[CLSA-2026:1792609408] php: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 19:47:03 UTC
Description:
- CVE-2026-109618: memory exhaustion and allocation size overflows bailed out in the middle of an operation, leaving engine state corrupted for the shutdown code; the process now reports the fatal error and terminates - CVE-2026-109619: request-scoped SAPI and core globals were left pointing at freed memory and could be reused by the next request after a bailout during request startup; they are now cleared at request end, unused and duplicate multipart part headers are dropped, and session upload progress is disabled
Updated packages:
  • php-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:8b7e4758c413545db415d55699898b30099881d80d4acd663676ccc0db74bb8f
  • php-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:db93bfb9f8df0e40735534e37443e557ce05c2fc57f2d1796e095ff5295832b8
  • php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:09d07675264317113b5ad7ca6999a3938f028f98c3a8bded748d3cd7973cbd9e
  • php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:bcbb7ee00e0cea3c2f8c3582bb617b3025f0c2a535b579852801247939cb9403
  • php-cli-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:0355fe414c6c7573a01c93d880a8e6a85c5f3326a5c1885a7e2eab46716e9878
  • php-cli-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:122a391fe210b151c4991e8bc814edde062781d336ccd9c8ab186a8adcd6ae7d
  • php-common-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:45ad03f9b16edc64bd50f5e508a7f91a3551899e81acba003f2e9061b5fe745a
  • php-common-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:2ecc84a8665fc569fbb7d539bb478900e664791d8fe3974a1294d335c3dabe96
  • php-dba-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:e0858273e1635d106d19d36a25375ea19ad542bf20aedc3e5cc76d16ae6a1671
  • php-dba-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:54e59ea31f344ed7af912f8c2669d8ba13bb3c064f7cecfe7826bf4b85ad2764
  • php-devel-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:0b7abc9128ac212c4a04271c7cae7f78e183d79f180cb282e574215b91f178cd
  • php-devel-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:28a2001ffe054f08cd22709f7ffa88bdc889d6e920e139e6aaa5d5457759fbe7
  • php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:a205e7b330b8e60fa63c66e590f732c744245ea55adafed27e2e0d5eea9b19a2
  • php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:f502165f256de79224f8539dfe69caa8772287b97ff26d74e5bf100d62023044
  • php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:a6f5d12fab37d6de12da168448cf8617964fb3d098c2e5755ccfaf55c1db9b93
  • php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:0412684ed3ecbacd518917b3003da6f734bc89f27186dab900833c1343e99841
  • php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:e6673d1c8d8872e8222aac86e3c0c80ef5ea5a241948be88fcc5687d545bcd51
  • php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:89463a67c6ccf0ab9fb0127249372dc68ab1cce2229976cb4b3599c0bd036d93
  • php-gd-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:eb200b8a1afb2ecb698ae2735eece73e1eb39f5d345e52e9f17142dc5b5c5d5e
  • php-gd-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:50814c90bc575a80932869793d865279f0a7944909bae167d63e0e2c058d6ecd
  • php-intl-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:74fd07b1d475fcf9f3c2685da291f9b5b991cda405a95c6d0b5c5ecf2f3f0700
  • php-intl-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:d8d589649f10d4651ef5188e9c2225851b0d72f307b39e47f43be06f253fe105
  • php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:8067626f2c1d434162568277ee59c1150acbc92bd297127db7489b8645b65f46
  • php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:fcc9232c12a991af7d0e327c2ad78f9ff2c156907374f72d2b005c9edd655065
  • php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:27729409617fbf0792ed3bcea892d357fcc139fcc373708c07bc9b23a8408d14
  • php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:548fbcd3226f0cf7935d65d82617638371b976d6762114f294386fb4651120f0
  • php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:1a0a84fc98b53be5dbef03618a87a03993d8b33b54d1a1ad1e9ef83594885c5e
  • php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:c264676f5cbdf178ad14ef2c253f4316de1f181659d5cbac9bbfeca217e93776
  • php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:c1d341aa7b6fd7e6c2f367d3a29c7f8d07b392da19a5cf58f98b2831a405ca08
  • php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:d2ddd76d7a0f38a1cd2485cb081c319e32f8d733240304044fb798062316a49b
  • php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:19c24f7388e8524848ab156d587155286ced14912279288847c5437617052f43
  • php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:ef6a68293a67dca9d516ab78950fee39a25f025af2ec6b03ae653472f47003e0
  • php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:c029923468b0fb70876fab429a3e25ee5446d181b1229428403194cf5a247f14
  • php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:ff8b403d58bcdb34d6ca8ca57da92c29ca98a98b80d1496b0cfcfc18cabcb5a6
  • php-process-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:38772d75429f0cb6b6d95553558ca8b7a72e0edfd2ee1920d048e2947d37dbd7
  • php-process-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:06681d6b523559bce0f5feb614289ffd45e2dd095bdda6e5116608ef2395d95e
  • php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:d447aec3ab650b0addc9d5271c3fcacd4784d51cc28d0e38f01b032d3be29402
  • php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:42f3006f4cbbf6f541ba44e1463d366096cd006b99dd60eac3a74b80d89aa618
  • php-recode-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:4733c1dfa8231a4317eb68705ce9b24ca96749d49f7b2d1207bf47d56baf083b
  • php-recode-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:673d5ca7147f6ea976ebc646eb6283e4ee40da27506257a4754a8560204cd559
  • php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:07525eb6c470794d4566d8c279384c864a68d8238237ad5aa63cfefd9ba22f5d
  • php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:5ce8e65b6165f0053c285c861e2592ee73909c687c59c4eb2312e667b191cc57
  • php-soap-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:a1febc2fdd88214b87738dcef8e5996a99ecb57353d781c4ac7da862daf25b6b
  • php-soap-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:ca087ffe19ee0298b2b512dd28fd6d3aeb218491226cbef050ecda339e4997a9
  • php-xml-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:d519b68169623558433fa55a8db0eb1859be4aed1ddb742758cead4ddbe160cd
  • php-xml-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:35ef90d900f74693e367f8d597fb9bf20483c61a9a9ec71037415c610b9299d8
  • php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm
    sha:7c5554bc4024a07a1eff0376288c947b46040d7af046177fbf91ed62b5fc234d
  • php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm
    sha:8b411d527ac2780522a0374e22ebec88a3945657e2c8aede566eb62695834b80
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.