[CLSA-2026:1792683521] Fix of 9 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 15:38:58 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled * Wire php-7.0.33-bug78620.patch into debian/rules; the deb build was missing the zend_mm_alloc_huge() aligned-size overflow check the RPM build applies
Updated packages:
  • alt-php70_7.0.33-151_amd64.deb
    sha:901c95f798dbc79e6bb07ce4f7ae3d701d06a400
  • alt-php70-bcmath_7.0.33-151_amd64.deb
    sha:7cd7e14936b2650ee07e82dfcbffc81f0e6fc0f0
  • alt-php70-cli_7.0.33-151_amd64.deb
    sha:5dd334f58fbe9fcab334f2ecccb779c876f77ddc
  • alt-php70-common_7.0.33-151_amd64.deb
    sha:ec94bb0a526dfe6f6b6ff2ef19ea434457d10332
  • alt-php70-dba_7.0.33-151_amd64.deb
    sha:4515ecbf6edd6999287899ce74a68b67e8c9c027
  • alt-php70-dev_7.0.33-151_amd64.deb
    sha:3202165fdf0cfb0a6d00af001f67e37c57b26312
  • alt-php70-enchant_7.0.33-151_amd64.deb
    sha:8e5e5943589fda63fefc6562de794cc7ef00d64f
  • alt-php70-firebird_7.0.33-151_amd64.deb
    sha:dbbaad0a9e14704f8dadda54883c8a0fdf1fc4b7
  • alt-php70-gd_7.0.33-151_amd64.deb
    sha:1f4a93460774b2b763a8a573ff7986d669d0e6ee
  • alt-php70-imap_7.0.33-151_amd64.deb
    sha:35d72cf355e64f20a96b20099b3aa4cacb4e112c
  • alt-php70-intl_7.0.33-151_amd64.deb
    sha:ee31f0e49be7bc144b5fd853a039a915b8835be4
  • alt-php70-ldap_7.0.33-151_amd64.deb
    sha:181a57d31dcbf98f799e4186b41db48bef1c56f7
  • alt-php70-mbstring_7.0.33-151_amd64.deb
    sha:abf2bc561da84d0170e7b041c815c89aff03bc46
  • alt-php70-mcrypt_7.0.33-151_amd64.deb
    sha:868c7d0c5eedceef5dc363b00f06cd5e365dd631
  • alt-php70-mysqlnd_7.0.33-151_amd64.deb
    sha:89b101cde4508eb25005960eb3910f9e9fe0aa4e
  • alt-php70-odbc_7.0.33-151_amd64.deb
    sha:92ae274b4052beda7aa75279b43cd651e23458bd
  • alt-php70-opcache_7.0.33-151_amd64.deb
    sha:8615fc18289ada76cb743f3234af4b240fee8271
  • alt-php70-pdo_7.0.33-151_amd64.deb
    sha:60d17307adc6f681e1ce57e199c79ea3061de55f
  • alt-php70-pgsql_7.0.33-151_amd64.deb
    sha:f5b14115a150d45c4b22d356addc04eb0ceeff07
  • alt-php70-php-fpm_7.0.33-151_amd64.deb
    sha:52364fc2f0fc0d002d9714615556083d99d0aebb
  • alt-php70-process_7.0.33-151_amd64.deb
    sha:4b29420d47b01a00b93d1b42a30eea939a386cfa
  • alt-php70-pspell_7.0.33-151_amd64.deb
    sha:dc1c6a37c6036b1342b887732eb271c469b2b5a2
  • alt-php70-recode_7.0.33-151_amd64.deb
    sha:810d74fa32f06c86a2088b06845feb0ec6b064cf
  • alt-php70-snmp_7.0.33-151_amd64.deb
    sha:2575aa55c3a3daac0c2b5a9393357da36e49d132
  • alt-php70-soap_7.0.33-151_amd64.deb
    sha:6b62b623ec292e8800e0b49b2417e2e1a377195c
  • alt-php70-tidy_7.0.33-151_amd64.deb
    sha:e49eb9cd81dd507f1fc9911eb02e6b24239336f5
  • alt-php70-xml_7.0.33-151_amd64.deb
