[CLSA-2026:1792625129] alt-php81: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:25:41 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 1d7dec17 (PHP 8.1 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php81-8.1.34-39.el9.x86_64.rpm
    sha:f16d6b0e62bc2c3a3d29f80fa59ef1e9ce23556a99fa0e92b8e6b6a7dfb16723
  • alt-php81-bcmath-8.1.34-39.el9.x86_64.rpm
    sha:12c5081e0f2d7cbd3b0c260bb93f1158a48cf323fd320320b6a9861e662ee606
  • alt-php81-cli-8.1.34-39.el9.x86_64.rpm
    sha:539847813f8c62633760fbb2ce5abbfa841690ced7312840ddc93cb0cf056153
  • alt-php81-common-8.1.34-39.el9.x86_64.rpm
    sha:e2a2561dd919888bff06bc155b0060865e3608eeb3eea8ce8c74fd7494e254fd
  • alt-php81-dba-8.1.34-39.el9.x86_64.rpm
    sha:ccdc47be685f745283dfbe8ae5ed8f41d7c796f9cf54813f544d486e2d36626d
  • alt-php81-devel-8.1.34-39.el9.x86_64.rpm
    sha:97b1f98b07697f9a8d08f656bcef1f992acfaa56e83625fc1eb0be6d1dd18f49
  • alt-php81-enchant-8.1.34-39.el9.x86_64.rpm
    sha:eb7f4eb4bcde6552df4389ced24fb9443909c6f7a272f8e189e5fc9b4cb8974d
  • alt-php81-firebird-8.1.34-39.el9.x86_64.rpm
    sha:3d97b8bc86a170e8b48f35b8e2484180004f4caf4712f605ea118629e9573a5d
  • alt-php81-gd-8.1.34-39.el9.x86_64.rpm
    sha:ded123157d4d79e48b48ff94bc39766c338d39942b5f37c1359668180544fe02
  • alt-php81-gmp-8.1.34-39.el9.x86_64.rpm
    sha:f37610d6d42d268a62b2ca3623e51e99a22c71924b9a1ec8646da9c561dc4f17
  • alt-php81-imap-8.1.34-39.el9.x86_64.rpm
    sha:0671491bdfc7625199c2580e523d235de7645710df125e8451326b1c9e804689
  • alt-php81-intl-8.1.34-39.el9.x86_64.rpm
    sha:ba0b7e5a1c0289c31d3f57b5dfb7b3a6c1a9fdc6eabaf79ad543d61e99aa056d
  • alt-php81-ldap-8.1.34-39.el9.x86_64.rpm
    sha:6e5f76c5cd2846d79b4eb2535b1735af4e76a6b744ff755f857dbd52ead6faae
  • alt-php81-mbstring-8.1.34-39.el9.x86_64.rpm
    sha:11637616cdc159ff3ac4004ea3413b8c1256331112d5a41587baa965c61d54a5
  • alt-php81-mysqlnd-8.1.34-39.el9.x86_64.rpm
    sha:8371a6267b1bf7caec65adbdb75216ea66c9c9c6fd0963208b54a13c05f7a72d
  • alt-php81-odbc-8.1.34-39.el9.x86_64.rpm
    sha:bc74a615a0c3650f623985bd56e34c58b8d56756cf1ca7596e031e8c6248c279
  • alt-php81-opcache-8.1.34-39.el9.x86_64.rpm
    sha:1ae97a54399fd09fde184bfceef82d5b7c500d25251088273e6f8ec1db690ea7
  • alt-php81-pdo-8.1.34-39.el9.x86_64.rpm
    sha:81bb9f961e0c75c85860bcc34dab2bec757e1ebc093fd19d6b75cdafaa48e9e8
  • alt-php81-pgsql-8.1.34-39.el9.x86_64.rpm
    sha:8ac922be27e3aea74ca9de5b0e035b7f7449cce4f030de40cb7c8b213981a026
  • alt-php81-php-fpm-8.1.34-39.el9.x86_64.rpm
    sha:b667df1750ebd607e23cbf5acdf22872005a9b1e842d895430b5d181efa226ed
  • alt-php81-process-8.1.34-39.el9.x86_64.rpm
    sha:f4c36eea1fa6613eaf2175511d8a4fd1b546e39c44e222ae267c2ff34f02f7d6
  • alt-php81-pspell-8.1.34-39.el9.x86_64.rpm
    sha:6f0cb3995bc4896c5226dac4a9015b669e489644cd64db542e6458482b39fc1c
  • alt-php81-snmp-8.1.34-39.el9.x86_64.rpm
    sha:59e51fb5e7e8828f467dd29beff9c870719dacbdd645d4ef13c89bb644bf9368
  • alt-php81-soap-8.1.34-39.el9.x86_64.rpm
    sha:d15c24b63201697a391f4605ecbff589ffe546613df7cb1aaa763d4e080e7688
  • alt-php81-sodium-8.1.34-39.el9.x86_64.rpm
    sha:d955a97139c9c923ca559446fc358024c9373eaea65fddf9b7e2020de9d2d963
  • alt-php81-tidy-8.1.34-39.el9.x86_64.rpm
    sha:18865463a00eed7f6b54532e50c4710bfebfbad99833e2bb6f9cfe74bf0f5497
  • alt-php81-xml-8.1.34-39.el9.x86_64.rpm
    sha:6fbae54109949d87c68c02cdf967b2a4c76c505e5ef073723c332c4534ba71b7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.