[CLSA-2026:1792690843] Fix of 9 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 17:41:02 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-5.6-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect; adapted from upstream 712e60f9 (PHP 7.4 branch) - CVE-2026-109618 - CVE-2026-109619
Updated packages:
  • alt-php56_5.6.40-150_amd64.deb
    sha:3fe2a211a8bedb75f2c97a9629dd970198e7a681
  • alt-php56-bcmath_5.6.40-150_amd64.deb
    sha:3c8e235c6517a3311407d921826525e356e5a00d
  • alt-php56-cli_5.6.40-150_amd64.deb
    sha:0b9940253912a191758116616baa2d02ec5ede54
  • alt-php56-common_5.6.40-150_amd64.deb
    sha:bcbf841a49687f84103f544a760bfe422485f1b2
  • alt-php56-dba_5.6.40-150_amd64.deb
    sha:a88ddbfeb4abb95057f492ecf51eb7f9db5a2054
  • alt-php56-dbx_5.6.40-150_amd64.deb
    sha:fcf07c61851a041df6b8f8fbbee6b815e470c33e
  • alt-php56-dev_5.6.40-150_amd64.deb
    sha:27dfcfc14561b92fa7cd79d9026599d1181cf95e
  • alt-php56-enchant_5.6.40-150_amd64.deb
    sha:37bcfdd4bb6763d85e01b1ee2ba40ea559a4057a
  • alt-php56-firebird_5.6.40-150_amd64.deb
    sha:ca9c25b58af15f6a5bb5a3fcab88df6b9969c95c
  • alt-php56-gd_5.6.40-150_amd64.deb
    sha:d0b167e894e81fe2ea050e4ab7685bdd4996b5e5
  • alt-php56-imap_5.6.40-150_amd64.deb
    sha:ceeb4fe9b89a9bd29c526bc1af3253815c30ff1e
  • alt-php56-intl_5.6.40-150_amd64.deb
    sha:d809b036f734785f7800d11d8f1b71cc88216d1a
  • alt-php56-ldap_5.6.40-150_amd64.deb
    sha:8bb1aeabbdf8d1c5c874d9c56671b2eea48d0a1a
  • alt-php56-mbstring_5.6.40-150_amd64.deb
    sha:162c955d52cb3c8f59034e44a0378692a638c796
  • alt-php56-mcrypt_5.6.40-150_amd64.deb
    sha:9e9c6b97617df9d9369b4fa9200b504a669e956f
  • alt-php56-mysqlnd_5.6.40-150_amd64.deb
    sha:2cdb4a1a09200f39c04210eebf11e99893bfdb7f
  • alt-php56-odbc_5.6.40-150_amd64.deb
    sha:ec42b64bebcce969f492d305ba6d47e71cc714b0
  • alt-php56-opcache_5.6.40-150_amd64.deb
    sha:db0a91f83ffa8e63c8e0ea8d65a4f7492cc12b0e
  • alt-php56-pdo_5.6.40-150_amd64.deb
    sha:b2df712b09e8b9adc0e065e71f80d1d4c97b2eee
  • alt-php56-pgsql_5.6.40-150_amd64.deb
    sha:d7a0c0362477ae63addbe6358585ac27067e4d67
  • alt-php56-php-fpm_5.6.40-150_amd64.deb
    sha:7ed2fe7d1e35742502a836edf9debce3abe2dec5
  • alt-php56-process_5.6.40-150_amd64.deb
    sha:3b54b5f2859cc5f1a4e6aa61ce912ba15bedd41d
  • alt-php56-pspell_5.6.40-150_amd64.deb
    sha:ea228b67738fde012ffe042de60be24ebc529ff0
  • alt-php56-recode_5.6.40-150_amd64.deb
    sha:75f1dabf3d4a0e7b6cdcf5e8469007e58bd8661e
  • alt-php56-snmp_5.6.40-150_amd64.deb
    sha:fbd85ac0aa02a7d46875d9770fc71801a1cb8277
  • alt-php56-soap_5.6.40-150_amd64.deb
    sha:afc428eece9d6271b00b2ac5b31aee23945fbddf
  • alt-php56-sybase_5.6.40-150_amd64.deb
    sha:23120958883a634cdba5d157de9ad42dc27d2953
  • alt-php56-tidy_5.6.40-150_amd64.deb
    sha:05d91c62311060f788615f2ee711c1e050ef8956
  • alt-php56-xml_5.6.40-150_amd64.deb
