[CLSA-2026:1791206229] alt-php73: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-05 13:17:26 UTC
Description:
- CVE-2026-93682: the http:// wrapper read past the one-byte allocation of an empty Location header when building a relative redirect target; check location_len instead of strlen() and of reading the second byte - CVE-2026-91768: FastCGI listen.allowed_clients compared only the first 96 bits of IPv6 addresses; compare the full 128-bit address
Updated packages:
  • alt-php73-7.3.33-79.el9.x86_64.rpm
    sha:7758b025d368b0fb6a6f0d64265de6c2e31a6a05fb3471f6eb0ff4ecf5444608
  • alt-php73-bcmath-7.3.33-79.el9.x86_64.rpm
    sha:59e7a73903e1575b371d644c771b9a1a2395a4131aa0628a7bbab30c51a1eac6
  • alt-php73-cli-7.3.33-79.el9.x86_64.rpm
    sha:17d7c195de9717236884b05481a8fa59f4cbfe9c8a2032d3db5c946ef26fff9b
  • alt-php73-common-7.3.33-79.el9.x86_64.rpm
    sha:386478083e36401425ac3f91c8df2abcc0c60c2477c806818626941dff9a274b
  • alt-php73-dba-7.3.33-79.el9.x86_64.rpm
    sha:d97af842a9431f7f48e39aa594763e46d7f6268f5285f2edc5dbb284da0bfd74
  • alt-php73-devel-7.3.33-79.el9.x86_64.rpm
    sha:a69e7000951dc913d854966775e25ae065fbec6ddb91f25454cfceb933bf96a6
  • alt-php73-enchant-7.3.33-79.el9.x86_64.rpm
    sha:0e242d69b0ac0a620df86ee3d4affce3b54755749490d9e0b0494d151a407560
  • alt-php73-firebird-7.3.33-79.el9.x86_64.rpm
    sha:4f515fa4b6bc39e52c0724085d94506aa420ae4835e0f939d6eb38c8cc18d013
  • alt-php73-gd-7.3.33-79.el9.x86_64.rpm
    sha:1f2dcc887fdaae30c6de7a594c9231331a0e3cea9407d7f153040f8982d82d0b
  • alt-php73-imap-7.3.33-79.el9.x86_64.rpm
    sha:93af825468531a1e5483d7d229fdecef33f51f142de81113074a735f2f2e989c
  • alt-php73-intl-7.3.33-79.el9.x86_64.rpm
    sha:4bf18ea8c3122f5d650edf30c626f25bd99f5c902f18f9eebd89f279366f85f8
  • alt-php73-ldap-7.3.33-79.el9.x86_64.rpm
    sha:282e5e71ac833135499e6fa26564c702a98d460bcb0ccced370982e2b5994de1
  • alt-php73-mbstring-7.3.33-79.el9.x86_64.rpm
    sha:4a58f5f5ea4986c15827c957d254090ddd7e264b341cc2419778186aaba6d888
  • alt-php73-mysqlnd-7.3.33-79.el9.x86_64.rpm
    sha:2c3d8247257215903b8ae45685e1e349dfc7622834f21b489c6830de33581891
  • alt-php73-odbc-7.3.33-79.el9.x86_64.rpm
    sha:bcfda0b48c5fee2669a67d0baefbfd762d5dfc20743c4165f9dad1e5471b58dd
  • alt-php73-opcache-7.3.33-79.el9.x86_64.rpm
    sha:2ff983b400e707a2f76ebd0c8d710dc91c1ea38e4c65d4300de16d3cc380c88c
  • alt-php73-pdo-7.3.33-79.el9.x86_64.rpm
    sha:cfe43bd4cd37f4144b33f79a221ddb65daa515d0677680db41f36146405d8b54
  • alt-php73-pgsql-7.3.33-79.el9.x86_64.rpm
    sha:3a9a9321c895a3869e05265daaa8c31a69acd78da5d811e2b0898cf640d9ac6a
  • alt-php73-php-fpm-7.3.33-79.el9.x86_64.rpm
    sha:2b499b4af36def1da114975d5c88c28d8b9cf170e21098b232d8e32ba5a8f669
  • alt-php73-process-7.3.33-79.el9.x86_64.rpm
    sha:50351b2bf70c62eddaf8ff6453ef86c6783ebcb19aa84cde25412cfc623e17dc
  • alt-php73-pspell-7.3.33-79.el9.x86_64.rpm
    sha:8b54094414d07b42d4a819bfb8b3e87053490863102813ae2a253c47f3e0c308
  • alt-php73-recode-7.3.33-79.el9.x86_64.rpm
    sha:092d4d026f40a2a04ad45a7aedb08f12294d89058df8016d7530b4322acbc2e8
  • alt-php73-snmp-7.3.33-79.el9.x86_64.rpm
    sha:75f2dbc88ae8ca251358f38296fdfb8336d18830b32f5a1ed2f50089fcebe25d
  • alt-php73-soap-7.3.33-79.el9.x86_64.rpm
    sha:9905026fa7d74f7426af8520f7945308b50afc2092de4cbc7e2ba07f35a2e857
  • alt-php73-sodium-7.3.33-79.el9.x86_64.rpm
    sha:092b0407836975d6aca739554382c5a812d2a9ca523d4c65e772028006a371a8
  • alt-php73-tidy-7.3.33-79.el9.x86_64.rpm
    sha:058af4344c4c53f4a0099eb22c1c40f2c09f3ab9c95f9348e3e7585308069692
  • alt-php73-xml-7.3.33-79.el9.x86_64.rpm
    sha:f9e47cdd9d753f51b9265966675d5e4cdf6f18113bdfc20732580586e09fcf56
  • alt-php73-xmlrpc-7.3.33-79.el9.x86_64.rpm
    sha:19aba3780b37820bd52beacd927e4acbe2a73661a290842f15fff58dabeff31d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.