[CLSA-2026:1792598252] alt-php74: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 21:23:05 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 712e60f9 (PHP 7.4 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php74-7.4.33-81.el8.x86_64.rpm
    sha:68cecd3e4c7c1d62a0e0b8d354c318caed71ac39c60053a84548a92e4723c1a9
  • alt-php74-bcmath-7.4.33-81.el8.x86_64.rpm
    sha:17df7c1f4ee3d5c9cf42405ed54895ea66e65491697f5830e855479c37f53dc4
  • alt-php74-cli-7.4.33-81.el8.x86_64.rpm
    sha:b0cda5a5b334aebac5957513294f32ef93e028602e28b67ba3889986104caaff
  • alt-php74-common-7.4.33-81.el8.x86_64.rpm
    sha:7b183c73d3e467c80a83df3637a09cd0b24979b86f246b0b825c5077b933e43d
  • alt-php74-dba-7.4.33-81.el8.x86_64.rpm
    sha:12ff9cbf91d3c54aace7b0aa46133683a93c9fd038ab1b0644a1f218e4408298
  • alt-php74-devel-7.4.33-81.el8.x86_64.rpm
    sha:ff52d5cef82352a72f3c6644e8295633fa3f25f346dd89706bd5ea60518c75b5
  • alt-php74-enchant-7.4.33-81.el8.x86_64.rpm
    sha:8188b33638e6a53dff4a695bf6f8a5199bd2e41b3454f0277c30d4fa682a346f
  • alt-php74-firebird-7.4.33-81.el8.x86_64.rpm
    sha:98a8cc8c51b83238da7c1e80706ca9f1d6824b1d139b3204574f86fcb30ecd50
  • alt-php74-gd-7.4.33-81.el8.x86_64.rpm
    sha:1c36de2c0865a067d938140bc984c8710839ad2e9d2efd5f381aef5465b71d79
  • alt-php74-imap-7.4.33-81.el8.x86_64.rpm
    sha:8726d768c76eba22c616e21e794ee2807fe17d386db8453c71017a1b7db5c16f
  • alt-php74-intl-7.4.33-81.el8.x86_64.rpm
    sha:9d51ddcac37e7f31a3515e3e7a7935d54e8bc3db403303626b00300341e084f9
  • alt-php74-ldap-7.4.33-81.el8.x86_64.rpm
    sha:505b22ec317eb952a1c9b6ca8884411c913aeaa3aac74decc9af66c028469e86
  • alt-php74-mbstring-7.4.33-81.el8.x86_64.rpm
    sha:cf9ae71f9a1ccf5b4b0988659a7dffb25f7ae6aece712391401967d7cf8591cd
  • alt-php74-mysqlnd-7.4.33-81.el8.x86_64.rpm
    sha:d8bd0b58bcd8c129fae3877f8af26378b71778d9119bf796a1eeaa11b5016ac0
  • alt-php74-odbc-7.4.33-81.el8.x86_64.rpm
    sha:9ecdd21a95579ef8caf3ad1ccfd9eba9c1cf6be84056bdb0a878fd0f1498b4cf
  • alt-php74-opcache-7.4.33-81.el8.x86_64.rpm
    sha:d3579a23cd9a346d7b4a32054ebf5a2eadf2d7ee2dc7703c4c4e09de36aa20f6
  • alt-php74-pdo-7.4.33-81.el8.x86_64.rpm
    sha:1c5010a48af58bc0b69bf73f2d1a7bc82e0deb3ebb584f6b357fdfe3f434f2f9
  • alt-php74-pgsql-7.4.33-81.el8.x86_64.rpm
    sha:90f4003e92f660be8cc4535485a8a221cb7ec99ad107ab36dced7d35b1a853c0
  • alt-php74-php-fpm-7.4.33-81.el8.x86_64.rpm
    sha:2b9556c0a5556714b5925ac3efe007e6d5a5947785a1bb8fb69b92bfcf6e93ce
  • alt-php74-process-7.4.33-81.el8.x86_64.rpm
    sha:f3b887db478e39f3c59b91db0603aa98b0630cd227a8bb8f861da58280a9435e
  • alt-php74-pspell-7.4.33-81.el8.x86_64.rpm
    sha:1f7de8d0b152c987ddb3f853aa8df046f22fc5101fa43af3a334c5af76763c88
  • alt-php74-snmp-7.4.33-81.el8.x86_64.rpm
    sha:8ad7b8f1519e791815da74952266670600e9d59e54f29566e285f8c9c3493461
  • alt-php74-soap-7.4.33-81.el8.x86_64.rpm
    sha:ad09513ad05826f77c75cce6b9a298ecb0b3a2c4d6e2426e5c073e8f8a0ac64e
  • alt-php74-sodium-7.4.33-81.el8.x86_64.rpm
    sha:4fa67d1d04815222d92cf4922a980665f90ec8e420be00c069f3a7f538394578
  • alt-php74-tidy-7.4.33-81.el8.x86_64.rpm
    sha:3d9e23a050f3863f130ffc2477d4591f4cc2e984fdc1a4353abba7e3fb858024
  • alt-php74-xml-7.4.33-81.el8.x86_64.rpm
    sha:d0dea102937adc0247cc71798d01249e789996eda4955941081997d6947085ff
  • alt-php74-xmlrpc-7.4.33-81.el8.x86_64.rpm
    sha:9e4cef52622e5078864d0e4221029de84d2873c88f10436c1dc81cda1746b0ae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.