    sha:3c6d4ce922ce891a06efa8da418db1c98937c2fd
  • alt-php70-xmlrpc_7.0.33-151_amd64.deb
    sha:2b4481aed11b5593c5d6c1c7ef15de4bb301329d
  • alt-php70_7.0.33-151_arm64.deb
    sha:d4e04c3fce995431b917713358503a113de18c22
  • alt-php70-bcmath_7.0.33-151_arm64.deb
    sha:15ed5f092d80a57d1214bf6ac412fb8e4faec1e9
  • alt-php70-cli_7.0.33-151_arm64.deb
    sha:f50e4178dd995a19915789ae3b1ccc493e8fc728
  • alt-php70-common_7.0.33-151_arm64.deb
    sha:613eb1f49c8ecd8fbee173fa1181b5960cf0d7b4
  • alt-php70-dba_7.0.33-151_arm64.deb
    sha:49c7d3424332384fad09e9ef470459f20fe2c745
  • alt-php70-dev_7.0.33-151_arm64.deb
    sha:ef93ba82519731800a9c9fc52aead6f9d29d1104
  • alt-php70-enchant_7.0.33-151_arm64.deb
    sha:4443e73bc8776a3146dea4869b6cd897be297491
  • alt-php70-firebird_7.0.33-151_arm64.deb
    sha:d10f268ff7a27220b32aa528bd42314230b4f797
  • alt-php70-gd_7.0.33-151_arm64.deb
    sha:0244fc6bd6146cfbba5415b9887678249757c66a
  • alt-php70-imap_7.0.33-151_arm64.deb
    sha:ac5963ecbd230315854cdedbba89f440de3b012a
  • alt-php70-intl_7.0.33-151_arm64.deb
    sha:27ceea98be7fb0efd79777b0d40e39f6baecfeb9
  • alt-php70-ldap_7.0.33-151_arm64.deb
    sha:1187200566a0ed23f512b6e4558341b39717ddf4
  • alt-php70-mbstring_7.0.33-151_arm64.deb
    sha:0a096050929b4eb2cf44b7dded6640217a0a7b97
  • alt-php70-mcrypt_7.0.33-151_arm64.deb
    sha:ecac00ff96c3b1d6f279811a213966c3858c6306
  • alt-php70-mysqlnd_7.0.33-151_arm64.deb
    sha:93d5272f30ce1347d6ebdfae1a3eaefe3f5d5305
  • alt-php70-odbc_7.0.33-151_arm64.deb
    sha:13cfef4b4a241e65139c12e4ac26fc2ee2b54d62
  • alt-php70-opcache_7.0.33-151_arm64.deb
    sha:294e6cdbf097dba618100948fe839ce052524394
  • alt-php70-pdo_7.0.33-151_arm64.deb
    sha:b8f8de981b08fcab6d9a5d11df0242211f94a935
  • alt-php70-pgsql_7.0.33-151_arm64.deb
    sha:ad1c7b410e31a1ec4b52af9d592c29110ac5260a
  • alt-php70-php-fpm_7.0.33-151_arm64.deb
    sha:36d79b0403992167a2d190975ea330cfb5fde183
  • alt-php70-process_7.0.33-151_arm64.deb
    sha:bcbbb0eaf6f6eba207d8907da807187d363eacff
  • alt-php70-pspell_7.0.33-151_arm64.deb
    sha:715f16841a83013f1e0948ff290efd7d5c8c6a96
  • alt-php70-recode_7.0.33-151_arm64.deb
    sha:bdde3cb6dcc9312239d31d86d618171e05f415e7
  • alt-php70-snmp_7.0.33-151_arm64.deb
    sha:4eaaa43fecbe52b512d7c801fc3c86a7f61c56bf
  • alt-php70-soap_7.0.33-151_arm64.deb
    sha:f47f136c068372039274fa61fc85bdd3f101c2a8
  • alt-php70-tidy_7.0.33-151_arm64.deb
    sha:56544d62b7189d33712b66863886c8b8379a3447
  • alt-php70-xml_7.0.33-151_arm64.deb
    sha:7a0df0745052a15900a03e212e3cb680bd3522fb
  • alt-php70-xmlrpc_7.0.33-151_arm64.deb
    sha:d2aa9c2e8696bdba58828468b1bfd72bb30f9622
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.