[CLSA-2026:1792620897] alt-php83: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 22:15:07 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 3c832b52 (PHP 8.3 branch)
Updated packages:
  • alt-php83-8.3.35-6.el7.x86_64.rpm
    sha:9b793a3c5cbbcb43eccf1f3607aa9282f51076ebbda3666a40c7a7b47bb19e50
  • alt-php83-bcmath-8.3.35-6.el7.x86_64.rpm
    sha:29e168028290c77a30008aea554e23619f79f9966559371fdd0b1b18568e76b5
  • alt-php83-cli-8.3.35-6.el7.x86_64.rpm
    sha:1ed5c10d32ddcd8d54ae22cd1be3485876705aa7f75fdad3f49d48c099d70929
  • alt-php83-common-8.3.35-6.el7.x86_64.rpm
    sha:f8bc5878f58e85a0c95c21935dc95b2fcef793466f8b10261af8bfd45a9467a9
  • alt-php83-dba-8.3.35-6.el7.x86_64.rpm
    sha:e71128e5327a1c398f1b469e213d0f0cffd5fe2b2272082ed187f08eadea4f9b
  • alt-php83-devel-8.3.35-6.el7.x86_64.rpm
    sha:1b430cc4f0376de716f8dedab43a5a000e440c04d6e4e4068d13bd8c174925c9
  • alt-php83-enchant-8.3.35-6.el7.x86_64.rpm
    sha:f1940ccc0a0998952386f68ccc01db913dffd4d6c6063f038bb47ad2f1dd9b5f
  • alt-php83-firebird-8.3.35-6.el7.x86_64.rpm
    sha:00b4c36dd931397b8878013bf8f0a7567e06f14d9b0fdf0426a0d2db23b8ba8a
  • alt-php83-gd-8.3.35-6.el7.x86_64.rpm
    sha:a4c7b8284181a9ac4319ce0a22c4867fba114c25f249c1acee1719a4dc91ea50
  • alt-php83-gmp-8.3.35-6.el7.x86_64.rpm
    sha:4982ff849c21cef4d5c1a906b4d2b3227be6f1408f83a5c247b0f92d136d01b6
  • alt-php83-imap-8.3.35-6.el7.x86_64.rpm
    sha:3aded4fade3e0164b5d25e7184a31bf1f699b4f9977816a03071858ef4edb519
  • alt-php83-intl-8.3.35-6.el7.x86_64.rpm
    sha:5e33e127e7aa2d4c914b20b94f7aedf249e60cde3e1015511a477b4a417b0534
  • alt-php83-ldap-8.3.35-6.el7.x86_64.rpm
    sha:312074635be839e6949cf9490b3f73caba8ac5e0140b070dc62822406ea5123e
  • alt-php83-mbstring-8.3.35-6.el7.x86_64.rpm
    sha:119a1bb0993f5388003f42e5d39064c35945144328d9049fc4ac3cbca6289b91
  • alt-php83-mysqlnd-8.3.35-6.el7.x86_64.rpm
    sha:52f5bc8ae52b1dd4bd0cbfe9afce29333bf49fffe7175a63f7874a7d15b713ed
  • alt-php83-odbc-8.3.35-6.el7.x86_64.rpm
    sha:b38991ddc2e4c80a0da4f90ebb0f31182a0234e68462a398fb17e145138de8f2
  • alt-php83-opcache-8.3.35-6.el7.x86_64.rpm
    sha:7df93d87b32ce4132c8adad1fc9406be20718cdd705e5ff67d6e607a743052d4
  • alt-php83-pdo-8.3.35-6.el7.x86_64.rpm
    sha:aacae7377c808ee4f36b77dcded0a59ebbaecd311e07f4906a75b0ede14aa1ff
  • alt-php83-pgsql-8.3.35-6.el7.x86_64.rpm
    sha:8d87d3d579bb23a8397a013284bed24d69765708921b294a1829faa5109b6baa
  • alt-php83-php-fpm-8.3.35-6.el7.x86_64.rpm
    sha:f219b8781efa8e36a62b9b9df8ca75612fa781c9f8111905b7b134cca1921b6d
  • alt-php83-process-8.3.35-6.el7.x86_64.rpm
    sha:e0df67b1cd78e4deb277bf8201e7e5d955dd7b550da9b7bce2ba29cb5ddee21c
  • alt-php83-pspell-8.3.35-6.el7.x86_64.rpm
    sha:9a78f41a789aade9039ad01a28cf9ec00e559d075151e87b2118b8cfbdcab02a
  • alt-php83-snmp-8.3.35-6.el7.x86_64.rpm
    sha:84992c49aa2133d9788d98ec5ac1d8c7ae5380978e609bdc22f208cb8f7f8edb
  • alt-php83-soap-8.3.35-6.el7.x86_64.rpm
    sha:959fae4639c0abb6867b481f795c53ca4eb437f24a11a7cb399273649f6551dc
  • alt-php83-sodium-8.3.35-6.el7.x86_64.rpm
    sha:0f63bd71111e717f169479329a2217e5877c9033ba65176c3de88fe62a0236e2
  • alt-php83-tidy-8.3.35-6.el7.x86_64.rpm
    sha:d1e4e96469641bfb38d6bc2f33f3e37d43e03923bffc5c50b426bf74b34b2c48
  • alt-php83-xml-8.3.35-6.el7.x86_64.rpm
    sha:365fd951bc2d9ad14a7c103b13bcf3a361e8abe9e894d916d27aeec398bd067a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.