64.rpm
    sha:1bab79bee2506545b32bd7c6aadf2128e1dec9be8f99fe719e1579cc5dd3d081
  • alt-php56-snmp-5.6.40-147.el6.x86_64.rpm
    sha:0c017fe81e751d44c98b34c71f4ff2f477d85a0ac31886170fecb238880d2b8c
  • alt-php56-soap-5.6.40-147.el6.x86_64.rpm
    sha:c2ccf48e39a6c95b1cd303d762aca554b582fe0e54e6c506393e7fc7add8dd9f
  • alt-php56-sybase-5.6.40-147.el6.x86_64.rpm
    sha:a232a296130cc2b7c62d143e315a04dec8366a924a5f221dc8f32d3c415ac8bc
  • alt-php56-tidy-5.6.40-147.el6.x86_64.rpm
    sha:859aa3b9d1529df098cf5ec97680ef3cff5d5db1ce4fb00414b88cc4e1f8ce1f
  • alt-php56-xml-5.6.40-147.el6.x86_64.rpm
    sha:13d885cffdb03bf306077b6305f50fe0fa82ffb667fc16907b9cd41d2d74bf6d
  • alt-php56-xmlrpc-5.6.40-147.el6.x86_64.rpm
    sha:d4d8e3a102a83eea6dccafa17e714a385daeb79e8540c1b4d17ec9cefa08023b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.