[CLSA-2026:1792629741] alt-php71: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:42:34 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
Updated packages:
  • alt-php71-7.1.33-114.el9.x86_64.rpm
    sha:706cb5c5d115e9301da31131837c51bc591003b2c368dbdafe6559112827b42e
  • alt-php71-bcmath-7.1.33-114.el9.x86_64.rpm
    sha:5b223e7e24c7a07e91f725727108bb573a337b5c3304e5f8928bab2bbc6a7270
  • alt-php71-cli-7.1.33-114.el9.x86_64.rpm
    sha:76fd6bb22e8ac7ed09d9ff8e6efb39ee6f9c42a11518694fd9ec81850de31635
  • alt-php71-common-7.1.33-114.el9.x86_64.rpm
    sha:5e47e37b3162c58f2b59edf3baee0f5dda65accfb77d3ca28e44a0259eed6f90
  • alt-php71-dba-7.1.33-114.el9.x86_64.rpm
    sha:ee26b71efb148dea65f7090edec59fdb4a076b363f8f3881bfddba07e9ba7ce5
  • alt-php71-devel-7.1.33-114.el9.x86_64.rpm
    sha:a36c74cdbddf3f51e5f5d31d03654c86b630eed67652db8822cc298dda2bb8b0
  • alt-php71-enchant-7.1.33-114.el9.x86_64.rpm
    sha:dacb6c7166cb44cc34209e21474b3d55441fd8d1e97819d860c13a443d376a31
  • alt-php71-firebird-7.1.33-114.el9.x86_64.rpm
    sha:3b17ca5720d8707fd5446fd1ded75e236698b62a25e5c3c4ab034096d154775f
  • alt-php71-gd-7.1.33-114.el9.x86_64.rpm
    sha:f65905906a6ac1e2786f4b5844b5a7ea9e20dbfa8b1c61f0c36354eb8928982b
  • alt-php71-imap-7.1.33-114.el9.x86_64.rpm
    sha:af25535e974fc6fee0d2ca365bf6807b7dd6641123e8969f1a1e14a71e8c9726
  • alt-php71-intl-7.1.33-114.el9.x86_64.rpm
    sha:ae201f9e88da5138d1ce639bffd963ce9e00a8dbe3e3433ede39d36e4458f68c
  • alt-php71-ldap-7.1.33-114.el9.x86_64.rpm
    sha:219d874af61926437667cba1c1892d369fe70c39193f1410499634ff01bc5e64
  • alt-php71-mbstring-7.1.33-114.el9.x86_64.rpm
    sha:908bea15c4c1d285b85cbadbc8294484debb0efe0a998537f7ab0d4935b920a8
  • alt-php71-mcrypt-7.1.33-114.el9.x86_64.rpm
    sha:0af3464c5e55e14ccb61be8d7e70c00fc293b2396dd2cb31b33b5613b5b1c205
  • alt-php71-mysqlnd-7.1.33-114.el9.x86_64.rpm
    sha:70c6757fe1f6420c42289b96cc2a95a7aa80fa01c82e81fa755109d949537347
  • alt-php71-odbc-7.1.33-114.el9.x86_64.rpm
    sha:6c58c34847476c9133f6b51f9a31e09cd87b2e46e54420a87f1fb02585bd8eed
  • alt-php71-opcache-7.1.33-114.el9.x86_64.rpm
    sha:f46f167f072b460816cfd383d0ad1e39b0f17258fb76c9a6c589ebb9ade51648
  • alt-php71-pdo-7.1.33-114.el9.x86_64.rpm
    sha:38ead818a5679b4c20cfed00495128021de2ed372bcc65e7411af0931b950b32
  • alt-php71-pgsql-7.1.33-114.el9.x86_64.rpm
    sha:41f82fd8d5e00a1ef622a4449eb3693cac9656ffffc9844eb376b3d7649b2d23
  • alt-php71-php-fpm-7.1.33-114.el9.x86_64.rpm
    sha:bf727214841e686be29ef701eb417db9791e826cdba64f6c48243dd340623da7
  • alt-php71-process-7.1.33-114.el9.x86_64.rpm
    sha:f881aeed4d768bd4e04bd13b6dbfe7a50b74da1ef9d9e33bf0f66e8a7a47460e
  • alt-php71-pspell-7.1.33-114.el9.x86_64.rpm
    sha:dcee0500b7846c758cab6d1412d4c17602e8413c5fdd42aa66475677799e16c7
  • alt-php71-recode-7.1.33-114.el9.x86_64.rpm
    sha:0bedc8b72c371ebabbeaec127b806146df03799166738560b14621c559e97a2a
  • alt-php71-snmp-7.1.33-114.el9.x86_64.rpm
    sha:1366de9f86552745141fe59e983c4ffc6c7caf4295b4147ad781f80893a49c8c
  • alt-php71-soap-7.1.33-114.el9.x86_64.rpm
    sha:2f0b339ddb46d75ec1f0db76224fbd0f917f200cbcc72d000531971c6918af60
  • alt-php71-tidy-7.1.33-114.el9.x86_64.rpm
    sha:076e9dfe07aed1e0ee1c8c18364d649dc66638d38a28a1ee773c8f4ccc5a6b3d
  • alt-php71-xml-7.1.33-114.el9.x86_64.rpm
    sha:6b18faf659b09af75f330edcc84fc728c2c23a5dee83500be1f86da544a56579
  • alt-php71-xmlrpc-7.1.33-114.el9.x86_64.rpm
    sha:20dd1e2aa965e1aadb2f97d45e0f5598c6a693289f25ba2f53094002ef4b7283
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.