[CLSA-2026:1792636394] alt-php56: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:33:27 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php56-5.6.40-147.el9.x86_64.rpm
    sha:c1852fc9599fad5af032bb3817b8959ca05304682c1ebde9ca58383263153f3d
  • alt-php56-bcmath-5.6.40-147.el9.x86_64.rpm
    sha:ab36ad06663c4f994eddb2e9817f3b46b8d37d9f9b228546c7244461f65482ab
  • alt-php56-cli-5.6.40-147.el9.x86_64.rpm
    sha:cf885e755e4fd4bf0f4162058320df53bf6087bcafc7396a6343b8eab0d59fd6
  • alt-php56-common-5.6.40-147.el9.x86_64.rpm
    sha:ace81575f6e3f85cdc16e7031f9a46ce36b85c19f7625bb15e13b2d4eafccc32
  • alt-php56-dba-5.6.40-147.el9.x86_64.rpm
    sha:bbaa344e06978e998424e7287343738b0354c81ade0441ac6416762990dfe72c
  • alt-php56-dbx-5.6.40-147.el9.x86_64.rpm
    sha:03b945ccf3e82c09deecfbb255f85d8681c8d310804a2c3a40e61d57033c1dd1
  • alt-php56-devel-5.6.40-147.el9.x86_64.rpm
    sha:84b6271a06d578c60b318bf6b4a259c2b5fbc01c55d5090123c166ee16ce9660
  • alt-php56-enchant-5.6.40-147.el9.x86_64.rpm
    sha:1cfb48a52478ef01279cc59e2145521bfec2c024a1498c80d7177fd54518b8c5
  • alt-php56-firebird-5.6.40-147.el9.x86_64.rpm
    sha:f22ac6c5e7137a06d9ab95a23b9abd9711e8c15aa6dc6b8fb54cc18c0ba55607
  • alt-php56-gd-5.6.40-147.el9.x86_64.rpm
    sha:87f3ac75cfd2708e873773604f03daa64c188c605e3e54c951764888bc180bed
  • alt-php56-imap-5.6.40-147.el9.x86_64.rpm
    sha:de0259bd40d821f0851ead07490043282bed989aa5c421a6234bb09b5b166af9
  • alt-php56-intl-5.6.40-147.el9.x86_64.rpm
    sha:e969f3f0f8929d66c8d263109aa5c720fce99fabb543758787fdfac8079866f3
  • alt-php56-ldap-5.6.40-147.el9.x86_64.rpm
    sha:5674366489358e75748e04c88939d26928d550d656c21f2defa8e70a869e71a6
  • alt-php56-mbstring-5.6.40-147.el9.x86_64.rpm
    sha:1353c00a1c7b0aeb4585a037ad0086d26ffeda813a3e41109879d8aed942d13b
  • alt-php56-mcrypt-5.6.40-147.el9.x86_64.rpm
    sha:edac65c32706d70574e3c1ced05694f8a2b03801f8615ddc17c235e34cee3e6d
  • alt-php56-mssql-5.6.40-147.el9.x86_64.rpm
    sha:583bb93d8a21e58fdcebecf6ef567ea84ef40755f3c226242a8c9f90cce0f01d
  • alt-php56-mysqlnd-5.6.40-147.el9.x86_64.rpm
    sha:7fe1c35073f5473d018917df9cf4d3f553f82179737f730a2dad1af81231da5b
  • alt-php56-odbc-5.6.40-147.el9.x86_64.rpm
    sha:79ceef8d51658437038e26a64cfb8d2fd3d9d27a00f201dc80a8a01f1cfc74a6
  • alt-php56-opcache-5.6.40-147.el9.x86_64.rpm
    sha:a4a96b993dfc37d362b2bbe128d8f2719fda3c11ec36dbf3dfec41677ea27c10
  • alt-php56-pdo-5.6.40-147.el9.x86_64.rpm
    sha:4316f13deef98b8ea2eacf1866f3acba0fe913ad84de9460140c278e3df626b1
  • alt-php56-pgsql-5.6.40-147.el9.x86_64.rpm
    sha:f8875efacd7b39616546012f16877714f1d4ec073c318a07b0d64e3c94f5ed1c
  • alt-php56-php-fpm-5.6.40-147.el9.x86_64.rpm
    sha:d2f1eafbe22b1f6a82f4d743dc99b4a1076da29cd16cfb820e6fe5701cac5489
  • alt-php56-process-5.6.40-147.el9.x86_64.rpm
    sha:bba3e1fae5cdbba6c4fbc07ea0a7bab95158f0c6860548dacaba375ca926e66a
  • alt-php56-pspell-5.6.40-147.el9.x86_64.rpm
    sha:c09fb1214839f69aaaa64785cb4d9885016b4d0e63b6afbe5738512109f7ed89
  • alt-php56-recode-5.6.40-147.el9.x86_64.rpm
    sha:e8786c1084bf3cea00435bb9b1895aaf5c950f04a80b6c4a5a3f0a5047719dc2
  • alt-php56-snmp-5.6.40-147.el9.x86_64.rpm
    sha:c7292d0034f810d20149214b2817d65572b77b80dc4ca03d591ffdc80708d2a1
  • alt-php56-soap-5.6.40-147.el9.x86_64.rpm
    sha:82c17024a189f69ea2589dd73292d028a54dfd86633a3c9b7f2c584e68aefb35
  • alt-php56-sybase-5.6.40-147.el9.x86_64.rpm
    sha:0cff43e282f070f9630354fee83d4eff285aa9b3add61b191d5ed936f30d274c
  • alt-php56-tidy-5.6.40-147.el9.x86_64.rpm
    sha:fa4f09c8fa6011141ea7e7e513699733db2257546e23ac3f9328e1f44cb620a0
  • alt-php56-xml-5.6.40-147.el9.x86_64.rpm
    sha:d40a7d07890be53bbe677d54a4625f89a42f1b70b911e4009e94b3863ed02392
  • alt-php56-xmlrpc-5.6.40-147.el9.x86_64.rpm
    sha:51c31e282153a019a542b8bf23ae1e560d8920b7a4233f7423671a070616431c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.