[CLSA-2026:1792624835] alt-php81: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:20:46 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 1d7dec17 (PHP 8.1 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php81-8.1.34-39.el6.x86_64.rpm
    sha:0f468a185fde1ac0a2b118d6807bb6eda105aee032f29e841f0201ec0dab08ca
  • alt-php81-bcmath-8.1.34-39.el6.x86_64.rpm
    sha:f9015628ae8974f54f34b6ae6e6abbd85b74737c96ce463e2c16f8e3910d6872
  • alt-php81-cli-8.1.34-39.el6.x86_64.rpm
    sha:31044788f14d865e2dd169a93aed26d5127915b7aa925267937b3ff0c3225a99
  • alt-php81-common-8.1.34-39.el6.x86_64.rpm
    sha:8b9824688a1f34b1fad289fccf7f0f957498cab925b571ec65bcaa2ab504955f
  • alt-php81-dba-8.1.34-39.el6.x86_64.rpm
    sha:e300051f6a803abaef2fe8187663516f66f3cae3baa555c3140e472957fc7e28
  • alt-php81-devel-8.1.34-39.el6.x86_64.rpm
    sha:33f709f1f59bd90e2c8018ab34643735ed10b274820e60d9ab9a1eec9a608cec
  • alt-php81-enchant-8.1.34-39.el6.x86_64.rpm
    sha:16831879133cbd293d3c6118933034d30dbbb06d6c9928bb96c481a32e5ba8dc
  • alt-php81-firebird-8.1.34-39.el6.x86_64.rpm
    sha:0936369f024087735f0b36dab4fd7cbc23db455336bced6d31620595f90bf607
  • alt-php81-gd-8.1.34-39.el6.x86_64.rpm
    sha:e00cab1c8ae3954ede6f5a7062db64c2d01d0c51c82f951954eba614948feb0a
  • alt-php81-gmp-8.1.34-39.el6.x86_64.rpm
    sha:02e761c6c6a88227daf34015dbf32828781dafae93b0f0f70606d98779fe5851
  • alt-php81-imap-8.1.34-39.el6.x86_64.rpm
    sha:9c73bc22ddb96fab0e83ab72689d83fb4385f4fe67ebdb45ddcbb302197e628f
  • alt-php81-intl-8.1.34-39.el6.x86_64.rpm
    sha:44872d315607064d5b6563d3c9f7dd291b7eebd21db3df684c60f6afeab0300a
  • alt-php81-ldap-8.1.34-39.el6.x86_64.rpm
    sha:bcaba302b689b73b2010fd6fa6063b88194369e1d0730e85af32597ea4921f0c
  • alt-php81-mbstring-8.1.34-39.el6.x86_64.rpm
    sha:431cf2f15b4822978ba3ed45447f7acd3406a11c2995d0ac107a28804b21860d
  • alt-php81-mysqlnd-8.1.34-39.el6.x86_64.rpm
    sha:26e7a2e3ec3b6287de778d93bdd488bcc7c5f0896313ef3ae57058e0601a21aa
  • alt-php81-odbc-8.1.34-39.el6.x86_64.rpm
    sha:773cf992e66190deaefffb34bd4319d3f277d531bde23a3a188a1da7570eb5ad
  • alt-php81-opcache-8.1.34-39.el6.x86_64.rpm
    sha:95c85f2e94f8bf07f3b161b0cf4c1322a560305fd89961bbf52e62eb3f6242e2
  • alt-php81-pdo-8.1.34-39.el6.x86_64.rpm
    sha:dcbc6d7fa155ca37f552d0aaa50f61016065b8305e2ae538d3e1d949f779e0a2
  • alt-php81-pgsql-8.1.34-39.el6.x86_64.rpm
    sha:9e71b20c417636a114a6f32058b28607fd0eef45b8e88e07235660fedbd01311
  • alt-php81-php-fpm-8.1.34-39.el6.x86_64.rpm
    sha:3651408b6b29e8fa0883d8531d947195fbc5a3ce6b80c778d80310b53f59e957
  • alt-php81-process-8.1.34-39.el6.x86_64.rpm
    sha:bc44f1716094e5f33e0469fbd94e40a8b322f14a8375804d4250fcbc96285b31
  • alt-php81-pspell-8.1.34-39.el6.x86_64.rpm
    sha:f2f47e8bf39c5d6d65773ba86da62c2df4a8bb7f057bee7059d1ead90f6421b0
  • alt-php81-snmp-8.1.34-39.el6.x86_64.rpm
    sha:536eb17864dad61120468a108d3b2d1d085dabb0f109357084b04428fb1c2fd9
  • alt-php81-soap-8.1.34-39.el6.x86_64.rpm
    sha:a394bea8dc8a8967d20d7677f35a41a2915b023560b24dff134b44dce8e04802
  • alt-php81-sodium-8.1.34-39.el6.x86_64.rpm
    sha:ba9da701b01c6a1a289544e1d248778c93653f9d51fbac0b1cdb1bf0814a15b5
  • alt-php81-tidy-8.1.34-39.el6.x86_64.rpm
    sha:ee03212b5a20175b59cd4214da945a113d55c3a278718ac316de3ce252b52f2e
  • alt-php81-xml-8.1.34-39.el6.x86_64.rpm
    sha:6377d738e34c4cae6fee91a6a002e279e0223b78f6a78579f7d54984e7e48898
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.