[CLSA-2026:1792626005] alt-php82: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 03:49:00 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 01a40e89 (PHP 8.2 branch)
Updated packages:
  • alt-php82-8.2.34-7.el10.x86_64.rpm
    sha:9661491ebf56542cfb1ffc8f847775f1995214c193bef9d92ff2d1c5f9a58a30
  • alt-php82-bcmath-8.2.34-7.el10.x86_64.rpm
    sha:ed7a1366a434b08f962575207ce7e74b22137ef26afea23d6081a19738c45f81
  • alt-php82-cli-8.2.34-7.el10.x86_64.rpm
    sha:0785d31517e2a6266d58535b3cec0b0282c762a2e6bc42b827f88f1c75b46825
  • alt-php82-common-8.2.34-7.el10.x86_64.rpm
    sha:0ca9d0df45157e16808e8d96dda9a83c8845c9bf454829faf72f55498d3c7029
  • alt-php82-dba-8.2.34-7.el10.x86_64.rpm
    sha:cea4bc2ba88780c0a4a6c527b8e147f9a8ace9b175bddfbe0027fc41367a2f95
  • alt-php82-devel-8.2.34-7.el10.x86_64.rpm
    sha:4a4f2584adf929971a37972fd8fe91332f29d3075298c57b3a84b085286983be
  • alt-php82-enchant-8.2.34-7.el10.x86_64.rpm
    sha:fc6b93a1da73ac37394f084fc8a742ecb5b65b9a1f30262067cd75092ff315df
  • alt-php82-firebird-8.2.34-7.el10.x86_64.rpm
    sha:6ff18d8b3d75151a720bc2ddfd6c9d152a7c5251eb510093cf44f28d22b709b7
  • alt-php82-gd-8.2.34-7.el10.x86_64.rpm
    sha:a2a1978fab9121d95acb099316f6a4109323aa163b3163705a9e0595c642675c
  • alt-php82-gmp-8.2.34-7.el10.x86_64.rpm
    sha:69108cb868cfd337afcbc1921e9447f3880f2f3bdee490fca4fe4fe237a9f483
  • alt-php82-imap-8.2.34-7.el10.x86_64.rpm
    sha:3648fa3ee7364328bf03b872f314a947cf9ec1685f17b57c82fe78102a6e0c22
  • alt-php82-intl-8.2.34-7.el10.x86_64.rpm
    sha:fe4ec6b65a7ca8f900d0e31de5626a264318764ed67c5ca80c624125cf0e1133
  • alt-php82-ldap-8.2.34-7.el10.x86_64.rpm
    sha:a701d3f5c85fc5f4fdc3bd38d9378d3b6e53d3e4645a95d8cea8a46fdabcc5d0
  • alt-php82-mbstring-8.2.34-7.el10.x86_64.rpm
    sha:6bfe9779dbb75a517fdd694c6f258367c14e943ae37c9629e055612e4b162e81
  • alt-php82-mysqlnd-8.2.34-7.el10.x86_64.rpm
    sha:ee8a23f8b050ab914cf3924fa459de0521ffe4e5e5a90c6e19dbbd8d8015244e
  • alt-php82-odbc-8.2.34-7.el10.x86_64.rpm
    sha:7f7c2796bd6b133574ef5ce15aed580bdaddd25c35f78b2e597d5a851c287157
  • alt-php82-opcache-8.2.34-7.el10.x86_64.rpm
    sha:952156c525e2daca200f2355b29c7466302f51ada6d3da79c3b6e4997d5aa1e1
  • alt-php82-pdo-8.2.34-7.el10.x86_64.rpm
    sha:c5407b07eb42b4a3d0e39628734803dc7621a73b902c84c422139ba984ea6969
  • alt-php82-pgsql-8.2.34-7.el10.x86_64.rpm
    sha:2a3480832f7e694bcb6503230e1c6387ee626936df70400f1bcb61a3a12843c5
  • alt-php82-php-fpm-8.2.34-7.el10.x86_64.rpm
    sha:5421f768d1c99fa046750856b2ca5cb76c9179f97e84ef50b4890dc966501ba2
  • alt-php82-process-8.2.34-7.el10.x86_64.rpm
    sha:c9bc35787971ac4a5e5ca967bd4cf8cc715bc7bf307bbc8f21b82e788da98b13
  • alt-php82-pspell-8.2.34-7.el10.x86_64.rpm
    sha:480ed3b4e8db1bd3242e54f502931098f416337ddae78acef56c5aa5024f8dbc
  • alt-php82-snmp-8.2.34-7.el10.x86_64.rpm
    sha:880e866469132457b9e507d2dd984c9a55d2eae44e66ac938bb0f1eb1b3058cf
  • alt-php82-soap-8.2.34-7.el10.x86_64.rpm
    sha:5a9ef72fe2e61230cb7b7c469f13b16483e5b34b4aef6a4e5185e2b1c7fe3f1f
  • alt-php82-sodium-8.2.34-7.el10.x86_64.rpm
    sha:b5832803b327c84a3018ba01f7557cdf9934ae2cf59ed532bcfbe5786ce6ace3
  • alt-php82-tidy-8.2.34-7.el10.x86_64.rpm
    sha:a9e1e69a3b3111703aa9d212493e81781314d58f5547abe16eed4a9d87ee4f24
  • alt-php82-xml-8.2.34-7.el10.x86_64.rpm
    sha:0659e6f79d9d83b9ada5011989dd8e407c8007162e56a05ee090cf109bf61db4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.