[CLSA-2026:1792674106] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 13:01:58 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php73_7.3.33-84_amd64.deb
    sha:fd0726aa226f2010dfc95b61ef1957e10b79a22f
  • alt-php73-bcmath_7.3.33-84_amd64.deb
    sha:53c784ec14553f5d68e98670ef915e7c64fed5cf
  • alt-php73-cli_7.3.33-84_amd64.deb
    sha:fcc5dfacf3bb3c23e4485ea95f565d35c0927446
  • alt-php73-common_7.3.33-84_amd64.deb
    sha:432daa93bfe05eeb69760b9189e85352d2e65a9a
  • alt-php73-dba_7.3.33-84_amd64.deb
    sha:b5a7fab46941ff55a667edbe524a31800dcd1c78
  • alt-php73-dev_7.3.33-84_amd64.deb
    sha:44f51cb72f37497968213136a228b7c980e65226
  • alt-php73-enchant_7.3.33-84_amd64.deb
    sha:bc6db8860b87149f33cfe72983e556faa07755a6
  • alt-php73-firebird_7.3.33-84_amd64.deb
    sha:102b4fd16d21a3d3f818541a095dc1a8699d7213
  • alt-php73-gd_7.3.33-84_amd64.deb
    sha:56ec30c4e1a3221ed22ab53a652bab0619d3f389
  • alt-php73-imap_7.3.33-84_amd64.deb
    sha:302d90c926fea26d0f9639f6958ca40fd7d2cb06
  • alt-php73-intl_7.3.33-84_amd64.deb
    sha:dc4ebcb6a272c7f2b589e4873cef115f8fc56c3d
  • alt-php73-ldap_7.3.33-84_amd64.deb
    sha:f0a844094ed1f745ab891fd5714d0bb1a52b811f
  • alt-php73-mbstring_7.3.33-84_amd64.deb
    sha:28e679fbeb4efc65b02f5bc8f07d5dc35b8449d7
  • alt-php73-mysqlnd_7.3.33-84_amd64.deb
    sha:6d9b9f80e567c65bb4904e0ccaee0836412fbefc
  • alt-php73-odbc_7.3.33-84_amd64.deb
    sha:88ee950199fb4534d82243148f677d0c2fc4dc07
  • alt-php73-opcache_7.3.33-84_amd64.deb
    sha:489d25b8ad2b145028ab462d05c4f0693bb3ca03
  • alt-php73-pdo_7.3.33-84_amd64.deb
    sha:d7e9af9a3ba5a647716e7e00f49174b581380953
  • alt-php73-pgsql_7.3.33-84_amd64.deb
    sha:5ffdfd64e7708eab0d34e149213726972d31dd79
  • alt-php73-php-fpm_7.3.33-84_amd64.deb
    sha:1457e08d69c7c1d5265afe7aeec36d78a1313481
  • alt-php73-process_7.3.33-84_amd64.deb
    sha:b45c540505d293462758f942b94fe77a0cfc1638
  • alt-php73-pspell_7.3.33-84_amd64.deb
    sha:bde1bcf98297ea367bd1d18fe512fae0b79c0424
  • alt-php73-recode_7.3.33-84_amd64.deb
    sha:45f8814de1c54d48418e9612b15d5aaec879964c
  • alt-php73-snmp_7.3.33-84_amd64.deb
    sha:6133a1418127aecad413dffb0ce748f3f308fc0d
  • alt-php73-soap_7.3.33-84_amd64.deb
    sha:49e4aa314f4c76cf2e2fc8184fcd595b4094972a
  • alt-php73-sodium_7.3.33-84_amd64.deb
    sha:902c4da52133809349218dabb9c6b7799f3dd13b
  • alt-php73-tidy_7.3.33-84_amd64.deb
    sha:6e8a2d04fa453e6f7dc8ce9564238bd5a71ac3cd
  • alt-php73-xml_7.3.33-84_amd64.deb
    sha:0261d842834b70f2ae482bb67911875fbb5ae043
  • alt-php73-xmlrpc_7.3.33-84_amd64.deb
    sha:87db66dc619f1c497412307b5f9c11a0fd41e677
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.