Release date:
2026-10-22 09:23:23 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator, the multipart
request parser and the session upload-progress path
- debian/patches/php-8.2-CVE-2026-109618-109619.patch: report
allocation failures without re-entering the engine from the allocator
error path, and take substring_conf()'s length as size_t rather
than int, and restrict the session upload-progress handler so it no
longer runs user code while it decodes and re-encodes the session
mid-request (in_rfc1867_update, incomplete-classes-only serialization,
a modules_activated guard and a _SESSION cleanup); upstream 01a40e89
(PHP 8.2 branch)
- CVE-2026-109618
- CVE-2026-109619
Updated packages:
-
alt-php82_8.2.34-6_amd64.deb
sha:2e9132496a66ad1bb633e88c4614725d2b9a5cd1
-
alt-php82-bcmath_8.2.34-6_amd64.deb
sha:b5a37117d6c52554bff8b1624e6f33529e10e79c
-
alt-php82-cli_8.2.34-6_amd64.deb
sha:f137dea36269a7ee093bfa731ac26e30ef5d120e
-
alt-php82-common_8.2.34-6_amd64.deb
sha:500037796211d9105fcca9f519727f2557559f25
-
alt-php82-dba_8.2.34-6_amd64.deb
sha:0a2062356a0ba4e8a84f19f08d8d9e57e7d56587
-
alt-php82-dev_8.2.34-6_amd64.deb
sha:8f7f19444d15fa35fa65121363f031f2c5b67891
-
alt-php82-enchant_8.2.34-6_amd64.deb
sha:b8dfca1bab6f2cb2932a4e51781444bd8619b9f8
-
alt-php82-firebird_8.2.34-6_amd64.deb
sha:0b0c45d678adce3b5001d13aa089ff7eabfe5326
-
alt-php82-gd_8.2.34-6_amd64.deb
sha:515639f174df09440ced9f77198b93963d4705c5
-
alt-php82-imap_8.2.34-6_amd64.deb
sha:1dc523b1751c111c98422a101a9c024e43608e49
-
alt-php82-intl_8.2.34-6_amd64.deb
sha:bcdaf0e96074dfae362f143fb0a363784421642a
-
alt-php82-ldap_8.2.34-6_amd64.deb
sha:0ae14f76236b5afabef982613d3285254667a2cd
-
alt-php82-mbstring_8.2.34-6_amd64.deb
sha:d82c6bbdbbb7cd6a6c2ce11f48388a07b987e448
-
alt-php82-mysqlnd_8.2.34-6_amd64.deb
sha:12ae9221993c9c1da0fc00e47fdf1edf08eeccc1
-
alt-php82-odbc_8.2.34-6_amd64.deb
sha:b2831e81e774a1ddb27d1282dc7ab1a0a3834144
-
alt-php82-opcache_8.2.34-6_amd64.deb
sha:07d620302839d0c9c04b277002419f67fe544f25
-
alt-php82-pdo_8.2.34-6_amd64.deb
sha:6a7d3f316ad6053650307c55854095f92162ead2
-
alt-php82-pgsql_8.2.34-6_amd64.deb
sha:7a8fc4213483cbc0f4298ca8da91ddceb05c62a4
-
alt-php82-php-fpm_8.2.34-6_amd64.deb
sha:05bd442c92e3acb2f7e89a4d9393af071a92d0e1
-
alt-php82-process_8.2.34-6_amd64.deb
sha:840abcc2ae6ca0fa277350811b113bc5cd9cc7ab
-
alt-php82-pspell_8.2.34-6_amd64.deb
sha:e5a7c76400ca7c7f2981766863bda1548d0bff05
-
alt-php82-snmp_8.2.34-6_amd64.deb
sha:7d7280c57546ea3a73c773c8c361867aa91a48fe
-
