[CLSA-2026:1791245231] alt-php74: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 00:07:24 UTC
Description:
- CVE-2026-93682: the http:// wrapper read past an empty Location header when building a relative redirect target; use location_len instead of strlen() and of reading the second byte - CVE-2026-91768: FastCGI listen.allowed_clients compared only the first 96 bits of IPv6 addresses; compare the full 128-bit address
Updated packages:
  • alt-php74-7.4.33-77.el8.x86_64.rpm
    sha:e1b652e8b8e2c148de56f1037473cfc984748559df0bb4efccbeb40690023692
  • alt-php74-bcmath-7.4.33-77.el8.x86_64.rpm
    sha:1c8b91e3c37253a10ca9c6f3455b48623fc658edb99c5d00e9fa381a911ce628
  • alt-php74-cli-7.4.33-77.el8.x86_64.rpm
    sha:8f25a26370608cf1d559dbcdf31c8feb4cc53d24def816ee7203eef84fa4b9f0
  • alt-php74-common-7.4.33-77.el8.x86_64.rpm
    sha:53c1427704f9fb8e7cfd9aa2ea57af07ce9cfe432bfcc664e7a6d0b6ae170904
  • alt-php74-dba-7.4.33-77.el8.x86_64.rpm
    sha:1ef5f0122095a9aa8bbbf6b41675efbbf131cf7f1484cb746dd6ad6630a9fe24
  • alt-php74-devel-7.4.33-77.el8.x86_64.rpm
    sha:b317ca7320562dbd0feaf4550149ac4f2f99c435959a058d6d56a0fcd13c3c72
  • alt-php74-enchant-7.4.33-77.el8.x86_64.rpm
    sha:8e85dd42f2c77dab88a62ae6fb8b4283c84a96c52a56cc6c18af24529c75e42c
  • alt-php74-firebird-7.4.33-77.el8.x86_64.rpm
    sha:df0a477c01a4e323b0607f05554fbff8fc3eab5e0aaee8ddfae3494e8a9fad94
  • alt-php74-gd-7.4.33-77.el8.x86_64.rpm
    sha:ce71397a3b24235754e0dca37783ec96d1cf1c5cd2f5a2e365089e8019feedc3
  • alt-php74-imap-7.4.33-77.el8.x86_64.rpm
    sha:ad9ffe104321322331ee76a7524cd9f64b88c4a115e2a07f8213ff89db0439f5
  • alt-php74-intl-7.4.33-77.el8.x86_64.rpm
    sha:7f151ec4dfe5ad4340506ede74547a1cf0c59bb3e4fe360682f9385d56a52e12
  • alt-php74-ldap-7.4.33-77.el8.x86_64.rpm
    sha:0b10bc1608f4dcdcad55b397731aa7bbadb1a2fbb42d34c40216672b3f8c24d2
  • alt-php74-mbstring-7.4.33-77.el8.x86_64.rpm
    sha:298b94b1a91bebc043179ad0cdfbe4e71fdce2bbc77f2d0dce728a67c4498795
  • alt-php74-mysqlnd-7.4.33-77.el8.x86_64.rpm
    sha:edae5c378bb8deefc63902254ee93fc4eacf45c69e371ce5dc90cebf06391417
  • alt-php74-odbc-7.4.33-77.el8.x86_64.rpm
    sha:a47ede056ef22d6e497ae2d244f475dc0b9b4738b49a31c86e6164e20f0b1a33
  • alt-php74-opcache-7.4.33-77.el8.x86_64.rpm
    sha:e7e468362f660a091b43be237df04940d5f8dd71d516310a72c0d09ca4c74a0f
  • alt-php74-pdo-7.4.33-77.el8.x86_64.rpm
    sha:19d4c05f9a3eb1677b9d1cb96c7765010d3022a243012f542373e36c8ffc4546
  • alt-php74-pgsql-7.4.33-77.el8.x86_64.rpm
    sha:cdfa77c553673630848aa46dd929e9c2f0ef73f08e07a2fa6aaa45e777321bfc
  • alt-php74-php-fpm-7.4.33-77.el8.x86_64.rpm
    sha:8483e3059b5ae8e579c983b3af898d4605b629d4ee7ceeff71544c31502ccc48
  • alt-php74-process-7.4.33-77.el8.x86_64.rpm
    sha:55508fdfde3ba4eeead59163b2762b4d1c7242f818cd2dc4704f7ae00650ba68
  • alt-php74-pspell-7.4.33-77.el8.x86_64.rpm
    sha:43cfe43a215971d1dcc8e6bd2e6cdc195f33c3dd5c6e74023db8bf19f1e38bb4
  • alt-php74-snmp-7.4.33-77.el8.x86_64.rpm
    sha:5bd67d485f96493e5c317c01757e87e9b4fbbe74fffa4a19ebdc3f8ac541242d
  • alt-php74-soap-7.4.33-77.el8.x86_64.rpm
    sha:88d04d87c112d7769b5aae798d5383e243329ae8641345cd229ff5bfbc3a0e20
  • alt-php74-sodium-7.4.33-77.el8.x86_64.rpm
    sha:f202a44711adab0dd09b4dd691d41e2647414242d31aae6914d77012670864f7
  • alt-php74-tidy-7.4.33-77.el8.x86_64.rpm
    sha:ef7a19170ab5af19a8113b45c7463f8580d80d5d862ede91910b5dace4fd3d49
  • alt-php74-xml-7.4.33-77.el8.x86_64.rpm
    sha:7ce537bc50cdf6170d2d14c8df6546bc415b402d9460407b35fe1b035b07ef98
  • alt-php74-xmlrpc-7.4.33-77.el8.x86_64.rpm
    sha:262e6cd8104d27172c324ed48578ceb0cc686c7965b56e9132606a1b61637984
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.