[CLSA-2026:1792625565] alt-php82: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:32:57 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 01a40e89 (PHP 8.2 branch)
Updated packages:
  • alt-php82-8.2.34-7.el6.x86_64.rpm
    sha:125dbf875c8b6f36738cb4755b6c5362c9a6636d5195ef94b3fe1bd5320e84ad
  • alt-php82-bcmath-8.2.34-7.el6.x86_64.rpm
    sha:cd891c30428db2c199b5bffda2ce3a2f55001eda04ec12e6bade1ca7996fbadb
  • alt-php82-cli-8.2.34-7.el6.x86_64.rpm
    sha:c8326cc600358687119ce64a140e5eb39ec202cc91bd8c85d0f7d343ddde1266
  • alt-php82-common-8.2.34-7.el6.x86_64.rpm
    sha:a093012808c5d791b8a5466baa01a13a22ecf6ba48cd51ebf3a065dcfcf38192
  • alt-php82-dba-8.2.34-7.el6.x86_64.rpm
    sha:5f0c54ec35be9240080cda445c0cba9d4db0dc54fb50a3dbefd7359cd32c33c2
  • alt-php82-devel-8.2.34-7.el6.x86_64.rpm
    sha:ee6edd123eb0735f688830f1aaa84490835a707c2986dd79ebe0a133dc147338
  • alt-php82-enchant-8.2.34-7.el6.x86_64.rpm
    sha:e57f0b4d7e95009685d5414291f7385939d22d9a009c8002ad4d72ce288b1d5d
  • alt-php82-firebird-8.2.34-7.el6.x86_64.rpm
    sha:20b92003aed819d797f304bfa97a219dc1a3bc13c9235bbda431c23c5e1db85d
  • alt-php82-gd-8.2.34-7.el6.x86_64.rpm
    sha:723b6017fdd77cb9e0078501822d1038078e2a6d2c4f1b90ac789c3ad0e57ab4
  • alt-php82-gmp-8.2.34-7.el6.x86_64.rpm
    sha:9911a10c472acbc3fe82b3b02cd6b2001d0eff659834907822802e253265ce57
  • alt-php82-imap-8.2.34-7.el6.x86_64.rpm
    sha:2831a12d634446a1fc78e75fcba8633cf6fcbdc778c4dca64e9c246fad74ec5a
  • alt-php82-intl-8.2.34-7.el6.x86_64.rpm
    sha:97aad6177ec915fdd2aa8b3050028b476a767f878ecf23b6a2719097518499ab
  • alt-php82-ldap-8.2.34-7.el6.x86_64.rpm
    sha:9a865a280edc56da9ab0b9d5b2c4d1d2bb45bf906e6d622574763f68f96eba40
  • alt-php82-mbstring-8.2.34-7.el6.x86_64.rpm
    sha:b56b910e90517013a30f50696cbc0fcdc79ed77fc88b190b2423334f1bef976a
  • alt-php82-mysqlnd-8.2.34-7.el6.x86_64.rpm
    sha:f3b05978ca0ad15c7e8cea11c84c43f5538fbc0c7fdbbb62fd6d0430db457b61
  • alt-php82-odbc-8.2.34-7.el6.x86_64.rpm
    sha:1d30f0e514c64b1515969b9a07a06876408b86b2da8074c60fac4855e6d566d5
  • alt-php82-opcache-8.2.34-7.el6.x86_64.rpm
    sha:8cccf5442cba62b72179d592c803844a2f802429bde316de9567d785373de1b2
  • alt-php82-pdo-8.2.34-7.el6.x86_64.rpm
    sha:6025e3ddf3849f0f23e8e2e712143a8b472fd8ca8d6bac3a45cb47ef20f9c186
  • alt-php82-pgsql-8.2.34-7.el6.x86_64.rpm
    sha:c362878d642545b2e1b90ec3d57460fc736e9ca41df5725f3e9fa1b3eb79d411
  • alt-php82-php-fpm-8.2.34-7.el6.x86_64.rpm
    sha:8cf0e9912b623a96582dd42419ec8ad3d781b5e498b9479004df936c0bbc2c09
  • alt-php82-process-8.2.34-7.el6.x86_64.rpm
    sha:0a45bb5a18bb79f133e28dbbe9f147628c3eb8d08569d35c7e3f8d4643c0c047
  • alt-php82-pspell-8.2.34-7.el6.x86_64.rpm
    sha:5863fe7692a7010ef349f57754e1bc601b413575194947dacd5cd63762ec30e5
  • alt-php82-snmp-8.2.34-7.el6.x86_64.rpm
    sha:5b7a7f42915fd6441535c9b2ce1bdd432e2a8dff8c75f9321447a4cba74fb2e1
  • alt-php82-soap-8.2.34-7.el6.x86_64.rpm
    sha:c986e89c7304c38f48451cc20fbb7364c7cd7ab9aaa286dd514d8e85115a37b4
  • alt-php82-sodium-8.2.34-7.el6.x86_64.rpm
    sha:9fc750f6c0cec20da0344fce8b8efaa51be91a39246d7fbd7b5422ede135d4ae
  • alt-php82-tidy-8.2.34-7.el6.x86_64.rpm
    sha:2525ba26ff2d539ef526841a27835aba921ca1a1f4fa17c87bc603c9daf9b965
  • alt-php82-xml-8.2.34-7.el6.x86_64.rpm
    sha:00e63f9f0b02606dd2e06fd69692e5b53700c3a7fb4b46c0eabb133668bb7389
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.