[CLSA-2026:1792604252] alt-php80: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 17:37:42 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 82f8f31b (PHP 8.0 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php80-8.0.30-69.el8.x86_64.rpm
    sha:5a74eb432d1b906cf38d819c80c4ff734340ca67bce990c4564f9543fab3755c
  • alt-php80-bcmath-8.0.30-69.el8.x86_64.rpm
    sha:376af24de7924363b9607bcd4189727dd8eaafb28c9d2fdec3e42ff2a3c2b21b
  • alt-php80-cli-8.0.30-69.el8.x86_64.rpm
    sha:2500a856392aabd7c7fcd8e5c92f3a6dc4a58a464fd5388a8c038f4fc72f390d
  • alt-php80-common-8.0.30-69.el8.x86_64.rpm
    sha:0afa63b4bca7894a337a82d438b377cca920c8eef3c6d29555c277f68da77686
  • alt-php80-dba-8.0.30-69.el8.x86_64.rpm
    sha:0d1b53f3bebd26f56d507d0c7fd58f6f0ab0b89c99b8e6f3d3ac0143c1812277
  • alt-php80-devel-8.0.30-69.el8.x86_64.rpm
    sha:214f9dc7f64e1efff3c96030f97afa087119f1147fc930386ed850a94ed4ba72
  • alt-php80-enchant-8.0.30-69.el8.x86_64.rpm
    sha:d3a03e01b09d58898fc4085736fb7d4942c799aae1c98b4287be6f7651918482
  • alt-php80-firebird-8.0.30-69.el8.x86_64.rpm
    sha:a87890e26b1dc5d81f36c2d2abb351acd1db2d2beee4a16eb3aeda7998775ba3
  • alt-php80-gd-8.0.30-69.el8.x86_64.rpm
    sha:f13e52b5908fc79f040983d3a68666f5f397020f370a9efad03290c0932f3a27
  • alt-php80-imap-8.0.30-69.el8.x86_64.rpm
    sha:3b82c9b525c28daa697b8ae88fcfb6fe33a1a985f29e78abd0730fe104ae54e6
  • alt-php80-intl-8.0.30-69.el8.x86_64.rpm
    sha:101a04196aeb8c7979d2dfd99b43fcff1fa94d6ff8aa5a27164fa66375c76f26
  • alt-php80-ldap-8.0.30-69.el8.x86_64.rpm
    sha:896d74ed3fec6978d6082038870dd979325eb08bdda6eeba0a62a099e60e256d
  • alt-php80-mbstring-8.0.30-69.el8.x86_64.rpm
    sha:a63d4e288f353ee8ac00dca58d9dcc92bcedc2404a02d5bae72d97bddb0f7145
  • alt-php80-mysqlnd-8.0.30-69.el8.x86_64.rpm
    sha:170a2d4d8409effb32561a8fe44300ef1091df6afbd45eabf73fe364b39eda9a
  • alt-php80-odbc-8.0.30-69.el8.x86_64.rpm
    sha:d367e9cf5bb4d281fef6b8a4eda95ff7ab62415a14cf7e3a0ea1d39a6d47c81f
  • alt-php80-opcache-8.0.30-69.el8.x86_64.rpm
    sha:ee443591849c8f5923925278931ac8636a97465930f0132e65e3461e7c4043a1
  • alt-php80-pdo-8.0.30-69.el8.x86_64.rpm
    sha:1252ec2323e28dd0359711ef6c70d5967e1da3cd2361dc5c5e191b12c07be6af
  • alt-php80-pgsql-8.0.30-69.el8.x86_64.rpm
    sha:0d9ec1917da4280c157d5aab723f192ff9e427ddc97f8964880e6c86bae82c4f
  • alt-php80-php-fpm-8.0.30-69.el8.x86_64.rpm
    sha:b32a0fcbfe64261dafc9e9d75dc4a5e9c7b3fecaf2646a051b4b4f2c5984b481
  • alt-php80-process-8.0.30-69.el8.x86_64.rpm
    sha:9881095a9a896f112290d70c8b56cf04bebbcfd6fd232ba9a348850ae30f547c
  • alt-php80-pspell-8.0.30-69.el8.x86_64.rpm
    sha:94207cdbd23bd0d038f1fa5197311d7a2e97f5e8838f852eacf413b7977d5948
  • alt-php80-snmp-8.0.30-69.el8.x86_64.rpm
    sha:0b252e68309c445d93b57c28ffea9c4375994ffdaded5216c2dc6c3502be5fbf
  • alt-php80-soap-8.0.30-69.el8.x86_64.rpm
    sha:915de68fc42d54c5a56ac2caa2898cbff6ba58f863be7889ca78301085cc2ee3
  • alt-php80-sodium-8.0.30-69.el8.x86_64.rpm
    sha:ee0b7477f8a1a0221c2a101077ead2e74a67c466de5b807a975aa425441b4a66
  • alt-php80-tidy-8.0.30-69.el8.x86_64.rpm
    sha:fa6bd2432be7713f57acb796dabcd9b1c5319ffa81720807fb7cc80e0b6eb175
  • alt-php80-xml-8.0.30-69.el8.x86_64.rpm
    sha:d873db955b109b7e358f03ba963054f1f3eb17b3818630c464da0aeeb6a3baf7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.