[CLSA-2026:1782470482] Fix CVE(s): CVE-2016-10168, CVE-2016-1283, CVE-2017-9229
Type:
security
Severity:
Critical
Release date:
2026-06-26 10:41:41 UTC
Description:
* SECURITY UPDATE: heap buffer overflow in bundled PCRE 8.38 pcre_compile2() - debian/patches/php-5.5-CVE-2016-1283.patch: backport PCRE 8.39 rev 1636 / PHP bug #75207 in ext/pcre/pcrelib/pcre_compile.c - remove the "else" so the named-group recno scan is always performed, over-allocating rather than under-allocating. Triggered by a crafted regex with multiple identically named nested groups. PHP 5.5 reached EOL before the bug #75207 backport landed for 5.6/7.0/7.1. - CVE-2016-1283 - ELSLANG-50866, ELSLANG-40077, ELSLANG-40080, ELSLANG-40110, ELSLANG-40125
CVEs fixed:
Updated packages:
  • alt-php55_5.5.38-164_amd64.deb
    sha:6b4713f449e4e103055da12bc60dc2a38d713522
  • alt-php55-bcmath_5.5.38-164_amd64.deb
    sha:80210e126470ef50fb7d950f40b89ecd49748da6
  • alt-php55-cli_5.5.38-164_amd64.deb
    sha:c694ae40f6072ef2683fc53358f7afd57ae50e01
  • alt-php55-common_5.5.38-164_amd64.deb
    sha:5741bc4ba424adaeb956a8fa63e54d993bb4f5ea
  • alt-php55-dba_5.5.38-164_amd64.deb
    sha:bc52ffdd46a3a7efd2b1b67ec198baa7f4bf0e93
  • alt-php55-dbx_5.5.38-164_amd64.deb
    sha:979e79e639d0bc49f606f22bcba2b363d2c75553
  • alt-php55-dev_5.5.38-164_amd64.deb
    sha:7e7f15d82db6be6c426965a0c4c63c4cc1def234
  • alt-php55-enchant_5.5.38-164_amd64.deb
    sha:91ff8771f77130263a07601ac120644f9300e07d
  • alt-php55-firebird_5.5.38-164_amd64.deb
    sha:86fdae786557a302d4faaddc1b0a8a50150b7dad
  • alt-php55-gd_5.5.38-164_amd64.deb
    sha:dd06474f41256f84a1fb3f8f088a38632299dae7
  • alt-php55-imap_5.5.38-164_amd64.deb
    sha:958f0c4a5dc814b76c57438b4d2317e5df33910d
  • alt-php55-intl_5.5.38-164_amd64.deb
    sha:308096091b20a265a42a4424d41a01dac853df3d
  • alt-php55-ldap_5.5.38-164_amd64.deb
    sha:9664a19ed1d3ea15d4bcf8516a4ec4ba1af2c6fc
  • alt-php55-mbstring_5.5.38-164_amd64.deb
    sha:ff03fee6d216d3368ca2708750bfaf5fa8905e2d
  • alt-php55-mcrypt_5.5.38-164_amd64.deb
    sha:4b96017ab64e0871e02418b8a727f3be5838d115
  • alt-php55-mssql_5.5.38-164_amd64.deb
    sha:59f7a875eb485190ed4205fe23bd60ec676f6f57
  • alt-php55-mysqlnd_5.5.38-164_amd64.deb
    sha:59e0cd005f371abb549cedf42c136e01fe321fcc
  • alt-php55-odbc_5.5.38-164_amd64.deb
    sha:9af9b032e2debbde339160fb86bf8ccf6e34a27c
  • alt-php55-pdo_5.5.38-164_amd64.deb
    sha:0009a6a6c5394fee9d3503cb4007a52aacf9815e
  • alt-php55-pgsql_5.5.38-164_amd64.deb
    sha:1c15f3a8bb5c9683c4386ce1c33233bf2ac5c5c6
  • alt-php55-php-fpm_5.5.38-164_amd64.deb
    sha:c3f57a6a16151adc3c1996451953d53bf67a14fd
  • alt-php55-process_5.5.38-164_amd64.deb
    sha:83f6e5c9b38b4afb0a2392b64dd82a1881b5744e
  • alt-php55-pspell_5.5.38-164_amd64.deb
    sha:e503d8c7f987426998c19a0dbff04037f140aacb
  • alt-php55-recode_5.5.38-164_amd64.deb
    sha:47449be05c90bf7f094a938be818d75cabd44ab7
  • alt-php55-snmp_5.5.38-164_amd64.deb
    sha:80952375c70e3ee889429a34c339b2bac39ab21f
  • alt-php55-soap_5.5.38-164_amd64.deb
    sha:d6f4813317cbd57b9d9557ef5a437aa200ced644
  • alt-php55-sybase_5.5.38-164_amd64.deb
    sha:a0062bf70a5b368f6de150cb2caf1eb881a993fe
  • alt-php55-tidy_5.5.38-164_amd64.deb
    sha:d48a0af064589bc2523306c7bd20d14a0beee30e
  • alt-php55-xml_5.5.38-164_amd64.deb
    sha:527516510226efd801e7c6ad15a2008840d76d6c
  • alt-php55-xmlrpc_5.5.38-164_amd64.deb
    sha:ca934f4c9299f52355a341fe3304b66767cc1fae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.