[CLSA-2026:1792636135] alt-php56: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:29:07 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php56-5.6.40-147.el8.x86_64.rpm
    sha:9e411f61d38a4345f5077e8fc33cba35e26818b5a58a94d75f23ae18c5a4cf1b
  • alt-php56-bcmath-5.6.40-147.el8.x86_64.rpm
    sha:44892fbbb60a82eb9be0dc03d4ee973ddea3e8cb062078008a344cb637e46cb9
  • alt-php56-cli-5.6.40-147.el8.x86_64.rpm
    sha:c17002ac935d925522417e175a44186d703223f7d8f1a4170d2ef24ccf1bbb62
  • alt-php56-common-5.6.40-147.el8.x86_64.rpm
    sha:5bc7c54882962ea38c41283b6bacef14530512543195f022bb826589754aee3a
  • alt-php56-dba-5.6.40-147.el8.x86_64.rpm
    sha:d4c0750449cdb7fecb8458b44607dbf754d88775def6c2dfb854a563b98ff204
  • alt-php56-dbx-5.6.40-147.el8.x86_64.rpm
    sha:00e41a1fd25093dfeffafc1108c8a27f500ad6d5797bf4c2c8b949b99b907b00
  • alt-php56-devel-5.6.40-147.el8.x86_64.rpm
    sha:616ded8a24e18c7332aacca132efd569f6c38e8c5a3914ba3db0727bfd8a75a8
  • alt-php56-enchant-5.6.40-147.el8.x86_64.rpm
    sha:991789359811804a1c2a52b4f3d89a82844903768a195c2ad50ee0b0e34339ff
  • alt-php56-firebird-5.6.40-147.el8.x86_64.rpm
    sha:65b9c360e9db0cebbb118993775ea9608b014b1045b366ab7d1f1dbe314ad12d
  • alt-php56-gd-5.6.40-147.el8.x86_64.rpm
    sha:dfe4e8f9a5a60da4e47c33f07b6c065af9e6f27a572f005204f462e8a0a5fc6b
  • alt-php56-imap-5.6.40-147.el8.x86_64.rpm
    sha:890b9e08a2e2f4028e8b2d716760f9bbe686392e2e6e9c68cc043ede05008ba9
  • alt-php56-intl-5.6.40-147.el8.x86_64.rpm
    sha:54f40eb61f0cf9ce0a79de283e83f83a463749f983c99bd47b9009d803e9ad42
  • alt-php56-ldap-5.6.40-147.el8.x86_64.rpm
    sha:16af53e3bd2f2e88d536dc1b51bcc91c4d90310c9b13bfb7d86f1a76a8347dcb
  • alt-php56-mbstring-5.6.40-147.el8.x86_64.rpm
    sha:048651588db7b0b8342216f999570e7cc6550669c12d4ed4db61919ab5ec48b9
  • alt-php56-mcrypt-5.6.40-147.el8.x86_64.rpm
    sha:30255c685a85149a9ee47663438700edcd0a67fab0ff59bd1ca50e22f7d1f61c
  • alt-php56-mssql-5.6.40-147.el8.x86_64.rpm
    sha:077f341c8bea1bd579f572d48c05e0bb6c85aeb6c1f33779f81d6c39749f680f
  • alt-php56-mysqlnd-5.6.40-147.el8.x86_64.rpm
    sha:d56d9c87a90f194def664b90883372ec1b07d9140bf65691ca743b316ae26711
  • alt-php56-odbc-5.6.40-147.el8.x86_64.rpm
    sha:e5d5c52e6f14297b494a2a1924336a5df99381f13b2dfe254fba8880eb0643f3
  • alt-php56-opcache-5.6.40-147.el8.x86_64.rpm
    sha:4653ce85677a17899e4455cb8b5bbc3673ad267260f01568316b00948d47383e
  • alt-php56-pdo-5.6.40-147.el8.x86_64.rpm
    sha:fae5b6b438c4c29f0b2b95dfa876afc869086aee529e02eb1d688df4c8196ff7
  • alt-php56-pgsql-5.6.40-147.el8.x86_64.rpm
    sha:2bd0a5baf87602bb63d65c3ba39dc88c489c0b68ff92d0457939c0e7914e8c1c
  • alt-php56-php-fpm-5.6.40-147.el8.x86_64.rpm
    sha:74ec8ed84f124aebce7a9305b7fcdfc45ed5859370bbc092f9bc15a27c63f504
  • alt-php56-process-5.6.40-147.el8.x86_64.rpm
    sha:05b66831125df4ad38a98e9bc7bf0e56f11c3fbda7b90cac9dc86d62053ce9f3
  • alt-php56-pspell-5.6.40-147.el8.x86_64.rpm
    sha:02495d658c1c0d1b1b728b48d3a085ea9406d31f6de19065454184b38d15ac9b
  • alt-php56-recode-5.6.40-147.el8.x86_64.rpm
    sha:5f89651da0b19253e253198ecf8ef71fe3ce99d429e1d5a5bce23cb54d24915e
  • alt-php56-snmp-5.6.40-147.el8.x86_64.rpm
    sha:f5713fce8a2f5f38b7e6eb92620ce10f3224d8989a13abd775f4047c1e1f950b
  • alt-php56-soap-5.6.40-147.el8.x86_64.rpm
    sha:c5623698dba4a435c1fe15911ecf030d37163639980597c73c6f6ebe417ef387
  • alt-php56-sybase-5.6.40-147.el8.x86_64.rpm
    sha:c462e7832c4d94cc287abbd612e069f1c2e96b27d35014f5dc73152a3a09cdab
  • alt-php56-tidy-5.6.40-147.el8.x86_64.rpm
    sha:cdb5498182656881dc374eaa2a65b2b2ece56ebe909d6d8813634853d9218b9b
  • alt-php56-xml-5.6.40-147.el8.x86_64.rpm
    sha:d879c212f3c6390acd4c0c62280c2347e895e05bf2e6e65209c6196af10a0767
  • alt-php56-xmlrpc-5.6.40-147.el8.x86_64.rpm
    sha:e136262f8569f1d3ecf164d0dfbc78ddad3b875a9caec69a810726c81e5a42dd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.