[CLSA-2026:1792623604] alt-php70: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:00:15 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled - Wire php-7.0.33-bug78620.patch into debian/rules; the deb build was missing the zend_mm_alloc_huge() aligned-size overflow check the RPM build applies
Updated packages:
  • alt-php70-7.0.33-148.el7.x86_64.rpm
    sha:8dbee3d4fbff456ecbfa449ca9ef42d5af5c10338da2c77c5fe90fcd300d8c25
  • alt-php70-bcmath-7.0.33-148.el7.x86_64.rpm
    sha:1c7656b1c6042a02b4bae22045f69e02a6cbd3417d37df6ad66915d0638e18b9
  • alt-php70-cli-7.0.33-148.el7.x86_64.rpm
    sha:e9b6cf9b212034a35160fc4c011cbdf104c14b509bf179745ada9c52d869b551
  • alt-php70-common-7.0.33-148.el7.x86_64.rpm
    sha:2b5d7270973d830bc278b60e367cb11d89051e74d54f95d47e0de59c0b963717
  • alt-php70-dba-7.0.33-148.el7.x86_64.rpm
    sha:29af0edac29c28dc5546f2e8d8e0b6376f5224236c1cdbd5bcac6a2b0085c235
  • alt-php70-devel-7.0.33-148.el7.x86_64.rpm
    sha:a034fd4ea751135d47d4ddf6c88aa2833f87852a086881a23211f83333063ca0
  • alt-php70-enchant-7.0.33-148.el7.x86_64.rpm
    sha:f9576973124543852407ec41b6727f6f14bebf449e70fe5c036cfbed5cb3997b
  • alt-php70-firebird-7.0.33-148.el7.x86_64.rpm
    sha:6ffd31c4a7a30b795b7eb56ef9a88385ad943d7519d7e0894da990ea46cf91cf
  • alt-php70-gd-7.0.33-148.el7.x86_64.rpm
    sha:63210f26e3f016787eca875db74899473eb0e3e07bc30058b78bab7f3f90ecd6
  • alt-php70-imap-7.0.33-148.el7.x86_64.rpm
    sha:0e8a6d2ff601c49c0452836e641c58a09333e8678820a6c0dda4f76eb9638bd5
  • alt-php70-intl-7.0.33-148.el7.x86_64.rpm
    sha:2b8bdb8886941be162323bb0b2609cf9fc826bdab832db8af4d91a62a76fb664
  • alt-php70-ldap-7.0.33-148.el7.x86_64.rpm
    sha:5dc3f0a34b24022bc0358522519fc671d906e39b47dd837f5e0b0f1d2126004c
  • alt-php70-mbstring-7.0.33-148.el7.x86_64.rpm
    sha:c53d8e462a54d79e994985894c0c6383fb0fb518d8fcc675b97ef5659d519db3
  • alt-php70-mcrypt-7.0.33-148.el7.x86_64.rpm
    sha:6276491fb4fbe3cd59b4fe93ac0abf24df44777e07fe4e24644781b4168069ed
  • alt-php70-mysqlnd-7.0.33-148.el7.x86_64.rpm
    sha:49ff64d1ac52d31b28c29c37bb072b0efd57ae449578fa480529b228ca48e41f
  • alt-php70-odbc-7.0.33-148.el7.x86_64.rpm
    sha:368de5714a80ef046d1a576d85ab7e96affe61c153885c186d1c3755986732ae
  • alt-php70-opcache-7.0.33-148.el7.x86_64.rpm
    sha:3df7c5c1e73969f26d7b98056dc43791f6a4afadefd5c1dbfd84dabad59c68d3
  • alt-php70-pdo-7.0.33-148.el7.x86_64.rpm
    sha:71bd5dee2277e83bd823837cf10fc0e0b12aa77523a5bd31f7401778c86ab7de
  • alt-php70-pgsql-7.0.33-148.el7.x86_64.rpm
    sha:677ad10f9d28bd6a238161c25f93e09c6f9a680e10b3c298c5e118a57dc5d706
  • alt-php70-php-fpm-7.0.33-148.el7.x86_64.rpm
    sha:2f6d24105127160c77eb99d964c14b272a537da0e94f70c12c42e82778edf05b
  • alt-php70-process-7.0.33-148.el7.x86_64.rpm
    sha:721fb6a0907a152d327d9ec18a1c1d3df369d3be3ab7e5883ed4ddc7714c502b
  • alt-php70-pspell-7.0.33-148.el7.x86_64.rpm
    sha:c9650b8cbbffde500c68fb4ab1cca5f0a226b23b77ba94b089d8c3be0186f313
  • alt-php70-recode-7.0.33-148.el7.x86_64.rpm
    sha:c0a3be1ad3fed9592706f32da6549a19ed33a5e8247949dbcbb60bc6515837a6
  • alt-php70-snmp-7.0.33-148.el7.x86_64.rpm
    sha:29a49afd10ce57300860485acebd2ee1f1ea3210486baa235709d1ea2afc6b28
  • alt-php70-soap-7.0.33-148.el7.x86_64.rpm
    sha:e2745043e66b8c6dd74d24a0c67285eca869e8853084b53d817fb57ffa31b341
  • alt-php70-tidy-7.0.33-148.el7.x86_64.rpm
    sha:1cc9005d41a24fad08bd4aa64af596e46be2c2c784856e865489a7ea6047b590
  • alt-php70-xml-7.0.33-148.el7.x86_64.rpm
    sha:ff207a7ad00f8051efed9b41ef085e24b32d80ac9edab5352f26e400c7ffb89f
  • alt-php70-xmlrpc-7.0.33-148.el7.x86_64.rpm
    sha:ab9dc22589dfc45890369fd2e919629a1916754ee78ee098abb629edbbc5261f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.