[CLSA-2026:1792633259] alt-php54: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:41:10 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php54-5.4.45-203.el7.x86_64.rpm
    sha:6fe5713fe52d7f30cbb516a1400229e2258d7fffc8696f0cc22ef8579852764a
  • alt-php54-bcmath-5.4.45-203.el7.x86_64.rpm
    sha:9ee206e52a0c50302e4aeb4d2e378a8dd7446ca98fbed22b6e915b57fad47a42
  • alt-php54-cli-5.4.45-203.el7.x86_64.rpm
    sha:a92fa66d66e4e694f51fc3bfd378a520877c31fe91b2e00b022ae6a84a99d7b9
  • alt-php54-common-5.4.45-203.el7.x86_64.rpm
    sha:67a9382b84feac6dbdc860bb9012468055666546174796f229d9bec06accfc7c
  • alt-php54-dba-5.4.45-203.el7.x86_64.rpm
    sha:20e48a7e1800b3f45fd504b310831eb28d87ff99ae58b38ed9d8d807f50f021e
  • alt-php54-dbx-5.4.45-203.el7.x86_64.rpm
    sha:3f166d3075f92876cd2cc3eca4cfd9dd9f59bb85ca70947c9f1d87682ad36071
  • alt-php54-devel-5.4.45-203.el7.x86_64.rpm
    sha:5b1404593cf23e1f40805c826eade7cac43d0ba69c01600c65b68be67cd55465
  • alt-php54-enchant-5.4.45-203.el7.x86_64.rpm
    sha:d01d03c675707c55afcb4972db7fa1f77d7930d5991194ceb20a6871e372965d
  • alt-php54-firebird-5.4.45-203.el7.x86_64.rpm
    sha:a8379567f171684ab431f3f6b62171a065f3d4c5b1b0895d0374ed5b2cb48b11
  • alt-php54-gd-5.4.45-203.el7.x86_64.rpm
    sha:2c06e4eb43e4c691cea43719aad9bf04daeba92dc6512683cb1f3af1b3271ec8
  • alt-php54-imap-5.4.45-203.el7.x86_64.rpm
    sha:7ccacc45d6aa5cc7d705f9b7bbdcc409d07f7dcc3a8265fb3aaf93a648daf68b
  • alt-php54-intl-5.4.45-203.el7.x86_64.rpm
    sha:7fe6e6e204ccc88ca542f5e97b1a273d83cb404c1b9c4c10f9339af10c88bb27
  • alt-php54-ldap-5.4.45-203.el7.x86_64.rpm
    sha:a2f99e4bd88742a7a4289285aa0d1600047459daed7e38b16a6ce733dba74b20
  • alt-php54-mbstring-5.4.45-203.el7.x86_64.rpm
    sha:15dc852948730900e4750534f27819cb0c2e162e2e19f435d3ff626708865feb
  • alt-php54-mcrypt-5.4.45-203.el7.x86_64.rpm
    sha:4c1b222654e87e41c0c619aeb11dbe992f593b7cb0cfb34ed54b5a944bdc2d37
  • alt-php54-mssql-5.4.45-203.el7.x86_64.rpm
    sha:144a956ba5a62917f45b375c2d768fe94967b8a5ad31f16eb42ccd516adf0580
  • alt-php54-mysqlnd-5.4.45-203.el7.x86_64.rpm
    sha:4c244ea4642c7e3e3148769794991b59246931f2fda1569a3145f40330672392
  • alt-php54-odbc-5.4.45-203.el7.x86_64.rpm
    sha:361d2d03a23dc09c2f41baf216631b2fd256763b0f128202e141a6b2b6505ef5
  • alt-php54-pdo-5.4.45-203.el7.x86_64.rpm
    sha:103f4646ed63a1524e812b61ce9d9a3c345d0edf02cf9923ed8eefa91c1d3590
  • alt-php54-pgsql-5.4.45-203.el7.x86_64.rpm
    sha:f846b27159fedca9c300f7f0043e95ec565710036174769b598edd94c503eb5d
  • alt-php54-php-fpm-5.4.45-203.el7.x86_64.rpm
    sha:80dd5bbaf53367e3ceb3bddb6bb908f668a138c54dc4d503d87a7861e4204182
  • alt-php54-process-5.4.45-203.el7.x86_64.rpm
    sha:c6cfb79ae0793adb96762a57037f9f6281fb4dbdbccfbbdc839749cb153a68f6
  • alt-php54-pspell-5.4.45-203.el7.x86_64.rpm
    sha:4ac50bfd689fb63760e390e435d11b7330e243ebfa1bedecaf7b488eb753a294
  • alt-php54-recode-5.4.45-203.el7.x86_64.rpm
    sha:60864c7e834db93c58654415ba22f769baac433b203a3f52193670ffd4509347
  • alt-php54-snmp-5.4.45-203.el7.x86_64.rpm
    sha:1176895edc59c1f21e41011af377fc4961237b220a6c1033476cf57113016491
  • alt-php54-soap-5.4.45-203.el7.x86_64.rpm
    sha:6c1af9bb983ee4bd97f344d1d5605f4bf833ce555637921bbe69785559ce9c54
  • alt-php54-sybase-5.4.45-203.el7.x86_64.rpm
    sha:c44de90117b35f4ff968a6aef720755114f80d4960791353a3c73d2a6d30c1a1
  • alt-php54-tidy-5.4.45-203.el7.x86_64.rpm
    sha:f3896a3628230e30c0771efa5ff53dfa5eb8152e22b801be8eddf859d41d0eb7
  • alt-php54-xml-5.4.45-203.el7.x86_64.rpm
    sha:6ac666b3f9a0c5e4c0731e1442be2982e866e22e8f4ebc93a887f4b88da4d736
  • alt-php54-xmlrpc-5.4.45-203.el7.x86_64.rpm
    sha:e8797d2bbdef0f0a0201cc6c253cf58709a4821bce7edbd815b006cc8354f847
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.