[CLSA-2026:1792637091] alt-php52: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:45:02 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php52-5.2.17-242.el7.x86_64.rpm
    sha:757bbb9a030050964f310d01a715144e99791c2698cc9100eaa6dd1510322797
  • alt-php52-bcmath-5.2.17-242.el7.x86_64.rpm
    sha:9e1ca8401d36c1a14154f40a8c7358922608d07f42e57c734e472795f255af78
  • alt-php52-cli-5.2.17-242.el7.x86_64.rpm
    sha:614543bb662cc9ddeef4c5414a72fb97b0358435ed9927a70d8908374241e2c8
  • alt-php52-common-5.2.17-242.el7.x86_64.rpm
    sha:a10ddcee92f82d7d3770690750179228cf80ef38bce2170f46c34f81962f9e4f
  • alt-php52-dba-5.2.17-242.el7.x86_64.rpm
    sha:24b1e605cbfc246096c497ec922a7919d8b2d2815c13ceef6d847fb2e985c47a
  • alt-php52-dbx-5.2.17-242.el7.x86_64.rpm
    sha:1816444ad012aad11d5fb3ab39d52f040e140414411633655816831e85d7ffe8
  • alt-php52-devel-5.2.17-242.el7.x86_64.rpm
    sha:fa0625b349dc3d64afd51b877588de13de9da2935af95aa0300561dee92d7b73
  • alt-php52-enchant-5.2.17-242.el7.x86_64.rpm
    sha:e58458ec7437dc123d8b90c46254bf0f8d61bc4d48f46e23b19e9f06b652fbe4
  • alt-php52-firebird-5.2.17-242.el7.x86_64.rpm
    sha:0138bed83550962a602763780288e8d689771cebe8cc91d2a31b531c29d28bab
  • alt-php52-gd-5.2.17-242.el7.x86_64.rpm
    sha:633c6cf61bc6bb12ae6856e9b8abb8f6efe2afb4d35b6df9ec6f056f8de917d7
  • alt-php52-imap-5.2.17-242.el7.x86_64.rpm
    sha:6c5721acc18abb88c9fed28a11d80c5b562827973a664d3fcfce8ed51f4a82c6
  • alt-php52-intl-5.2.17-242.el7.x86_64.rpm
    sha:673bc9dfdf5109623c6250d1fafb01003599173f9e08fd9f9ba00010054cde97
  • alt-php52-ldap-5.2.17-242.el7.x86_64.rpm
    sha:daaf066722749b34bce9a56614230394744230e90b6f4c4c155526347b90c104
  • alt-php52-mbstring-5.2.17-242.el7.x86_64.rpm
    sha:bdf406ffe5c330278c61d4b9b89e9973c006ebd791825107d57e5cc7a9a6b82c
  • alt-php52-mcrypt-5.2.17-242.el7.x86_64.rpm
    sha:dd8b8b0e446aa48fd2b995524e9c89e27d0e3f5dc553260278e2e8c199feaa05
  • alt-php52-mssql-5.2.17-242.el7.x86_64.rpm
    sha:d4f6a64e827e93549cbf35082da5876463342f732c6eff970911d8cb258c9cd2
  • alt-php52-ncurses-5.2.17-242.el7.x86_64.rpm
    sha:26c07e669f0a27fbba4ad89209c44d86772b07279c33b7b3fac61565b3ebe0eb
  • alt-php52-odbc-5.2.17-242.el7.x86_64.rpm
    sha:d665300cbeeef1808935f23f6b4c899f7dad0eaf46986acdd11c06b59bf31875
  • alt-php52-pdo-5.2.17-242.el7.x86_64.rpm
    sha:95c063c97da496f8d2aaea2703e6eb67a269b9b3228d8476bf425be0f9f16a66
  • alt-php52-pgsql-5.2.17-242.el7.x86_64.rpm
    sha:487dc515d5be7bb45607f2e6d251f9af23bb83f00c05b60d4fbe9d0270c214b5
  • alt-php52-process-5.2.17-242.el7.x86_64.rpm
    sha:7e3102532fb03dc719d5b504789fba8025db5a9dfe7ba3b2ef4822e1806dbbe1
  • alt-php52-pspell-5.2.17-242.el7.x86_64.rpm
    sha:5f63fe793da63772048116eb6edcf94edc6138fb3834853f822917a670e434ed
  • alt-php52-recode-5.2.17-242.el7.x86_64.rpm
    sha:3d90f05aca4d1d885dc8b6201b1cd3c0613c549c14199ec9c3db48e79d3ac7e4
  • alt-php52-snmp-5.2.17-242.el7.x86_64.rpm
    sha:06a2ca3316cf591ad017107f26ea8be6f325e8300c2dfe1b539592fa0ee44591
  • alt-php52-soap-5.2.17-242.el7.x86_64.rpm
    sha:9875d178da60a5bf5e18259a84995d70169997b72e2d020debc6f6aad121bc50
  • alt-php52-sqlite-5.2.17-242.el7.x86_64.rpm
    sha:21eae9e49612b297b4858dbd45bcd20fa9f94398c708f1bd2bf2fa734f58c9df
  • alt-php52-sybase-5.2.17-242.el7.x86_64.rpm
    sha:4fb4ab637ead4e979d155adc44fd6f422df8cb5aab05f5cee56b089456731abd
  • alt-php52-tidy-5.2.17-242.el7.x86_64.rpm
    sha:bc7b9f93496c404f98c9ff83d8852da779ac507510209621b560d7aec06079a6
  • alt-php52-xml-5.2.17-242.el7.x86_64.rpm
    sha:10e5f7b5d78ecd2f860e0411b944a3b6772553baec8793e40c6f492fd4ee10c0
  • alt-php52-xmlrpc-5.2.17-242.el7.x86_64.rpm
    sha:68b49c3ba2e5e0291343e82a6493ec054ece2cd252b338bcb964ce8ede0a1aa0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.