[CLSA-2026:1792636829] alt-php52: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:40:40 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
Updated packages:
  • alt-php52-5.2.17-242.el6.x86_64.rpm
    sha:f702f0468acfa75fe19a9f0172e3c3301d30a3b48004078efdb589b79a15d878
  • alt-php52-bcmath-5.2.17-242.el6.x86_64.rpm
    sha:46db90127d78c0cab9871f7876b0162c10cc5c80571bcf26aa7bc827a44705a9
  • alt-php52-cli-5.2.17-242.el6.x86_64.rpm
    sha:d6ef85fd722b334904ce73240528371ae201cc79a6e59d656af374d87ff251aa
  • alt-php52-common-5.2.17-242.el6.x86_64.rpm
    sha:57c6d19ab2abaddfff219aa731ecbac18292337db75360533024b58a5d5e086c
  • alt-php52-dba-5.2.17-242.el6.x86_64.rpm
    sha:fc377879173ada54f3bb0659804bfdf258c962134793e7cd0913b7868bf396f8
  • alt-php52-dbx-5.2.17-242.el6.x86_64.rpm
    sha:97d1d93309ab7129b1de256545a5930b728a5fd759336df0ca29aa1305bef991
  • alt-php52-devel-5.2.17-242.el6.x86_64.rpm
    sha:b0741b5310d87450410492b1c4fcdd45e42312647f8002a7947f49eb51c687e9
  • alt-php52-enchant-5.2.17-242.el6.x86_64.rpm
    sha:448b1af9baf4c61e6e283b3599d93240574561a75ce0ffcd6cfdcc1ccc7ae7af
  • alt-php52-firebird-5.2.17-242.el6.x86_64.rpm
    sha:267e314383ff56221e2f733225a03894a84fb76d75cd2058b5a3661179bf0edc
  • alt-php52-gd-5.2.17-242.el6.x86_64.rpm
    sha:789de35caf8c18ccecfcc6cc736f465e84b323b5e1955f17539feb98159d98d0
  • alt-php52-imap-5.2.17-242.el6.x86_64.rpm
    sha:0362e852c7dca8c4d7d81cdb4136a9c06a3edc9d9866a2198e3f1d94c1a6383a
  • alt-php52-intl-5.2.17-242.el6.x86_64.rpm
    sha:a2f2ced56c25da1136d84571c0f43bba4d2ab589a8c91370decf672f39fadb67
  • alt-php52-ldap-5.2.17-242.el6.x86_64.rpm
    sha:defbfb64dbdae20a42a9caa60244a1f9aafadb9d580d54e5a79afa56448ddc8d
  • alt-php52-mbstring-5.2.17-242.el6.x86_64.rpm
    sha:2ac4c03fcbb17c6729262e2ebc64b51a24220dde98dc049473e363894607e99e
  • alt-php52-mcrypt-5.2.17-242.el6.x86_64.rpm
    sha:76127f2b631cb7e703be31b3fcd9d2e9ae50ba1d2b44e37813a402382ca1490a
  • alt-php52-mssql-5.2.17-242.el6.x86_64.rpm
    sha:80c724315ea0a076cbc2e2b06414a2fa6a6d26c9a605d109c2944705a3650a3f
  • alt-php52-ncurses-5.2.17-242.el6.x86_64.rpm
    sha:b45f43fe25d196ce9a490dc5b1910fc2f9cbceda6548614fb69a726595d67eba
  • alt-php52-odbc-5.2.17-242.el6.x86_64.rpm
    sha:a126e7c3eba1de4e4929adb2fd7d5424e5375cbc00310a7a17819c43319d0a25
  • alt-php52-pdo-5.2.17-242.el6.x86_64.rpm
    sha:c25b59171cd25328a339366d1277d5ad6fb2c31d950d653cfe6a1f3f5bbb4562
  • alt-php52-pgsql-5.2.17-242.el6.x86_64.rpm
    sha:9a7eee30747c590a8d307ec5b8f1aaad152dcae1f06ea9efb52cdb78fafd5ddf
  • alt-php52-process-5.2.17-242.el6.x86_64.rpm
    sha:e24bfba476071534fb67f31c02533fe588f1b1c29cc3f91ff609a3ac867c2689
  • alt-php52-pspell-5.2.17-242.el6.x86_64.rpm
    sha:2d85eaf6134911fcf51a728e7e517d8ae180fefcddb02a190130c7e99c5e9b48
  • alt-php52-recode-5.2.17-242.el6.x86_64.rpm
    sha:13e901ada0e31a7c32945243c7ef831458a03c57c0a6b2a8d045999e64e390fa
  • alt-php52-snmp-5.2.17-242.el6.x86_64.rpm
    sha:a777a52ff43f8a8e2b4a94aa98d3ac88dc9f431e45731ae9aaca589e686013dc
  • alt-php52-soap-5.2.17-242.el6.x86_64.rpm
    sha:e53d7745141e7a3b7164c12e3cddc4c9e0b97d297b31016364521ff8e8324f8f
  • alt-php52-sqlite-5.2.17-242.el6.x86_64.rpm
    sha:a3ee6c7cd8243b997b2a28825ec5403dae3583187a5ca91f20a278b0b292d030
  • alt-php52-sybase-5.2.17-242.el6.x86_64.rpm
    sha:8cf79ab32a9abd33593546f434ec6ffc69cce2d442693e8197220164468a928d
  • alt-php52-tidy-5.2.17-242.el6.x86_64.rpm
    sha:3b899e2a9418d1aca8dc9a9c1845264f0ccae11751b69fd6f3951d488d52f184
  • alt-php52-xml-5.2.17-242.el6.x86_64.rpm
    sha:161ff7b617937be8c0decf3f7400f04ad0a0705adae46c3d319819873d6b5e66
  • alt-php52-xmlrpc-5.2.17-242.el6.x86_64.rpm
    sha:4f1a371738e7994b314481790016e6dd86b55c93e35c8ce7ae941d141a608b00
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.