[CLSA-2026:1792634804] alt-php55: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 02:06:56 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect. Adapted from upstream 712e60f9 (PHP 7.4 branch; upstream published no PHP 5 patch)
CVEs fixed:
Updated packages:
  • alt-php55-5.5.38-183.el8.x86_64.rpm
    sha:ae0062bf3fb7cbc0b0b4320f914bb322a48538d141a50de72a981ee32f5277c2
  • alt-php55-bcmath-5.5.38-183.el8.x86_64.rpm
    sha:ee149b4e9c7939db3ba2af76528ed63e5d6c23f4cc9140ba6ee7138ef99b59d0
  • alt-php55-cli-5.5.38-183.el8.x86_64.rpm
    sha:1633dfd16eaa21c77c952f9502c9383db2023ef8cb97be6bccc1cb96867476ba
  • alt-php55-common-5.5.38-183.el8.x86_64.rpm
    sha:7f6984342d72907d2287a2203531f3e41d16a17eb8a82884f93b82953b08b842
  • alt-php55-dba-5.5.38-183.el8.x86_64.rpm
    sha:f00aeca9e366d2dd29f44a3d995130f39b6f5eff3719b1ba84fc286c5879b5c1
  • alt-php55-dbx-5.5.38-183.el8.x86_64.rpm
    sha:80938f558bef9ba346fff164d17e37f767ddcb975b3169e4989ed1675c8238ef
  • alt-php55-devel-5.5.38-183.el8.x86_64.rpm
    sha:20f3b7c4f22963ad81e222d09e3fe37355d3203139238040ca963a978b6abed9
  • alt-php55-enchant-5.5.38-183.el8.x86_64.rpm
    sha:7acc0e3c9f0f85699e32eb55ed49e6c185bcbd660303b860fa37fe8aae90f989
  • alt-php55-firebird-5.5.38-183.el8.x86_64.rpm
    sha:3ef4e54892ca0eeeb0d82e2b26053c2f00c5a3578e9fbe0d1e684631f19f95d3
  • alt-php55-gd-5.5.38-183.el8.x86_64.rpm
    sha:5c4dbefde69cf53e0e42732595ea3cbeebe7bf0c02a0ec16652415cecfb473d8
  • alt-php55-imap-5.5.38-183.el8.x86_64.rpm
    sha:90e46cb5fb13306c0abfd1b580bd1ed51728f2fdebbd1ce747f0e807c88d2898
  • alt-php55-intl-5.5.38-183.el8.x86_64.rpm
    sha:6ec4118cb7007360d17f1ee75f3d16eb255141cef716264f24fa256d05a5e79c
  • alt-php55-ldap-5.5.38-183.el8.x86_64.rpm
    sha:21d177516266aabf5c911ac93868982c5177235cebc1397aa327963fee108d9e
  • alt-php55-mbstring-5.5.38-183.el8.x86_64.rpm
    sha:2fef929e619f642d15ea4abc506f1966b2070829e51e3013892465f13ac6d47c
  • alt-php55-mcrypt-5.5.38-183.el8.x86_64.rpm
    sha:0317c8f9778383682cd8a4846cda2a01323aace083a97c41332d8304b4af1323
  • alt-php55-mssql-5.5.38-183.el8.x86_64.rpm
    sha:d41621cb258b086a6bed2a7bc7c8df5e0c265dc48bb2f6f2041bdcfc24d3f512
  • alt-php55-mysqlnd-5.5.38-183.el8.x86_64.rpm
    sha:115b1b48aeaea0f99cd5b84a879c5b613aa32a817bcd487e71e2f5fb460bf211
  • alt-php55-odbc-5.5.38-183.el8.x86_64.rpm
    sha:3ae5da8bb08201f4e813599a72af9ce99b95a6fdd446a9f45490eed07f2ddd13
  • alt-php55-opcache-5.5.38-183.el8.x86_64.rpm
    sha:47ee1a13af1d36c5417fee29ee540ed40971a6950994aa5f815ae883573f4bd3
  • alt-php55-pdo-5.5.38-183.el8.x86_64.rpm
    sha:5b41dd6bdf9d31836f4df04e5fc62c216e5643fa8d4573571a69b8d2adc2c09e
  • alt-php55-pgsql-5.5.38-183.el8.x86_64.rpm
    sha:35ec2a3f2c1f9522888f4c70c2f66b97f305e5e5d9970509bdc5481875282287
  • alt-php55-php-fpm-5.5.38-183.el8.x86_64.rpm
    sha:a0c6dc2e783c23dc9fa1f2bb411c8a6f3075825ac2666eac62d2a7fb34e32ec9
  • alt-php55-process-5.5.38-183.el8.x86_64.rpm
    sha:761bdf15865fe5c3a44a1012a8f4989c1642d59875e973aaef2037de88b5dec3
  • alt-php55-pspell-5.5.38-183.el8.x86_64.rpm
    sha:d66b8c5a34174968db08f3bc3201285bdf462f35663826810c51c66c89b585c3
  • alt-php55-recode-5.5.38-183.el8.x86_64.rpm
    sha:eef27abdce591b22a181c49fad2a0951d781b9f30fb44b6883bb0fb9f0800d76
  • alt-php55-snmp-5.5.38-183.el8.x86_64.rpm
    sha:848f880db1802196b4eca202906df8b660070e9a3be70075047b7ffd06246ed9
  • alt-php55-soap-5.5.38-183.el8.x86_64.rpm
    sha:a1f6e625f15abaaf1022b51a4d2ac1fbc23c84555963e3ab5af1b87435ceac79
  • alt-php55-sybase-5.5.38-183.el8.x86_64.rpm
    sha:fd3e2114bb1be58ef326a07e5748aa38a8d16dac10691fb997b45125d6f54b60
  • alt-php55-tidy-5.5.38-183.el8.x86_64.rpm
    sha:d714ac2549620867a7ed9ac4959cb45b592d1a80044b7018931a517c75da7729
  • alt-php55-xml-5.5.38-183.el8.x86_64.rpm
    sha:84a0e19287f4eb5dee1fec79928f2a532d9f8de505fa61688de8bcf29725816d
  • alt-php55-xmlrpc-5.5.38-183.el8.x86_64.rpm
    sha:5594cf7b335a3e30aacd94e8eec3004015db9579aed933526420fa03b9e1eb82
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.