[CLSA-2026:1792625801] alt-php82: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:36:54 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 01a40e89 (PHP 8.2 branch)
Updated packages:
  • alt-php82-8.2.34-7.el9.x86_64.rpm
    sha:e030a27c4ad5e31ad6d9a526f0be4a6bdada1d7a30bd1c49a5b5c7d34232a312
  • alt-php82-bcmath-8.2.34-7.el9.x86_64.rpm
    sha:1c89210c547a03627eca8deb1e3de007e6faaf0c576e6ff9fb864d9b720119ee
  • alt-php82-cli-8.2.34-7.el9.x86_64.rpm
    sha:0d9e9031e26ff87a3c063391b934e9a8f03d21c5a956048c6f007f679da014b6
  • alt-php82-common-8.2.34-7.el9.x86_64.rpm
    sha:df5f1aa62c2f75f517c587176efa35a2e733904173d62cc525a46afa6aa0c4aa
  • alt-php82-dba-8.2.34-7.el9.x86_64.rpm
    sha:7b2c9a0094f25dad54eda0e59fe0152a8ac2edc058ad4af37a3cf84f3caca958
  • alt-php82-devel-8.2.34-7.el9.x86_64.rpm
    sha:d946bc25cc41a4c09d2e3d879161891f6bdc228f4a7b22614e1ad977c4c97d99
  • alt-php82-enchant-8.2.34-7.el9.x86_64.rpm
    sha:b73651c12f083143c20a2366c77dd2a3dffcd2b50a202dc33ae6c456cb0c20ec
  • alt-php82-firebird-8.2.34-7.el9.x86_64.rpm
    sha:41f0a8bac2c9b844b7caef88c3782c04088a23c08ea43d513fabd0c9dc8c03b8
  • alt-php82-gd-8.2.34-7.el9.x86_64.rpm
    sha:820fe0cf58ec3cc43c05952353dcd9a43ada96dfbd869c143282fea1ff083902
  • alt-php82-gmp-8.2.34-7.el9.x86_64.rpm
    sha:812e6d6c86c8545cce9a96d5152f4a2ce1bb1799a77b5390a832628f2cc289b7
  • alt-php82-imap-8.2.34-7.el9.x86_64.rpm
    sha:8fccb14da451a31898ea353962ce746d4f75aaf2f04776427e7444656f1b64d4
  • alt-php82-intl-8.2.34-7.el9.x86_64.rpm
    sha:e6180be5aad7aa7100e74218eb1086edfd7e9af7a7f6cd8461cc33c14419cac9
  • alt-php82-ldap-8.2.34-7.el9.x86_64.rpm
    sha:c68f00194e0305a83315565d45ceeea4f99e338285dbf452e97e5712ef1fbdd9
  • alt-php82-mbstring-8.2.34-7.el9.x86_64.rpm
    sha:b20ff5a7d8c4a61821135dc4d9d10a090da325589713527dbb8c241ad06188af
  • alt-php82-mysqlnd-8.2.34-7.el9.x86_64.rpm
    sha:b7b997a362ed49ccfc8a735c504eb863c288a9d7d1c51840b8ae2a3e99b08b03
  • alt-php82-odbc-8.2.34-7.el9.x86_64.rpm
    sha:9a34255a42fc4e1b106f167f55cff2306e478c229cbb5505cb66888026949817
  • alt-php82-opcache-8.2.34-7.el9.x86_64.rpm
    sha:6a8560188c198c73457cea8e33831fea394974eda907b0788e67d84e16abd75a
  • alt-php82-pdo-8.2.34-7.el9.x86_64.rpm
    sha:46c41cf00d31260a587634198c32f8bdd8521293b1329857298de2cf2357fb6a
  • alt-php82-pgsql-8.2.34-7.el9.x86_64.rpm
    sha:8d360ae4feb4cf67d248d7db374be08ab5d4fdfb78eef5c2004149743c118907
  • alt-php82-php-fpm-8.2.34-7.el9.x86_64.rpm
    sha:430da940ce88513d693fa8726ffdc72b3661a5b6511de61fce92480c342570be
  • alt-php82-process-8.2.34-7.el9.x86_64.rpm
    sha:72d1aae91591667ee0cdff22d398976c619f8a6fa39d8be153809d718e0bb8da
  • alt-php82-pspell-8.2.34-7.el9.x86_64.rpm
    sha:b783410a272ff47b7cd4cd4f5c6b6b6208964f9be4320eb915b567df0fbac34d
  • alt-php82-snmp-8.2.34-7.el9.x86_64.rpm
    sha:ce47a36b6a6c6bf1927daccf1cde4733d1ffd1d799396cb24e2f24a9cc63fcf1
  • alt-php82-soap-8.2.34-7.el9.x86_64.rpm
    sha:63c651327f114d2d8c4135d51a4190e4c356adde1a88c1c379cad7a194d60ef1
  • alt-php82-sodium-8.2.34-7.el9.x86_64.rpm
    sha:c62cbbfe21e205b283b796044674039ca014e2e4dc28c2f0fb11d5fbd0593b74
  • alt-php82-tidy-8.2.34-7.el9.x86_64.rpm
    sha:abc00df4b2a5024a131545ce83a7a8ef61c0ec77ddaafc36e74a0c844d2fac3e
  • alt-php82-xml-8.2.34-7.el9.x86_64.rpm
    sha:2a2cf3bc614700525c7991c52b427695a9c22f7fb795f138d38c97458f885c55
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.