[CLSA-2026:1792624072] alt-php83: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:08:03 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 3c832b52 (PHP 8.3 branch)
Updated packages:
  • alt-php83-8.3.35-6.el9.x86_64.rpm
    sha:b3ea493a909e626538136249878d68d694bd02d8a12e469c09ba061ad418b06b
  • alt-php83-bcmath-8.3.35-6.el9.x86_64.rpm
    sha:a3c037ee9ac45f367fa2b895397696c1d1f14a6f9c32ff3de5418b2c54372799
  • alt-php83-cli-8.3.35-6.el9.x86_64.rpm
    sha:9badba4407550c9d61ca25f93676177daa93721114c8d4c55dcb23cd63eeb02b
  • alt-php83-common-8.3.35-6.el9.x86_64.rpm
    sha:9aaadd7f6b4f05e38e182a70dd3e46e17d36d8d39166206dec3fedee0474a1ef
  • alt-php83-dba-8.3.35-6.el9.x86_64.rpm
    sha:9b1955113f0f13c5eb9603fd821a44b1ac5426be1b12de05a43f3311d8d282f8
  • alt-php83-devel-8.3.35-6.el9.x86_64.rpm
    sha:434c4a1d421f23a24e21119a6a5224d25c138056dba0b6a5ded06869ce5ddb02
  • alt-php83-enchant-8.3.35-6.el9.x86_64.rpm
    sha:b5102af3a767125345e2e4de94c9fb4311213773ba3b8297de990fbdb53ebcc8
  • alt-php83-firebird-8.3.35-6.el9.x86_64.rpm
    sha:b7199bfb9284752746dc32a41e3f549b6ab53d9521a9d5924d4a4991168ed999
  • alt-php83-gd-8.3.35-6.el9.x86_64.rpm
    sha:812ea28c06ef58c9dda27ca567a32bc9067446350864610c7d2c90fee787e675
  • alt-php83-gmp-8.3.35-6.el9.x86_64.rpm
    sha:e395c02fcc8c02376c4489cffe033cff0756f7e6d1887ffe8d0cac6a4f69b3ea
  • alt-php83-imap-8.3.35-6.el9.x86_64.rpm
    sha:636475304d3a7b7cf72973fe22af0a12375bae84780e8d0aa0a3c9e108109138
  • alt-php83-intl-8.3.35-6.el9.x86_64.rpm
    sha:4b7417365bd04f657013a17ddbff8526172e47eac64f343be7d0291acccb9ea0
  • alt-php83-ldap-8.3.35-6.el9.x86_64.rpm
    sha:72285bcb77e5a0872d9f209403543a0b214b145754dcc6d6e2d5505aa73940c6
  • alt-php83-mbstring-8.3.35-6.el9.x86_64.rpm
    sha:e7b993bdec844da9e35363a6f6d8ea73a2045a325542770989c47243d32b996f
  • alt-php83-mysqlnd-8.3.35-6.el9.x86_64.rpm
    sha:8e965d6975f75bba34475329db1ec541ca49f6ae5bde7a0545a1d0da208f45b4
  • alt-php83-odbc-8.3.35-6.el9.x86_64.rpm
    sha:2da5a0c411fa92e98ff00be5c5f1b8b4cb3cca1783d138fedbe0d8488504f544
  • alt-php83-opcache-8.3.35-6.el9.x86_64.rpm
    sha:c19fa8cc7b8661b9ef82a23bdeb2d3f94f8e95f3b5e53ecd39ecb73435d4374b
  • alt-php83-pdo-8.3.35-6.el9.x86_64.rpm
    sha:7e468cb6b308d904f217e86cd4da02d5b4cd91a191d187c1516371cdce0a0190
  • alt-php83-pgsql-8.3.35-6.el9.x86_64.rpm
    sha:3dd4e449d418985d25a068712fdc5482edaa7a2c3ec40602b236af0202952d66
  • alt-php83-php-fpm-8.3.35-6.el9.x86_64.rpm
    sha:07167482b445cc4136f93b4fc41c4a39d0508f0b01eb88d56944705a9cbbce20
  • alt-php83-process-8.3.35-6.el9.x86_64.rpm
    sha:100905226ddafcc80c318a4996fc5f51069671a7e80379706fc4f399de2855f1
  • alt-php83-pspell-8.3.35-6.el9.x86_64.rpm
    sha:cf0a55ad548b4c4330cdd4c419bbc4e4b5c61e26fd663bc0007479f204bb9dc4
  • alt-php83-snmp-8.3.35-6.el9.x86_64.rpm
    sha:01357e8688b977153c15f2c16648574950be0880d2f385c14fb5b32041ef9554
  • alt-php83-soap-8.3.35-6.el9.x86_64.rpm
    sha:4591af82f4200bc448e541f977cdd780d73d9287fb1d29bb13e5a2e1afccb5da
  • alt-php83-sodium-8.3.35-6.el9.x86_64.rpm
    sha:10ad4e90ed0edd08d30f9baff34e8290a94d1edd19cc0415f489d541dfa93608
  • alt-php83-tidy-8.3.35-6.el9.x86_64.rpm
    sha:2ca88541f2c5c11a4e406a45143fec97809bcb565b12aac0c20fd4cadb8b61d1
  • alt-php83-xml-8.3.35-6.el9.x86_64.rpm
    sha:02514b0270c2fd0472ba0527303f43f4914f27eee61e9ad1dfe207937c1a4d2c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.