[CLSA-2026:1792658847] Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 08:47:47 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-7.4-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; upstream 712e60f9 (PHP 7.4 branch) also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-81_amd64.deb
    sha:82e3718db525323dc1440a4af24e5ae397870d42
  • alt-php74-bcmath_7.4.33-81_amd64.deb
    sha:c7a551b933345957403c78bbeef26a46ea107046
  • alt-php74-cli_7.4.33-81_amd64.deb
    sha:34149fdc850885c6ecd42a7f78733533bbb4e4dc
  • alt-php74-common_7.4.33-81_amd64.deb
    sha:6051d473644eea156bb2fd2e4d392236ed887fac
  • alt-php74-dba_7.4.33-81_amd64.deb
    sha:e59d1f84af0d7054456dcedf3975b72326608d5a
  • alt-php74-dev_7.4.33-81_amd64.deb
    sha:89fee53a578ab8b623ee6a56feaba9b80aa903df
  • alt-php74-enchant_7.4.33-81_amd64.deb
    sha:9e4628b4a32da2e576aefce70d6b5631dafe0cf5
  • alt-php74-firebird_7.4.33-81_amd64.deb
    sha:58007e700311432f7070c5eecb37147fa535c7a2
  • alt-php74-gd_7.4.33-81_amd64.deb
    sha:c674e2eb89f2b46fe4ccbc1b402be3193decb959
  • alt-php74-imap_7.4.33-81_amd64.deb
    sha:f7fd2280f801a396639af2687f5a858fbac29bd8
  • alt-php74-intl_7.4.33-81_amd64.deb
    sha:736f7670059eb3649c815995a27171bc75ceca13
  • alt-php74-ldap_7.4.33-81_amd64.deb
    sha:b8348707d02808347a7a1835b9bd927ba628d646
  • alt-php74-mbstring_7.4.33-81_amd64.deb
    sha:dea4974c0950ab1f826c683ebbd60c6aead95991
  • alt-php74-mysqlnd_7.4.33-81_amd64.deb
    sha:87e7db124bb30ee71be904762404f0145e0bec4e
  • alt-php74-odbc_7.4.33-81_amd64.deb
    sha:0a1e72254931b4c506e6d1aced3703f2181b382a
  • alt-php74-opcache_7.4.33-81_amd64.deb
    sha:cfe361789b709c956a294bdfb0f24a716e993353
  • alt-php74-pdo_7.4.33-81_amd64.deb
    sha:4dbc9c7501e31f89710f43659267f35aeff9478d
  • alt-php74-pgsql_7.4.33-81_amd64.deb
    sha:a72dd96f97eae9e3ac3492d4f17c45c3af25c9c4
  • alt-php74-php-fpm_7.4.33-81_amd64.deb
    sha:b369baabc6633feeeb5f5f53dedb39ca7e327c27
  • alt-php74-process_7.4.33-81_amd64.deb
    sha:c4e018dc8425ccef1c1d3220752b49a95b2cb215
  • alt-php74-pspell_7.4.33-81_amd64.deb
    sha:1fc7f2994f97f85379c9eca325d7ce8caf88cdd1
  • alt-php74-snmp_7.4.33-81_amd64.deb
    sha:afd85f1bc6731c2c2afc84449d9a1f21e3873544
  • alt-php74-soap_7.4.33-81_amd64.deb
    sha:64b486e225e8a7867f6965b1b2d9bcc7e18f65d1
  • alt-php74-sodium_7.4.33-81_amd64.deb
    sha:80e8191a120306f7c9ada7edf1fbaefecafd4978
  • alt-php74-tidy_7.4.33-81_amd64.deb
    sha:03994caa2c60f23b22bb4400fd7dc88c0bba8b49
  • alt-php74-xml_7.4.33-81_amd64.deb
    sha:403283034f9267ea33c71acec792a7b2d5c0287f
