[CLSA-2026:1792630852] alt-php70: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:01:04 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled - Wire php-7.0.33-bug78620.patch into debian/rules; the deb build was missing the zend_mm_alloc_huge() aligned-size overflow check the RPM build applies
Updated packages:
  • alt-php70-7.0.33-148.el9.x86_64.rpm
    sha:cbf62cb4ef8b43a1736ec7c9b7a31b6ae03caf7d23111dc9967fe60a6a690390
  • alt-php70-bcmath-7.0.33-148.el9.x86_64.rpm
    sha:8d9f7bc3268aebf86d6c2bae81ccaf5c006c9aa4749316ef631ebb28831235cd
  • alt-php70-cli-7.0.33-148.el9.x86_64.rpm
    sha:d9c2965551fcaffe4e3581a5a4ff82ca569daef0ea88731e1a65becbe535f122
  • alt-php70-common-7.0.33-148.el9.x86_64.rpm
    sha:c5ac81b378bd79652b4403c05d4a23d956f69feb47439ebe765be5e6bfa56731
  • alt-php70-dba-7.0.33-148.el9.x86_64.rpm
    sha:6de08c1e7f04c8ea5d3edf8ab9420b6343d62ae1f53da8416cf5fc37476685db
  • alt-php70-devel-7.0.33-148.el9.x86_64.rpm
    sha:9f3cef8b932d42fae6f7a6ec8371422ebe39185937aada230a6af7ae9384f307
  • alt-php70-enchant-7.0.33-148.el9.x86_64.rpm
    sha:1bac804601c5001f4cc26bbb4835a14ad325f1ae5985a47083f59c14744a11da
  • alt-php70-firebird-7.0.33-148.el9.x86_64.rpm
    sha:3c096b47b7f9a41626a863ff152eddd78d39511ebcce2ead3c0bb45e9fd6f65d
  • alt-php70-gd-7.0.33-148.el9.x86_64.rpm
    sha:6dbc81dcc9fedf5a7ae0fccefd341732ce459985448f2ecd1d76625b99cdb12d
  • alt-php70-imap-7.0.33-148.el9.x86_64.rpm
    sha:51ebb846a97ab1a4bdf5353c07590c9f11e4220fed40708d1f0efc5d9c989bca
  • alt-php70-intl-7.0.33-148.el9.x86_64.rpm
    sha:05e88bd34193fd3f48958c9d00d537ec1fcd654ee66f8de2e58507e1e8fc3915
  • alt-php70-ldap-7.0.33-148.el9.x86_64.rpm
    sha:806271d71bcc4528367b5d442eb452064e5dd94273ab9450b1427b6556755eb9
  • alt-php70-mbstring-7.0.33-148.el9.x86_64.rpm
    sha:4c03368384a8ea0b87069769c6148ce48f4725a4ef580dd8aaf7955e4e5da467
  • alt-php70-mcrypt-7.0.33-148.el9.x86_64.rpm
    sha:5d327c46cdf32065190a9a3e76705d581ac4effc6a2a458a00b5686ead13b6fe
  • alt-php70-mysqlnd-7.0.33-148.el9.x86_64.rpm
    sha:ecfd669a4e95694392e751b66d90a70e3c57186bcfcad9b2a45e33cde2bd42ad
  • alt-php70-odbc-7.0.33-148.el9.x86_64.rpm
    sha:66df91c5107f7f02ecc3ea290e088e50e8730e82e9f25e59c2adec635492eb6a
  • alt-php70-opcache-7.0.33-148.el9.x86_64.rpm
    sha:e917dc257ac153126ebe51cf097fb52d79647cf35ba80473b839a7a6ed4c0632
  • alt-php70-pdo-7.0.33-148.el9.x86_64.rpm
    sha:9f22af68cc84db1786d44034c0ee1d8c7d30f2859964e0e41cdbe8154a6ede47
  • alt-php70-pgsql-7.0.33-148.el9.x86_64.rpm
    sha:11f02351d34dfea7cecaf99f531b6ff53ff3a3a1844f00431f08c03890e1cd47
  • alt-php70-php-fpm-7.0.33-148.el9.x86_64.rpm
    sha:faad9bfa1b35d0a52564ace97a346ffcb188db669e39710206696bcd3ac93178
  • alt-php70-process-7.0.33-148.el9.x86_64.rpm
    sha:80028eb09df76fe12dd0abdc06fd8cd756bc28454cd7e80a4218006ce015dcb1
  • alt-php70-pspell-7.0.33-148.el9.x86_64.rpm
    sha:6775aaa49567a9fc483833febd01221e1210e08e8beb0191e7db404b3cfa31c8
  • alt-php70-recode-7.0.33-148.el9.x86_64.rpm
    sha:e88f04828392ca071c0b7ddb95ee3b33f4d290b0e90c6d9ef7295d8defe19e48
  • alt-php70-snmp-7.0.33-148.el9.x86_64.rpm
    sha:6bc09e4e025992d2ea093d39c0d657260f4fec2c596a60558e41307e9bb27419
  • alt-php70-soap-7.0.33-148.el9.x86_64.rpm
    sha:6609ad8074108f3f64b9553552051a55847ccc616d4b1cb2046405f58df75d87
  • alt-php70-tidy-7.0.33-148.el9.x86_64.rpm
    sha:714f2e766b5a19cf5514535cbc4d42cc4e84f2f8c2332eb479670df313801b09
  • alt-php70-xml-7.0.33-148.el9.x86_64.rpm
    sha:ae43e5a7f46539ca6c6b7e33046ccf92852ba09c20439bccf76976091beb4750
  • alt-php70-xmlrpc-7.0.33-148.el9.x86_64.rpm
    sha:4b75abc998415ddd4b71073305e2bf5bb21d92cdea4bd03b1ba554798724e7b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.