[CLSA-2026:1792624599] alt-php80: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:16:49 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 82f8f31b (PHP 8.0 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php80-8.0.30-69.el10.x86_64.rpm
    sha:259bd2e0ad911e07cb57b6819889e0bd76f3002651749865f4b8013888848a4e
  • alt-php80-bcmath-8.0.30-69.el10.x86_64.rpm
    sha:76733d1ef8f62d4a2576831f43ca6327c67bfd2b9c58471caa1708150fb62846
  • alt-php80-cli-8.0.30-69.el10.x86_64.rpm
    sha:f1dd6abc63ef0b9c345475b8559bbb6c700612e9c67be3e0e9a1ea50f79bb611
  • alt-php80-common-8.0.30-69.el10.x86_64.rpm
    sha:fbaa3aabbc4f5003eb7ddd86143f75bb76f5db9238679b0c8481f0956b8f1d93
  • alt-php80-dba-8.0.30-69.el10.x86_64.rpm
    sha:cc5fea22944218c6ee3f34d70d6a3688626dbc02b3b0b0a84bcce1b863fb42e6
  • alt-php80-devel-8.0.30-69.el10.x86_64.rpm
    sha:15679513422c544ad3fef4f28f6a2d11e97618211d34b1acb8963c7d25cd8bf1
  • alt-php80-enchant-8.0.30-69.el10.x86_64.rpm
    sha:125d37d44f4f48ed6c3f443c327d2640371886e3bb874978be963e3c045c9bdf
  • alt-php80-firebird-8.0.30-69.el10.x86_64.rpm
    sha:b0c07aacaaccefcb0be2e7c5d82198c4b1103d27f1928c1bb793191be6d135fa
  • alt-php80-gd-8.0.30-69.el10.x86_64.rpm
    sha:71ba8ceb2d6ac6117e3f0e7d052dbca405a8eb4f16725ce0c0fc3a8d721a2e85
  • alt-php80-imap-8.0.30-69.el10.x86_64.rpm
    sha:2c169825cd86a1caf234d69c1f02c8be595d1e95b0a3061e045d2659e2243b8d
  • alt-php80-intl-8.0.30-69.el10.x86_64.rpm
    sha:9f2864c863d64e4f38888324592bfb1403b97bc4e663e8c0e0f9eba5280d58f2
  • alt-php80-ldap-8.0.30-69.el10.x86_64.rpm
    sha:5a3d914771943d0742285e7424673448d5cd58c4c0304da99b25f8c3a5ee4d34
  • alt-php80-mbstring-8.0.30-69.el10.x86_64.rpm
    sha:4ab73812973af0b987f37878c1e1c69d2df74b138772f3a85fae5c5a54936e5a
  • alt-php80-mysqlnd-8.0.30-69.el10.x86_64.rpm
    sha:dd1360ae0b914d190a2c9907d482b0b05738491b621d8b7af6b576c40254c661
  • alt-php80-odbc-8.0.30-69.el10.x86_64.rpm
    sha:e749d09fe089ea0bd08025f138bbafed6001647c13f99e6015e720f01d8b654d
  • alt-php80-opcache-8.0.30-69.el10.x86_64.rpm
    sha:9afe9d2cf002d7852c97836d42f6e29d6c6433923cb12639d93a2493c891fdb1
  • alt-php80-pdo-8.0.30-69.el10.x86_64.rpm
    sha:4a1eac142b0931526a6de5ef0cdf00a091969145131212bdc1a5598e512cce14
  • alt-php80-pgsql-8.0.30-69.el10.x86_64.rpm
    sha:4703888e9fc93ee5996ee2d362bb1b25f377817011085857faae5da86931d871
  • alt-php80-php-fpm-8.0.30-69.el10.x86_64.rpm
    sha:952108e4a0e9294d0e1f74ca4e65b3e216baa612db8d197a061bc9f3108f1841
  • alt-php80-process-8.0.30-69.el10.x86_64.rpm
    sha:65c98ad7cb828dd96a81ca0c0681bffb769d6d7baa1bb8221b0af1b3c505f4f4
  • alt-php80-pspell-8.0.30-69.el10.x86_64.rpm
    sha:74911a107e9578dd1d76003db938287cd74a610b933932250e01e4aa216c2834
  • alt-php80-snmp-8.0.30-69.el10.x86_64.rpm
    sha:5e5f73b67442feaff35c08de1570872fcac4dd34741286a73b4b33200c9b388c
  • alt-php80-soap-8.0.30-69.el10.x86_64.rpm
    sha:007ed281fdaeee20dcb7c5db99c3d0c2c61ca9531a80880fe8132cdb742dedf0
  • alt-php80-sodium-8.0.30-69.el10.x86_64.rpm
    sha:5482b48fe90c9302efe4404e39afefdabee2a3c80416dbc8edef5b17e7c4f8f5
  • alt-php80-tidy-8.0.30-69.el10.x86_64.rpm
    sha:f05d0c33607a779102795f37097489e3e8cb2c09a99e732508590e6c8ac5a3c6
  • alt-php80-xml-8.0.30-69.el10.x86_64.rpm
    sha:ec779dbf5e83292a910b6ca167bbca53b358a9c7df05b6b8929e602611bcb902
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.