alt-php82-soap_8.2.34-6_amd64.deb
sha:276e2f1aba25278867470dfd7a90ab1941cdba9b
-
alt-php82-sodium_8.2.34-6_amd64.deb
sha:a9a2583b3d21652c1b59bf2bc8b18acd23c58fd4
-
alt-php82-tidy_8.2.34-6_amd64.deb
sha:5f948be2fd983f7a428dfeffff1d0b26286ad928
-
alt-php82-xml_8.2.34-6_amd64.deb
sha:a1d43348614066d90e0901858a0c5d433550ce0a
-
alt-php82_8.2.34-6_arm64.deb
sha:356cfdfb4bfab4a2bdff71673834b9d4176c15a9
-
alt-php82-bcmath_8.2.34-6_arm64.deb
sha:38631b99c33a9254d64cb33ca8851a27ac66c7c5
-
alt-php82-cli_8.2.34-6_arm64.deb
sha:7455a03052a7f48919dbd280492b9f3b415aed0b
-
alt-php82-common_8.2.34-6_arm64.deb
sha:4d0a8caae2fca062fd603734c4a055ff31792b1a
-
alt-php82-dba_8.2.34-6_arm64.deb
sha:c47604c726c9786aa50a039dd41de55abafd80da
-
alt-php82-dev_8.2.34-6_arm64.deb
sha:45541c7ac975fae1044a8df6c6166ea34fa40361
-
alt-php82-enchant_8.2.34-6_arm64.deb
sha:8c59916f6ecb37c8e21755f47492199b2d717870
-
alt-php82-firebird_8.2.34-6_arm64.deb
sha:8b53345424b4d956357900784cb0e3c8350ccac5
-
alt-php82-gd_8.2.34-6_arm64.deb
sha:f4c1e7615697d4c85bb9f66fa8e8194b36270507
-
alt-php82-imap_8.2.34-6_arm64.deb
sha:e849e0a740aa21eaacff65a9316519ee27a71386
-
alt-php82-intl_8.2.34-6_arm64.deb
sha:b7b03927673fbf7253362342448f85644039fc2a
-
alt-php82-ldap_8.2.34-6_arm64.deb
sha:454b28872dc89ccfed7ab93c6ce2e0534ee02093
-
alt-php82-mbstring_8.2.34-6_arm64.deb
sha:eb620fbe17ce0c6caab5b82cd215ff94990eb49b
-
alt-php82-mysqlnd_8.2.34-6_arm64.deb
sha:c35d690a01dd4a30d9f995d75b87623e5cda48de
-
alt-php82-odbc_8.2.34-6_arm64.deb
sha:091a2fd3e065a5d1b2168830fc6c2fd0fb1f6c4b
-
alt-php82-opcache_8.2.34-6_arm64.deb
sha:c09dd731b69b5fda6615641ea89ca029c21698b2
-
alt-php82-pdo_8.2.34-6_arm64.deb
sha:55ea05d780a0adec8f2b860d0f149a469bf26eb3
-
alt-php82-pgsql_8.2.34-6_arm64.deb
sha:b47a9823ca0651f64cfe6b14401449925880a024
-
alt-php82-php-fpm_8.2.34-6_arm64.deb
sha:c199aa0794d0a766a200fc11a5cd36a9a1336e82
-
alt-php82-process_8.2.34-6_arm64.deb
sha:1134654dfd3d61aadb2b9018000e1a442d935028
-
alt-php82-pspell_8.2.34-6_arm64.deb
sha:ac231edad0efee0f47ce82382a022a3aef734a43
-
alt-php82-snmp_8.2.34-6_arm64.deb
sha:44ec5d20eacd8799221a49848b1d7f2d88fd1e65
-
alt-php82-soap_8.2.34-6_arm64.deb
sha:576da2a29918df961ca1746061c3843357e3d7f5
-
alt-php82-sodium_8.2.34-6_arm64.deb
sha:986afc66dcd4f49756564c4fe297c788fd4c9283
-
alt-php82-tidy_8.2.34-6_arm64.deb
sha:3c8115ab4d80a81256193988023366b2c6376bcb
-
alt-php82-xml_8.2.34-6_arm64.deb
sha:ad5d56be123c6b77eb7e9124df2defd649335f3d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
