[CLSA-2026:1792673596] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 12:53:28 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php73_7.3.33-84_amd64.deb
    sha:fd0726aa226f2010dfc95b61ef1957e10b79a22f
  • alt-php73-bcmath_7.3.33-84_amd64.deb
    sha:1021fdadf916bf8f10fe8faf391deb0201f1c5f5
  • alt-php73-cli_7.3.33-84_amd64.deb
    sha:c38faffa474e6fcccf4549df2aa0065adecfdcd4
  • alt-php73-common_7.3.33-84_amd64.deb
    sha:b90781d271128424301cd1a42d1f7fca291c16fb
  • alt-php73-dba_7.3.33-84_amd64.deb
    sha:562c8273a6d4a624151e40cf041e5bc62185265c
  • alt-php73-dev_7.3.33-84_amd64.deb
    sha:df49669251a7df8726b1df5ce00bec824c2848cb
  • alt-php73-enchant_7.3.33-84_amd64.deb
    sha:21658c8d4617fe988faae8a0ffa4fb822c5403a5
  • alt-php73-firebird_7.3.33-84_amd64.deb
    sha:ca1f697da58cfc6890a05bfc352de8817f6c89c3
  • alt-php73-gd_7.3.33-84_amd64.deb
    sha:7a1bd84a6a287a690c24d4c07e8658fc4c2ecb5e
  • alt-php73-imap_7.3.33-84_amd64.deb
    sha:4ed400652b84c71db7bbc101f51cf9b14e613e92
  • alt-php73-intl_7.3.33-84_amd64.deb
    sha:19372c43d4f25cfb0602aac25524567a82a52f33
  • alt-php73-ldap_7.3.33-84_amd64.deb
    sha:d715db5a347cb7f58c1c4fa3211b0a4d4c54b380
  • alt-php73-mbstring_7.3.33-84_amd64.deb
    sha:7bb91607d6432ebf9282de6244623c068bb2efab
  • alt-php73-mysqlnd_7.3.33-84_amd64.deb
    sha:42abb7e815129d2f2417936d11f9152c37160190
  • alt-php73-odbc_7.3.33-84_amd64.deb
    sha:1a97ecd69ee98bbab09172ee78a933421d71df6c
  • alt-php73-opcache_7.3.33-84_amd64.deb
    sha:72f74ae0f10c485d9b0eb2557c4475437e1cb5fc
  • alt-php73-pdo_7.3.33-84_amd64.deb
    sha:5769d7a4ec8be7de0c0c4af40420cb0d3769e992
  • alt-php73-pgsql_7.3.33-84_amd64.deb
    sha:0f08f2019db7a91f31d8f0cfd7576e63431f9c36
  • alt-php73-php-fpm_7.3.33-84_amd64.deb
    sha:d30e9e087db423e30dc05d91025d2743eaa21f1f
  • alt-php73-process_7.3.33-84_amd64.deb
    sha:b5910b2034354bce036f1069df46951ecf8df45e
  • alt-php73-pspell_7.3.33-84_amd64.deb
    sha:3280c1387e921e017122db3776e78a9fd31a062a
  • alt-php73-recode_7.3.33-84_amd64.deb
    sha:62b3cb4ae2bd73713b0a7ade1d0a2b52dda3de2b
  • alt-php73-snmp_7.3.33-84_amd64.deb
    sha:9675b7cb9102b7abf4188b57594705106c4d547c
  • alt-php73-soap_7.3.33-84_amd64.deb
    sha:bde33ec1b4f27c53db440c225ccb709240347b81
  • alt-php73-sodium_7.3.33-84_amd64.deb
    sha:cb94c5e2cb8e415f1c774a07c87bda90ad4a2fca
  • alt-php73-tidy_7.3.33-84_amd64.deb
    sha:5909d31717dd6fb457d2fa59d78195c233754485
  • alt-php73-xml_7.3.33-84_amd64.deb
    sha:f50be6543870d64d054f3889066d05bb77a8ff88
  • alt-php73-xmlrpc_7.3.33-84_amd64.deb
    sha:df549d1ac1b2bb8857df570f464d27b3a0a68520
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.