[CLSA-2026:1792679315] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 14:28:46 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-116_amd64.deb
    sha:92bbdc2e80222acb469e95f88b2c3cca5166b1e9
  • alt-php71-bcmath_7.1.33-116_amd64.deb
    sha:3869627e578aacaac8d350e80c5f39f69d88c509
  • alt-php71-cli_7.1.33-116_amd64.deb
    sha:01a60819e85253b1c28604460353016da863bad4
  • alt-php71-common_7.1.33-116_amd64.deb
    sha:aec6325d5283ac59b3ebe11791a6dc853aac82fa
  • alt-php71-dba_7.1.33-116_amd64.deb
    sha:8070ca237cac1713415647897ebf00d401bf2bbf
  • alt-php71-dev_7.1.33-116_amd64.deb
    sha:07d9eae4b3f13e935da203c4e0ae45187fd53c2a
  • alt-php71-enchant_7.1.33-116_amd64.deb
    sha:e40d632ef8e1f6d5e4086066c7348e626d755200
  • alt-php71-firebird_7.1.33-116_amd64.deb
    sha:02d892471599b344fbb37944a14e5c1f7e8e35ba
  • alt-php71-gd_7.1.33-116_amd64.deb
    sha:edb94b131365e98ca0ff335fe8a15ed422a09d41
  • alt-php71-imap_7.1.33-116_amd64.deb
    sha:8789cadbb746022a7941645553d2c906ce68601f
  • alt-php71-intl_7.1.33-116_amd64.deb
    sha:f527fe747c8e7cc940493cba5eaff3e9b6870f92
  • alt-php71-ldap_7.1.33-116_amd64.deb
    sha:2cdf00db9ead0637fcefa28466ce513f69c08369
  • alt-php71-mbstring_7.1.33-116_amd64.deb
    sha:86c5b95c96685f82d2a7b2a675c4206f482bfed7
  • alt-php71-mcrypt_7.1.33-116_amd64.deb
    sha:6bea20707debe6f61460d69e1c6bcc26310c9a4d
  • alt-php71-mysqlnd_7.1.33-116_amd64.deb
    sha:fc441c8a03d8f41a73de9be80acb6d907aed0809
  • alt-php71-odbc_7.1.33-116_amd64.deb
    sha:b92c8a01d22ae4375ce53077ceb37c007c8a5fe0
  • alt-php71-opcache_7.1.33-116_amd64.deb
    sha:c5b5594e39634a3ad00a17a03eb42a34d6213823
  • alt-php71-pdo_7.1.33-116_amd64.deb
    sha:181feadaf6270cafac8fe2d64f05d3f340192fd8
  • alt-php71-pgsql_7.1.33-116_amd64.deb
    sha:c9cfa5d9a24f076a28f6f5aed6761d5162d37eb8
  • alt-php71-php-fpm_7.1.33-116_amd64.deb
    sha:cf4191ea8270686bc48d59f12d6e2311c527e2c7
  • alt-php71-process_7.1.33-116_amd64.deb
    sha:452d5b6bf2a73d5e05bec4ced429bb9160c944ed
  • alt-php71-pspell_7.1.33-116_amd64.deb
    sha:c683a9ade309ca97f8782478de1982ce1654ad42
  • alt-php71-recode_7.1.33-116_amd64.deb
    sha:4ea8867f23150a1046541c40fff89e75bfdaa555
  • alt-php71-snmp_7.1.33-116_amd64.deb
    sha:bd27ead4788bcdb841ea634b92ab2faea0babf5c
  • alt-php71-soap_7.1.33-116_amd64.deb
    sha:1da73d589accf8a27b49e343f0db923a7c76d982
  • alt-php71-tidy_7.1.33-116_amd64.deb
    sha:44f92d45c082ab2dd9e890bd97e943b800a0b01a
  • alt-php71-xml_7.1.33-116_amd64.deb
    sha:b5c15642e92b4917c72436ccd48113fe464b6fe2
  • alt-php71-xmlrpc_7.1.33-116_amd64.deb
    sha:363164b44d812da70358db35c83b49fce662cf51
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.