[CLSA-2026:1792627521] alt-php73: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:05:33 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php73-7.3.33-82.el8.x86_64.rpm
    sha:2189a220199aebecf9dffbefde078d5e7298f859b3f944b00b5d49aa335fc061
  • alt-php73-bcmath-7.3.33-82.el8.x86_64.rpm
    sha:02ef326019722ffa401780e49466913aea5542c4acc45cfdd7a2bd240619ff49
  • alt-php73-cli-7.3.33-82.el8.x86_64.rpm
    sha:2d0c016fcd2aa6558aa8a41f11d074bba9a831e2184e31b757636291de280a51
  • alt-php73-common-7.3.33-82.el8.x86_64.rpm
    sha:dab5a663064e25e3539a5f8566cc71b3640fbd8e794860271fd9f45d637e9d22
  • alt-php73-dba-7.3.33-82.el8.x86_64.rpm
    sha:c3cf51510a1b7eca0a5cb850b5d6570d311c18001d712a14d6af15421c0d39a5
  • alt-php73-devel-7.3.33-82.el8.x86_64.rpm
    sha:0a9fdc006e4e6afdf889e11676cea486cf5818f956e3176c185cf69bab8f5c08
  • alt-php73-enchant-7.3.33-82.el8.x86_64.rpm
    sha:6b81e75ce88e69b1278713b4d8e2985df26480c393265e53df8c4cd94064e6b0
  • alt-php73-firebird-7.3.33-82.el8.x86_64.rpm
    sha:5fe3316d1f00bef8a84afe809b25bafb02d858d000cd3b3cf0fc121fc531f072
  • alt-php73-gd-7.3.33-82.el8.x86_64.rpm
    sha:ca05ac0cfadbccb31fb437145bd933470230f649449082fcf47072ed516abd2e
  • alt-php73-imap-7.3.33-82.el8.x86_64.rpm
    sha:8f0095c0e3a098e3c4225a4ae4c4ad8056643709f37361cbe4bb2f4fc8dd1814
  • alt-php73-intl-7.3.33-82.el8.x86_64.rpm
    sha:41567e124c81f67b0c2b767cba337e1c5929bbb1404bca4d128aa976775f6bcc
  • alt-php73-ldap-7.3.33-82.el8.x86_64.rpm
    sha:38d1bbb41360fe00ba6b51aaa420e95e128586c124f30ec24d3b0da91cdad6fe
  • alt-php73-mbstring-7.3.33-82.el8.x86_64.rpm
    sha:99cdf3d19871512436dab7a37c39179455d8da69f3820b3e7d91e4344026db86
  • alt-php73-mysqlnd-7.3.33-82.el8.x86_64.rpm
    sha:ce82d4307fc72f56731c6c4a0c411266ef9b5dc8e0c3d8b05406753c06446981
  • alt-php73-odbc-7.3.33-82.el8.x86_64.rpm
    sha:9457e162691625009a0876e91ea93002d716ebe7d9413a9f3f78b13626b28100
  • alt-php73-opcache-7.3.33-82.el8.x86_64.rpm
    sha:a6af474d083d2217a4bb9bdf6c25f3c5fa0632fb60866e62aaf98a450230694f
  • alt-php73-pdo-7.3.33-82.el8.x86_64.rpm
    sha:afd91dab92fbff4a464b82a3df38e90624b0038564ae1451cb9fb8eb380bb547
  • alt-php73-pgsql-7.3.33-82.el8.x86_64.rpm
    sha:336ef20a9ceb95e6c618db3a50872229ae5c7b41c74de600a5380b3fc5fe61c9
  • alt-php73-php-fpm-7.3.33-82.el8.x86_64.rpm
    sha:1f05a3bb4186813a3ea5c350ae22991d1626a6057cdb7b3bfc15ab8488f2b488
  • alt-php73-process-7.3.33-82.el8.x86_64.rpm
    sha:9ef3173ec8b92e23860c6080435618e11464abe835c1d6c1f54e41b5f1f2ba15
  • alt-php73-pspell-7.3.33-82.el8.x86_64.rpm
    sha:31b8e9f4229640e8481c56daf6e41406fa1a3ea45b00f4f8c6e22f235837f80a
  • alt-php73-recode-7.3.33-82.el8.x86_64.rpm
    sha:92a81abd3861b451f107e9625cb543e7a7defb0a0a57f4424816c87586f945b5
  • alt-php73-snmp-7.3.33-82.el8.x86_64.rpm
    sha:7d9fd365360f91048e46de522ce1194a896d4aa4d64985fa1feb0b97c27e49ef
  • alt-php73-soap-7.3.33-82.el8.x86_64.rpm
    sha:241ddd93282fce9d314b1263ea1f19a94df007493d2566d9ee6bc3acd7bbf52d
  • alt-php73-sodium-7.3.33-82.el8.x86_64.rpm
    sha:af0832a5072f2e366e368fcf9a95292fede74173c61ce2fbde6d1b6a790e2c03
  • alt-php73-tidy-7.3.33-82.el8.x86_64.rpm
    sha:6325e20b88402a0342ac1fd9512e0ef2df6811cde0a3dfca1b6688e6170619f7
  • alt-php73-xml-7.3.33-82.el8.x86_64.rpm
    sha:f781b467ca0cd1fb9e78c0b33df6c85d2ea18b5da73515671c6d089d37784328
  • alt-php73-xmlrpc-7.3.33-82.el8.x86_64.rpm
    sha:221159422d6efb5e40129ebc73e6ffa3542c6b9fb20f10dcdd137ec96e0509da
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.