[CLSA-2026:1792659311] Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 08:55:31 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-8.0-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; upstream 82f8f31b (PHP 8.0 branch) also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-70_amd64.deb
    sha:4db3f0cb25184d17216984b776bc1d785e27bdcc
  • alt-php80-bcmath_8.0.30-70_amd64.deb
    sha:f233b99d916637f1f38a20ab647a2b9ad1d2b32a
  • alt-php80-cli_8.0.30-70_amd64.deb
    sha:d4156e77c2f3f34bc42dd7df9f7086a21ef08be9
  • alt-php80-common_8.0.30-70_amd64.deb
    sha:18dab80559a6bff490b672a1b5a88f6c93b4a46d
  • alt-php80-dba_8.0.30-70_amd64.deb
    sha:5be78c2210bbdaa96fade018afba8de9553ca00b
  • alt-php80-dev_8.0.30-70_amd64.deb
    sha:a738b0b745f4ad489a8fe532f94598e38a1f2e97
  • alt-php80-enchant_8.0.30-70_amd64.deb
    sha:d0656d3ed181cee8566bcc0c4a4b9e7daf653dd6
  • alt-php80-firebird_8.0.30-70_amd64.deb
    sha:410b8f9f91f70b2bd202a688e610789183596560
  • alt-php80-gd_8.0.30-70_amd64.deb
    sha:cbd10d6c8e76483d864175887db5f38020747cbb
  • alt-php80-imap_8.0.30-70_amd64.deb
    sha:9a382a788feb85a8208e85647ccb5f29a0718df4
  • alt-php80-intl_8.0.30-70_amd64.deb
    sha:c2124a10bff178fc7ec91c73eabcd41dac15a54a
  • alt-php80-ldap_8.0.30-70_amd64.deb
    sha:f8b44100bb8775e0f2920b3f03c9b4b119f027ca
  • alt-php80-mbstring_8.0.30-70_amd64.deb
    sha:ce7dafe4772765ead0e08dfb667c5eb8482a32f2
  • alt-php80-mysqlnd_8.0.30-70_amd64.deb
    sha:4543048db648f72dfe297dbc64b621f878a6ae8e
  • alt-php80-odbc_8.0.30-70_amd64.deb
    sha:e79789f29b07f44f2171830c2902df0ae571bfe6
  • alt-php80-opcache_8.0.30-70_amd64.deb
    sha:5f5121529e6834f1d6e6bcda5500cd1c77d485b7
  • alt-php80-pdo_8.0.30-70_amd64.deb
    sha:5941b17bbcd0b027d55040f653ddd0125b9d4003
  • alt-php80-pgsql_8.0.30-70_amd64.deb
    sha:5a767a40c6bba0c824b6d1b2c7e4809645280690
  • alt-php80-php-fpm_8.0.30-70_amd64.deb
    sha:2fe07396be79f290a1d297dc3c1482220d2f0556
  • alt-php80-process_8.0.30-70_amd64.deb
    sha:9a57ee78f8dee0fdf1c66f2c2e4e2766969572bd
  • alt-php80-pspell_8.0.30-70_amd64.deb
    sha:a71d330b78ae1093c29bf5ee907913e41010a44e
  • alt-php80-snmp_8.0.30-70_amd64.deb
    sha:e8f1c72001a72752ca865d1312c221ae1e7e3b10
  • alt-php80-soap_8.0.30-70_amd64.deb
    sha:c03c4021cda2d93b176bc5845d1ff9481b907aef
  • alt-php80-sodium_8.0.30-70_amd64.deb
    sha:b8008f710d1e7a1b7c28d9b4959c93fc560e7743
  • alt-php80-tidy_8.0.30-70_amd64.deb
    sha:8d486f847eb3be96ffd16094299aa0f36924f29b
  • alt-php80-xml_8.0.30-70_amd64.deb
    sha:cf3ce64a785717f975a2e5a7a9c71c52e3d2236a
  • alt-php80_8.0.30-70_arm64.deb
    sha:3172e4b80b4ba0f31db01a44d81f69db01267a8e
  • alt-php80-bcmath_8.0.30-70_arm64.deb
    sha:5044975d605a67fb745d6e10db167174aeb85f11
  • alt-php80-cli_8.0.30-70_arm64.deb
    sha:2f9be494a0e3e88bcc1a5cafe9d7d5d5774183fb
  • alt-php80-common_8.0.30-70_arm64.deb
    sha:51233b62751848c51a24ec56c9fa5301191204d6
  • alt-php80-dba_8.0.30-70_arm64.deb
    sha:ed388eb6edfa4b98d241e989f5ab9ec02aa06668
  • alt-php80-dev_8.0.30-70_arm64.deb
    sha:a63d1343c952239a3febbe8a4a887e3f152ce878
  • alt-php80-enchant_8.0.30-70_arm64.deb
    sha:0dfc3e301a1627fcf5cea8ee79577e767173233a
  • alt-php80-firebird_8.0.30-70_arm64.deb
    sha:996136ab2bb72b216d08d2cf5eab12fa14832981
  • alt-php80-gd_8.0.30-70_arm64.deb
    sha:3fc7ab757715c6599ae41c47b9a66f67a7633893
  • alt-php80-imap_8.0.30-70_arm64.deb
    sha:6d2e2da93ac098d9b69ccc34e05e278f7d57ed15
  • alt-php80-intl_8.0.30-70_arm64.deb
    sha:74084224300669ad10898bba368693596e7b804b
  • alt-php80-ldap_8.0.30-70_arm64.deb
    sha:695ccda4b5e4af8004133fcae8e1eb416cbfe794
  • alt-php80-mbstring_8.0.30-70_arm64.deb
    sha:96f842e58fcfbcf2274c256eb1744d9433f9ada6
  • alt-php80-mysqlnd_8.0.30-70_arm64.deb
    sha:44a25462c8c8f992e46731223c0aa97c9c8d0cc6
  • alt-php80-odbc_8.0.30-70_arm64.deb
    sha:a9492153abbdcca2daad160fb86210e8e1f8c046
  • alt-php80-opcache_8.0.30-70_arm64.deb
    sha:d0fa3560c2f33cdf14c00429d34235ba98f6f7b9
  • alt-php80-pdo_8.0.30-70_arm64.deb
    sha:c1ee27d36dcbdce1503d168c6b84101cc2c8db62
  • alt-php80-pgsql_8.0.30-70_arm64.deb
    sha:78763f4526237671e527597a391b252631dc13a1
  • alt-php80-php-fpm_8.0.30-70_arm64.deb
    sha:7b7b712c7a7200cd784362baa0acea1421ec6b6b
  • alt-php80-process_8.0.30-70_arm64.deb
    sha:29562e670b2ac1c4d4dcd3fcdbd0c955e6037241
  • alt-php80-pspell_8.0.30-70_arm64.deb
    sha:79ec4ec6d115233444221aa5d15789d851cae003
  • alt-php80-snmp_8.0.30-70_arm64.deb
    sha:60364ee1af1f9fce87c0cf23d5d18a6e0ff34c92
  • alt-php80-soap_8.0.30-70_arm64.deb
    sha:5dfa0c99b7063ff50960bcc54f1214adf2e532f4
  • alt-php80-sodium_8.0.30-70_arm64.deb
    sha:a39f0bc819ab4c763a56017db0f0d59e95eb7b76
  • alt-php80-tidy_8.0.30-70_arm64.deb
    sha:a13867b8b84a10cc24684bca5a88624fe999d370
  • alt-php80-xml_8.0.30-70_arm64.deb
    sha:45ea5d6d6441acfda0358c7743e2cb037ac3dcaa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.