[CLSA-2026:1792635030] alt-php55: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:10:41 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-183.el9.x86_64.rpm
    sha:ea8a903423b6c8efa698839fb929dd75898ce87c031f5df88de64271a42b7cff
  • alt-php55-bcmath-5.5.38-183.el9.x86_64.rpm
    sha:1cdd21b44a294a094962bd7c10befd7e3b6cb388e2af5f630eb77db6ced83237
  • alt-php55-cli-5.5.38-183.el9.x86_64.rpm
    sha:6088fa70ba99081bfdba3fccd5aef0f0479780b9ecbb15f973cd7b09897f8b58
  • alt-php55-common-5.5.38-183.el9.x86_64.rpm
    sha:f4535d3d5b3ca65e44c82cf525726ece2f3263fad2054235f900edb80d3fa6d6
  • alt-php55-dba-5.5.38-183.el9.x86_64.rpm
    sha:58a9fa65cc742a4ae041ccb6d8f8df2654c8d579b00b37c3e82faed3d894e606
  • alt-php55-dbx-5.5.38-183.el9.x86_64.rpm
    sha:8b1ef4dc12b818d4282f9e98087813d56d927cdf34f91a6cf3ba5402c289241c
  • alt-php55-devel-5.5.38-183.el9.x86_64.rpm
    sha:596554aa2c7e74f0e2a47c3d55c5be67240cc1acd7f81c3b1076bac6cc739f13
  • alt-php55-enchant-5.5.38-183.el9.x86_64.rpm
    sha:44ff36f4e25ccd9541207a113cb3eeb9369093b0e3216fc860d61dcf01b10be9
  • alt-php55-firebird-5.5.38-183.el9.x86_64.rpm
    sha:dae41c46aaac7dd40f170ee0fb60a0a4e18f35edd6775c2c683de2bf1ff0fb72
  • alt-php55-gd-5.5.38-183.el9.x86_64.rpm
    sha:8c17f0a2ce05fb31f18b87296dac3f50a80406e7e1751f94610326f78540a763
  • alt-php55-imap-5.5.38-183.el9.x86_64.rpm
    sha:2997fc9f1f897693ebf2a02991a0fc86f2c5ac9a26e6e2797e1e00d63a3a85ab
  • alt-php55-intl-5.5.38-183.el9.x86_64.rpm
    sha:ad84351f07aa26144ff5f3d05be889ba1ca4795c676011de84e09a42c13b6eb3
  • alt-php55-ldap-5.5.38-183.el9.x86_64.rpm
    sha:73ba2761332227b9efb06cddc84f11a168dae9eb9f43fa2e8d8ca8f61045668c
  • alt-php55-mbstring-5.5.38-183.el9.x86_64.rpm
    sha:db729a149692b2d369277e2f4bcc5ff72c903b33b591b7bad1f3d28d5c92a5cc
  • alt-php55-mcrypt-5.5.38-183.el9.x86_64.rpm
    sha:90cc42a489a00d38ad19c3755eca0c50579f01c9c8fa7fb038a469b7b3873562
  • alt-php55-mssql-5.5.38-183.el9.x86_64.rpm
    sha:952d7fda0c51764f67ee1e2e64fbee58975030b9252a1a162af7046c4e2fd046
  • alt-php55-mysqlnd-5.5.38-183.el9.x86_64.rpm
    sha:735d3d233d3f552c1fc0bbb067b2980c84d9fa872c76965f6e06b243f1437d6f
  • alt-php55-odbc-5.5.38-183.el9.x86_64.rpm
    sha:87e213c59b32f49f8bf7a82e404c4304e795f1545b0dda5d969f29aaee262d56
  • alt-php55-opcache-5.5.38-183.el9.x86_64.rpm
    sha:3b3ed88ff7328145a0198d007a16ab5c716b724c76a0a9cecf0dbb819afa4adc
  • alt-php55-pdo-5.5.38-183.el9.x86_64.rpm
    sha:59756d5399c8548aabb61cbda83fae354f67bfdf982fe2f41edb6cf12deba298
  • alt-php55-pgsql-5.5.38-183.el9.x86_64.rpm
    sha:ea7a5b15b08e596036533b018c577dbe481962ee69b520f6e4bb3726a044f47a
  • alt-php55-php-fpm-5.5.38-183.el9.x86_64.rpm
    sha:82bdf36fa6e0b7324d5be6b6683741bac900c0c9aa707baaaf866ac71fa9c718
  • alt-php55-process-5.5.38-183.el9.x86_64.rpm
    sha:0fdc2d666946730e10f00f803bfe2ca7b4e9624c9baff609d189ad3d570925fc
  • alt-php55-pspell-5.5.38-183.el9.x86_64.rpm
    sha:172c56ad37c99e519523bae2078e798f2206f645c0c02e1c279cc918312f64f2
  • alt-php55-recode-5.5.38-183.el9.x86_64.rpm
    sha:2010a229a74d97ab2e96138c6c21976dce046f793cee14f20f99bf057aac41e5
  • alt-php55-snmp-5.5.38-183.el9.x86_64.rpm
    sha:bcfa79c32cbfe2811c807821dcf7c4dd2e7593de1df6349b70b4067939784b52
  • alt-php55-soap-5.5.38-183.el9.x86_64.rpm
    sha:479d0bcf54b25124ede6f63a8863c8f98308f3f9ae15a8ab5a6c6ec18840fee2
  • alt-php55-sybase-5.5.38-183.el9.x86_64.rpm
    sha:f2ef3c7437e6370439e1feb95e7e138d90f3274cb5f426d205389263a1c593d4
  • alt-php55-tidy-5.5.38-183.el9.x86_64.rpm
    sha:1525b22a447b4c7d5964528c7a8c3f1e97bced348d9b19ecd64a733e797b2646
  • alt-php55-xml-5.5.38-183.el9.x86_64.rpm
    sha:ff7c776a5ece434f2ee4cf18f1a86587210b8f899ff2c1ca7d414c6e42c171e7
  • alt-php55-xmlrpc-5.5.38-183.el9.x86_64.rpm
    sha:0f209388ff2711bab70fb5aeaa0b7b92e1e164624f384aaf0141f96324c53659
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.