    sha:38f47a08f2626c89dc3bdf5de93582f0657f28ea
  • alt-php56-xmlrpc_5.6.40-150_amd64.deb
    sha:d1f7c2c68186b1aa2f781887fc73d4ab6f59dce3
  • alt-php56_5.6.40-150_arm64.deb
    sha:c573bd7d5031db5e2bb33b63d4c805a0e85cc28a
  • alt-php56-bcmath_5.6.40-150_arm64.deb
    sha:10006480aa453f3bb36d4a2ff053fcdcb21097a4
  • alt-php56-cli_5.6.40-150_arm64.deb
    sha:3c7dd98f423d0f42abd8e4e5b12a9c1fbc2ab217
  • alt-php56-common_5.6.40-150_arm64.deb
    sha:7fccc8c590d338c1329dd29fafdb54c0086535d2
  • alt-php56-dba_5.6.40-150_arm64.deb
    sha:aefea7d1708e2d90be9bab2eb2b3adcfb8133b2f
  • alt-php56-dbx_5.6.40-150_arm64.deb
    sha:c484ff0304fcd275bc1c61048a3fe14a41a87772
  • alt-php56-dev_5.6.40-150_arm64.deb
    sha:c2a9b8ef6daa5944c2134fed8e5cc4dcc5d9d93a
  • alt-php56-enchant_5.6.40-150_arm64.deb
    sha:949156be240cace691b046beb88eed9340fc205a
  • alt-php56-firebird_5.6.40-150_arm64.deb
    sha:06e89368aaa2b6db849472a0e3635adb9501df54
  • alt-php56-gd_5.6.40-150_arm64.deb
    sha:78995b9c86b7d456cc8dd21f69a77c1a312a4db8
  • alt-php56-imap_5.6.40-150_arm64.deb
    sha:61b6dd427085d4a74ff7a762c0b241f7d4a125d9
  • alt-php56-intl_5.6.40-150_arm64.deb
    sha:88cd5f4da3cb2bacb7040561c11d9f5f370532df
  • alt-php56-ldap_5.6.40-150_arm64.deb
    sha:df0d8cd6c29f3a9cf1e27ae1d4f0932a0b736d1f
  • alt-php56-mbstring_5.6.40-150_arm64.deb
    sha:29b9618329249269aec79ee3e2b23070f5677ac3
  • alt-php56-mcrypt_5.6.40-150_arm64.deb
    sha:6204587a6f961d433cbad6b1901066e7169a0197
  • alt-php56-mysqlnd_5.6.40-150_arm64.deb
    sha:78412f2a6e158423b1472b0d31e75f89ce1755cf
  • alt-php56-odbc_5.6.40-150_arm64.deb
    sha:5746a8e58399c21d427e16395ac61934bae9e678
  • alt-php56-opcache_5.6.40-150_arm64.deb
    sha:0737ed77eac57317f991b10714b7668549c086af
  • alt-php56-pdo_5.6.40-150_arm64.deb
    sha:23ebeddf07dc92bdc13f28ed96124bd50180f002
  • alt-php56-pgsql_5.6.40-150_arm64.deb
    sha:15567eb319702a4d5e186aec03b491ee71e2d22d
  • alt-php56-php-fpm_5.6.40-150_arm64.deb
    sha:a5bcfd0c666a04b3d63270299c7af366fa3b167e
  • alt-php56-process_5.6.40-150_arm64.deb
    sha:9e5b21d264877aa1a14cd333a6dd5007eda962fd
  • alt-php56-pspell_5.6.40-150_arm64.deb
    sha:ebb73d9fb62da9a2ed0c73fb79c3de1b95614b0f
  • alt-php56-recode_5.6.40-150_arm64.deb
    sha:6f38506653f1d458ad8b0f8321e1bb5fa18aafe7
  • alt-php56-snmp_5.6.40-150_arm64.deb
    sha:f402743753836f63eb09f0d59dad9e45a4e8a8bb
  • alt-php56-soap_5.6.40-150_arm64.deb
    sha:724e683d643d8a363f46e5cb5059ecd8948ea4ab
  • alt-php56-sybase_5.6.40-150_arm64.deb
    sha:33d692437f3c5977e60fd8a1413f3090fc1a64af
  • alt-php56-tidy_5.6.40-150_arm64.deb
    sha:c13e6b1eb44845e6ae56a21eccfdf59eb1a36988
  • alt-php56-xml_5.6.40-150_arm64.deb
    sha:cc48d39b6458e5bc85d54d327c3dd87ec096a9a6
  • alt-php56-xmlrpc_5.6.40-150_arm64.deb
    sha:d9c695715b91a93302c2de019d5e11d3dc5e2e1d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.