[CLSA-2026:1791213590] alt-php74: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-05 15:20:06 UTC
Description:
- CVE-2026-93682: the http:// wrapper read past an empty Location header when building a relative redirect target; use location_len instead of strlen() and of reading the second byte - CVE-2026-91768: FastCGI listen.allowed_clients compared only the first 96 bits of IPv6 addresses; compare the full 128-bit address
Updated packages:
  • alt-php74-7.4.33-77.el6.x86_64.rpm
    sha:8a818b5d52e934d589cdfd071109035bec23c9fb11951d939c20de0fb54d6b55
  • alt-php74-bcmath-7.4.33-77.el6.x86_64.rpm
    sha:bafde67348ce83627d78b3cb9b7263566058141a097c8dde200b896bc7b754e1
  • alt-php74-cli-7.4.33-77.el6.x86_64.rpm
    sha:467385c116f61e2fcb7b7389c7f3e0b77cf5e766c3b6240a43f43b94b3361484
  • alt-php74-common-7.4.33-77.el6.x86_64.rpm
    sha:ab308469f9b70cdfa0b144bd848fba45198691f313634e51ce4c84152a2c8312
  • alt-php74-dba-7.4.33-77.el6.x86_64.rpm
    sha:4f351e307cb3a20c3df4bd863a856cd6980f3552f7dcad1e795ce52fd31fc0c5
  • alt-php74-devel-7.4.33-77.el6.x86_64.rpm
    sha:73f5d340942e6aa356cd05c637951992d478cd9ec0083b7e8a4def68dba5c231
  • alt-php74-enchant-7.4.33-77.el6.x86_64.rpm
    sha:5a1aa95b17cfe7f96a44510ce9377471408291bf8b6b91af03069535587edb95
  • alt-php74-firebird-7.4.33-77.el6.x86_64.rpm
    sha:ba372da1409158dabef21aaf3705a80944cae9f7529da992e3a4fdaaca9a5af7
  • alt-php74-gd-7.4.33-77.el6.x86_64.rpm
    sha:e389aea32c126696aa821f8fc6755ee7ebe79ab757c13e8657ada392ae1db119
  • alt-php74-imap-7.4.33-77.el6.x86_64.rpm
    sha:c2fe0d58b39677313704491613041ceedae4f4f9a9a0ca4b11fc924cb7b8c8cb
  • alt-php74-intl-7.4.33-77.el6.x86_64.rpm
    sha:e81494055b911c1d076793694b8d408c97f6a0c0584fe4ac51d0439ef64770cc
  • alt-php74-ldap-7.4.33-77.el6.x86_64.rpm
    sha:aeb0e87c5d6a05b88e07d8fb9b73675efa3edfbba841bf07979a2c8a32fbcf32
  • alt-php74-mbstring-7.4.33-77.el6.x86_64.rpm
    sha:c8c4f9f87a69d2b73f276f5556107252d9edb865ba1b4d089f913c745e2ddd3c
  • alt-php74-mysqlnd-7.4.33-77.el6.x86_64.rpm
    sha:f399c64e6113b0d1de25d837f3b7e1ced9b0a038a55b7ebf1b7a2f8653182289
  • alt-php74-odbc-7.4.33-77.el6.x86_64.rpm
    sha:f6efda91a726fa7ac241afde8a3d528580c95e9a8dfc282ae82316ad27554679
  • alt-php74-opcache-7.4.33-77.el6.x86_64.rpm
    sha:a264a70e361c23d02002b9ab5a38b405531bec75a6bcd60556639e2007aa3ce9
  • alt-php74-pdo-7.4.33-77.el6.x86_64.rpm
    sha:f4fe1eec113947fff3bd715610bdaedefc567da6a68c85eb5bae87feda70c07a
  • alt-php74-pgsql-7.4.33-77.el6.x86_64.rpm
    sha:9c350170f131afc6adadb48bee114cd5d985c578d1cac8ba8a668bd83cf34c73
  • alt-php74-php-fpm-7.4.33-77.el6.x86_64.rpm
    sha:dbb796d8d83d96d2e9e3c0b311316642c40ab3ac0bd6c0c00303164706876a95
  • alt-php74-process-7.4.33-77.el6.x86_64.rpm
    sha:d10af161e548bcdd8e74921ff0a3c32b9cdc73176d6b385afd337abe5c721670
  • alt-php74-pspell-7.4.33-77.el6.x86_64.rpm
    sha:21a2e8cfd8d1251d63d3759e09b7481a39336fac74a36a68cefe450b98b1d2e2
  • alt-php74-snmp-7.4.33-77.el6.x86_64.rpm
    sha:29554814b1d4fd185db87a0cf5051854000c565cd66844ae2663f11b65dbb283
  • alt-php74-soap-7.4.33-77.el6.x86_64.rpm
    sha:0b172e2a8f25bd6a0e1118ac6b4ad1098c067b9319830086880a6398d23e8113
  • alt-php74-sodium-7.4.33-77.el6.x86_64.rpm
    sha:e494749e721e701e278a61414a64b5d4cd641f3434e2181dee5890d68bc9bfb6
  • alt-php74-tidy-7.4.33-77.el6.x86_64.rpm
    sha:bbbedcb6f61f1a19cd6b49ec38dd38610ea0b1d5acec5182224027251d0fc0db
  • alt-php74-xml-7.4.33-77.el6.x86_64.rpm
    sha:a167424e3b7ef4c208adebe7a28288928dd2de4bb5f05a75e8ea4f969415a503
  • alt-php74-xmlrpc-7.4.33-77.el6.x86_64.rpm
    sha:66715b884e343c60b5ee1ec75b6067cb78a798ff66d2b595a5028744ed7b9aa2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.