[CLSA-2026:1792627790] alt-php73: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:10:01 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php73-7.3.33-82.el7.x86_64.rpm
    sha:363695d28ec5e68c13062ffb68642d6271188e2ea8f16c00bf06497807d69381
  • alt-php73-bcmath-7.3.33-82.el7.x86_64.rpm
    sha:d5c8e083ddeb2d9d57f320b679fdf9027a951f81c255243a950fcf05fe1a8325
  • alt-php73-cli-7.3.33-82.el7.x86_64.rpm
    sha:384c703f66d3e7ff3865398d8d8ed514b5f27f5a9cb63830eb7e04db19bf67f4
  • alt-php73-common-7.3.33-82.el7.x86_64.rpm
    sha:54b966f302d3523b78022610f8783f1f42aba28c78d322f61ea760a9d7b9528c
  • alt-php73-dba-7.3.33-82.el7.x86_64.rpm
    sha:84b66d959e51ec6de928c2b59e03fea6e8ac7bfab1c96794a26ab76867921758
  • alt-php73-devel-7.3.33-82.el7.x86_64.rpm
    sha:cd5452551f54a6fcb4b519be689d7f9425ab19ace40f5fdbce8d9cb8c5f71a3e
  • alt-php73-enchant-7.3.33-82.el7.x86_64.rpm
    sha:2b48034684ec07a4ee64ac8deab10f25f40d3fd07f2f0d1072ac7c611f344941
  • alt-php73-firebird-7.3.33-82.el7.x86_64.rpm
    sha:6dfbf5bcc18fda0cabf8561498753cbf7bd071460bd3bc4e8272a4f89a1a06c6
  • alt-php73-gd-7.3.33-82.el7.x86_64.rpm
    sha:258f7b6789729cf5469d4e1d1815809a996a1bae3cd33693f82c453699fc2766
  • alt-php73-imap-7.3.33-82.el7.x86_64.rpm
    sha:eb95977f740c4e55cac58fabdf567a1afed4d5234f28f6f3e003f5c0a2aeba51
  • alt-php73-intl-7.3.33-82.el7.x86_64.rpm
    sha:f304aa22cb4cacbbffb5fe69f097bc90bbb8a3a375440e17ad591fc3731e1b67
  • alt-php73-ldap-7.3.33-82.el7.x86_64.rpm
    sha:157091cba5209dae62d4d4fdb5a36272d257f487b51163eb37ac0f3f8f99b5e7
  • alt-php73-mbstring-7.3.33-82.el7.x86_64.rpm
    sha:b19c4871b8d6805d31fc584e1fbfb0d16b3403bbe464e9859fb480f6c799e894
  • alt-php73-mysqlnd-7.3.33-82.el7.x86_64.rpm
    sha:68765ca9ad8537f2270365696aeb207b0963bfb80030e10356fc38ac30a765f7
  • alt-php73-odbc-7.3.33-82.el7.x86_64.rpm
    sha:fbfb82673dd5a948961cde9f1a86151747b90d85ff6213305be430c43eb59635
  • alt-php73-opcache-7.3.33-82.el7.x86_64.rpm
    sha:2b08296605e5a5192e6c922cb13d157f440d3937b0478bdc42597c752eed5aba
  • alt-php73-pdo-7.3.33-82.el7.x86_64.rpm
    sha:49061640e3898affa769ebcb0a991f1981a2ba2e55529a1969b135adcfd99c34
  • alt-php73-pgsql-7.3.33-82.el7.x86_64.rpm
    sha:b576dc6b1b54d1166dee41c82b632053d9e298d266cac92c767d09cccbc06926
  • alt-php73-php-fpm-7.3.33-82.el7.x86_64.rpm
    sha:12e1cd25efb3a776cae9abd539e29c135a759eb4152239d3811fa5791ff1b857
  • alt-php73-process-7.3.33-82.el7.x86_64.rpm
    sha:1783d61bb73982fe6b094fb91e73230ee0992117079fc235475de134f0192238
  • alt-php73-pspell-7.3.33-82.el7.x86_64.rpm
    sha:dd987da248decd8c99b46f0b1b89dd8ef407bc114212feb71649ea0990e8aa6e
  • alt-php73-recode-7.3.33-82.el7.x86_64.rpm
    sha:6393c8e2d4c42802acbbfccc729ebc64922a970c2a9d8f3e7603e2ca4abe57b4
  • alt-php73-snmp-7.3.33-82.el7.x86_64.rpm
    sha:481b5c0f8ad6cc556d2d8533dc220e85891ab891fe9cf1ef9e395424a2642c45
  • alt-php73-soap-7.3.33-82.el7.x86_64.rpm
    sha:eb0b57d41058c2003ef81a104d9b865bc4d6d68fd7f2d3163bae1bd1e9e77872
  • alt-php73-sodium-7.3.33-82.el7.x86_64.rpm
    sha:54e9b414a2400c42f45dde8e9d26c0db688e45cceb401095024942c69622f7a7
  • alt-php73-tidy-7.3.33-82.el7.x86_64.rpm
    sha:b2c861ee46ab31bbb229e32f6b2aa2106b21d03ce01d8fbd2ae38301cca7e4e8
  • alt-php73-xml-7.3.33-82.el7.x86_64.rpm
    sha:a5d32aaf2699c6e9de36b43415fdc8559471703df88d0efb7c9a77695f67b649
  • alt-php73-xmlrpc-7.3.33-82.el7.x86_64.rpm
    sha:a802f237b3328de73123756b2371b1c2da8e41a0a0ed4ab704754a24d403710f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.