[CLSA-2026:1792633826] alt-php54: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:50:37 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php54-5.4.45-203.el9.x86_64.rpm
    sha:27941ee2520b8c832fd0eb4ea32d86e0a8ddc77adce424e0b690b18bdcc0e350
  • alt-php54-bcmath-5.4.45-203.el9.x86_64.rpm
    sha:f7017a079fd44f5b1f0082fc992243bfb64df7a6cad2ad82dd4a414aa2f38abd
  • alt-php54-cli-5.4.45-203.el9.x86_64.rpm
    sha:93f4bd796c23f4a9d96c70a0c91d8d11779531fee14c970c0bf7e10095ff3c2d
  • alt-php54-common-5.4.45-203.el9.x86_64.rpm
    sha:ba06598a0fb24cefe18b614c9cc25d8a7c36c5cfb1f301651faad679eb2c0cb5
  • alt-php54-dba-5.4.45-203.el9.x86_64.rpm
    sha:e8d93360c595b3023b06e6398979992b65f1062efd36f4545a2eca6e4a0a373e
  • alt-php54-dbx-5.4.45-203.el9.x86_64.rpm
    sha:2316fb7553b7fc208a369ee1d3e7c354c07948d71577d3d8760a25dffbce83da
  • alt-php54-devel-5.4.45-203.el9.x86_64.rpm
    sha:e57ead47767329e55558a2d1903ce08940a46c96aa0b10c5f089a32c338a889e
  • alt-php54-enchant-5.4.45-203.el9.x86_64.rpm
    sha:677714bb37402633a16790b1979f454e01a37f558739619f0cb9fce43317dba2
  • alt-php54-firebird-5.4.45-203.el9.x86_64.rpm
    sha:8d2b20af53748ee69d90ec0881c859fb4c4f22f2ec65629ef409462124d4d4b4
  • alt-php54-gd-5.4.45-203.el9.x86_64.rpm
    sha:a0cbbf81a7fa63eedbd3d00a04c82e119f3be36d361fee6ea19764bb2f135745
  • alt-php54-imap-5.4.45-203.el9.x86_64.rpm
    sha:dc7725f308e123fe8a06a01e0f25127d188bea6810ff26984667de79880d9ca1
  • alt-php54-intl-5.4.45-203.el9.x86_64.rpm
    sha:57ab8d591305a92d09e816bfb06156fb659ff166771ff6fa8d314c4a9ebe8388
  • alt-php54-ldap-5.4.45-203.el9.x86_64.rpm
    sha:a9719f8327805c6fc4f727e052e629679f6dd9d009d2befc3f59e36bb28060d5
  • alt-php54-mbstring-5.4.45-203.el9.x86_64.rpm
    sha:19aeb48136014c20edce8ef18494cb35ecf5cf0330d250b53a49e3671f43224e
  • alt-php54-mcrypt-5.4.45-203.el9.x86_64.rpm
    sha:01711f91b723e6c79c1fe619388cd4c89234bb34442ed1b71bc54644faafa5a8
  • alt-php54-mssql-5.4.45-203.el9.x86_64.rpm
    sha:66affc0d908b9d3a16fbc5ffe19d22d9e5a87421914fdfdd61ee590ecd9ed14c
  • alt-php54-mysqlnd-5.4.45-203.el9.x86_64.rpm
    sha:ceb2604052b661d244210c470502880be0fc358f360469f9adf44f5671643aa8
  • alt-php54-odbc-5.4.45-203.el9.x86_64.rpm
    sha:c65e9c91254d759089ec8f12e1af603147b47f9b48be718137af55a0984ee981
  • alt-php54-pdo-5.4.45-203.el9.x86_64.rpm
    sha:ef1ab1da599c90220e6341c4d46bcbf624cae938d16600a771ca3a064f74249c
  • alt-php54-pgsql-5.4.45-203.el9.x86_64.rpm
    sha:87ee14b0aed5148510482b732780a8fbd67dff6e6635dfd417e5868a8b134496
  • alt-php54-php-fpm-5.4.45-203.el9.x86_64.rpm
    sha:aae563bb0e761970aed674219f93580a0154f14ad9250b6f138182815dfb5255
  • alt-php54-process-5.4.45-203.el9.x86_64.rpm
    sha:6f77fa392c2673aaa54414b5020a9d43baafff06acc9c54a273837d50070bcaa
  • alt-php54-pspell-5.4.45-203.el9.x86_64.rpm
    sha:85814b397251f53736382370c365fcfcfb6635551eaf31b88cb869385b7ec019
  • alt-php54-recode-5.4.45-203.el9.x86_64.rpm
    sha:97ee4a07f461445d7a07f7c8cac8c141fb366b67067cf21443e592217bd8c810
  • alt-php54-snmp-5.4.45-203.el9.x86_64.rpm
    sha:5a184f3b73da8578e2244ca04787faf856c778e23ff4d8eaa8bff0fba8f108ed
  • alt-php54-soap-5.4.45-203.el9.x86_64.rpm
    sha:e2cd65b4f553ac44020816040d9756479da23a158946e568d8a8fcc7e2bece55
  • alt-php54-sybase-5.4.45-203.el9.x86_64.rpm
    sha:cae1953b4cb8333582986deb0257bce40ad2ac877f47d530c73c44e26948404a
  • alt-php54-tidy-5.4.45-203.el9.x86_64.rpm
    sha:2b34613a106087b8246b4cee87fe56fced720ecbf4c2f7d38a7cd9629192a78c
  • alt-php54-xml-5.4.45-203.el9.x86_64.rpm
    sha:1ac91cae38e33820f3f1b7665cef28b427e362b2cef890f94ca58cf3c3e98a7b
  • alt-php54-xmlrpc-5.4.45-203.el9.x86_64.rpm
    sha:45af65bc7354bdbde4b9e154fa25724f62f58b06224ed4bd82b61be20df5c40f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.