[CLSA-2026:1792593182] alt-php74: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 15:46:19 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 712e60f9 (PHP 7.4 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php74-7.4.33-81.el7.x86_64.rpm
    sha:98e170a244ffeee883690e568bbe9caf180a566c65c7af0afceb787e5d50dfc0
  • alt-php74-bcmath-7.4.33-81.el7.x86_64.rpm
    sha:71a9c973b5c06590536b6d1b0bedadea3f15257f633c3c86db4df2bfbe46d608
  • alt-php74-cli-7.4.33-81.el7.x86_64.rpm
    sha:5a3378d3e652bda3377ec33f7d0481a29c601a967b6c0f5fc7e7f555c17308aa
  • alt-php74-common-7.4.33-81.el7.x86_64.rpm
    sha:fddff094f7bf863684b5632a2512d0309dfff6b4071dc4b2d703222b6ffc174a
  • alt-php74-dba-7.4.33-81.el7.x86_64.rpm
    sha:b7b878b5594c35c6acd08c6fbdc8e30f06a83ba106dc147b0d4628ac75a42fe4
  • alt-php74-devel-7.4.33-81.el7.x86_64.rpm
    sha:1cc292d43e7efc523486f5b6ff5424e3b46de002560e84520f361d7797d61e10
  • alt-php74-enchant-7.4.33-81.el7.x86_64.rpm
    sha:7242c59b1c76b2e7e442c3444b6ff4df0eb95b807bc0371eb0d67103b445ce92
  • alt-php74-firebird-7.4.33-81.el7.x86_64.rpm
    sha:63b68fd6215858d3e44d3f9c6aaa53ca02dfac8702a22bc8ebb9ca3acebdf34e
  • alt-php74-gd-7.4.33-81.el7.x86_64.rpm
    sha:eee2c59260948a3d48a491c26ae931c7939358ad816ad34d03bda0e856787917
  • alt-php74-imap-7.4.33-81.el7.x86_64.rpm
    sha:5dc0487f3d08bad50ce9ed1c5dfbf768026ef7de04332abab2a374bad57564cc
  • alt-php74-intl-7.4.33-81.el7.x86_64.rpm
    sha:a91e3c64b5fec213a9bb02592c340e58addeeb4073c3d231348975037ccaadb7
  • alt-php74-ldap-7.4.33-81.el7.x86_64.rpm
    sha:265b7fae00a1ed38daf6c6a1230c34215ab2cce8cad40e342654664869dad206
  • alt-php74-mbstring-7.4.33-81.el7.x86_64.rpm
    sha:ac2d01572790abe8ecaff7c4afb193a4e803755e34336db2ae992c27ea35c29f
  • alt-php74-mysqlnd-7.4.33-81.el7.x86_64.rpm
    sha:69e4c5972422dd2cf8062d05c5b8e66e9ab597bc67d93dad4bf1a2a195ba6a03
  • alt-php74-odbc-7.4.33-81.el7.x86_64.rpm
    sha:b54aabd083e432826d01e35d7bdac48eb47a5832d02ca927b3d208a22164d7d3
  • alt-php74-opcache-7.4.33-81.el7.x86_64.rpm
    sha:6690dabd7c53a4cfe237aa69e5cff14a560512febd033157b3260766705d213d
  • alt-php74-pdo-7.4.33-81.el7.x86_64.rpm
    sha:2849b3c03e4fb210d519ffe67fa6a019a02c7ee0533c0431865bf06edfabc7cd
  • alt-php74-pgsql-7.4.33-81.el7.x86_64.rpm
    sha:81cdf3a90d9bc70b2d15a77ba056f57e5142793cfcfea68036208d8e9512dd14
  • alt-php74-php-fpm-7.4.33-81.el7.x86_64.rpm
    sha:dc802d62442ee71c9304b4c14eee8410f958c11d3f175ab892f257fc26502b9e
  • alt-php74-process-7.4.33-81.el7.x86_64.rpm
    sha:337c813499c9fcac08f13daaa14dcdcd3e50f4d954c0f5a845fda09a041bf48e
  • alt-php74-pspell-7.4.33-81.el7.x86_64.rpm
    sha:799968b2fab9d08947c9b39a21fff58e0e53b587253bed9a42c387982a3741b4
  • alt-php74-snmp-7.4.33-81.el7.x86_64.rpm
    sha:fef4f1500403a4a81258b01c185ce8c3497a624da09a2a58a445935dd40c868d
  • alt-php74-soap-7.4.33-81.el7.x86_64.rpm
    sha:5209f3455ffe1bc80f46e41deef6d96b337234994bb18e6d8b0d7323c3e32bfd
  • alt-php74-sodium-7.4.33-81.el7.x86_64.rpm
    sha:14b3b42cb2bebd6c6443fbdf1284f495d0edc6558b25765eec9c7246650b8835
  • alt-php74-tidy-7.4.33-81.el7.x86_64.rpm
    sha:b1c774878935d7f10bfb741cfeb2a0c4bfc9e89313f329974a84e2fd00aad616
  • alt-php74-xml-7.4.33-81.el7.x86_64.rpm
    sha:971b9005351d401d4fd886325f7adf4ca97f0a6b1ed9e59d860c354fad4cea1c
  • alt-php74-xmlrpc-7.4.33-81.el7.x86_64.rpm
    sha:a8ddc759592cca413984b8521d9a5085886393e607f6e163c5d29cc329ed85af
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.