  • alt-php74-xmlrpc_7.4.33-81_amd64.deb
    sha:65074ec310e6e1db15dcf903d692adb0285ad371
  • alt-php74_7.4.33-81_arm64.deb
    sha:e1631102ab283d645ddb1bd9fee36ae86a15a382
  • alt-php74-bcmath_7.4.33-81_arm64.deb
    sha:b95fc49c98e6ab0d2a468f6a12b49b12e9e05136
  • alt-php74-cli_7.4.33-81_arm64.deb
    sha:1451f609744e288e7aaa5fd673201ef9fecb21f9
  • alt-php74-common_7.4.33-81_arm64.deb
    sha:54689f672f687145098928b6b33757b46b2ff4e0
  • alt-php74-dba_7.4.33-81_arm64.deb
    sha:3c3d3cd4e8cf502cdbac2321f1a9be07436c3e31
  • alt-php74-dev_7.4.33-81_arm64.deb
    sha:67d89753cac19d59fc3a151ba142632a301d0ff8
  • alt-php74-enchant_7.4.33-81_arm64.deb
    sha:b6ec1a7fa70582f24535f8eb54022ef0bb29d72c
  • alt-php74-firebird_7.4.33-81_arm64.deb
    sha:e26933e1640be2c3492d3e10032180d5adee902f
  • alt-php74-gd_7.4.33-81_arm64.deb
    sha:c1247b91f8e89deadd25bc5c1fb8ced87b9649ed
  • alt-php74-imap_7.4.33-81_arm64.deb
    sha:cfde7685b99e524defad9f9e1443a7495bd3bd80
  • alt-php74-intl_7.4.33-81_arm64.deb
    sha:ad4429f36be193f27e57d7fc24f00baf9384a13d
  • alt-php74-ldap_7.4.33-81_arm64.deb
    sha:230b07a13970a57f206372671fd7794c782cf45d
  • alt-php74-mbstring_7.4.33-81_arm64.deb
    sha:1af997ab25ecd72c47f4880e7ef54d6b99a72a96
  • alt-php74-mysqlnd_7.4.33-81_arm64.deb
    sha:f3d37747bde2e8757705ae4b6f332b65fc7b5858
  • alt-php74-odbc_7.4.33-81_arm64.deb
    sha:0c1e20438b9c309cebee9d62fab2df7cb0acd664
  • alt-php74-opcache_7.4.33-81_arm64.deb
    sha:1230309bc24844cc356ecc3f5c3d19861b0f4609
  • alt-php74-pdo_7.4.33-81_arm64.deb
    sha:83163c80da07ecbc29496344a72ce07ba7874cb0
  • alt-php74-pgsql_7.4.33-81_arm64.deb
    sha:a34bd24c5462c70b296af7bfd87904639f22c068
  • alt-php74-php-fpm_7.4.33-81_arm64.deb
    sha:1931a01c9e38ee687d81d5d3cf9a196e0267d994
  • alt-php74-process_7.4.33-81_arm64.deb
    sha:e338969b6660cb75b809cd4e3e4c157565c2ee06
  • alt-php74-pspell_7.4.33-81_arm64.deb
    sha:abc77644b6ef60821fd26c699ab0736159a1b959
  • alt-php74-snmp_7.4.33-81_arm64.deb
    sha:f3bd67a39583aa27f6e09a3b5b7ca016f31b0851
  • alt-php74-soap_7.4.33-81_arm64.deb
    sha:8e6413199ddf0030961e67d6fc9d238c2f41206a
  • alt-php74-sodium_7.4.33-81_arm64.deb
    sha:2611a9e9fe96bd6e9bc7a406bd7c4041c60022a1
  • alt-php74-tidy_7.4.33-81_arm64.deb
    sha:ebb9f481cedba00a51681983093a6fd588961a76
  • alt-php74-xml_7.4.33-81_arm64.deb
    sha:4836ff1045e867637b37aa41c036820f690f3396
  • alt-php74-xmlrpc_7.4.33-81_arm64.deb
    sha:55a76a0cb5920a059352985f79ba05e71e77e13f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.