[CLSA-2026:1792618481] alt-php83: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 21:34:53 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 3c832b52 (PHP 8.3 branch)
Updated packages:
  • alt-php83-8.3.35-6.el8.x86_64.rpm
    sha:bb2250bb98a92f381e6c5f287e03a2949348b5010c78f5cbc0b2ef2b2e37db0a
  • alt-php83-bcmath-8.3.35-6.el8.x86_64.rpm
    sha:8fc0a3f6a05ebf7b1cfe77a7c6cf2d0987478896ba519760cc3653f4f10f9d6c
  • alt-php83-cli-8.3.35-6.el8.x86_64.rpm
    sha:4231f8ccffb1539f243b1277010521528d35ccccd72523a6283ee715e85c98b6
  • alt-php83-common-8.3.35-6.el8.x86_64.rpm
    sha:ec62f7c883be785afc967a34ab792fd68325252a130be2bc207768efebb907b2
  • alt-php83-dba-8.3.35-6.el8.x86_64.rpm
    sha:bd83d400df7b77e0907730adea50c43578859195815fa3f532b6a5272ca35e93
  • alt-php83-devel-8.3.35-6.el8.x86_64.rpm
    sha:246934f012238a7905bca814b1ccef72cf0d8ae7220e9ec8cc765f9d77ab147d
  • alt-php83-enchant-8.3.35-6.el8.x86_64.rpm
    sha:60cfde3ed5eaee9b1750fded2b872cd8a046bd08cd2dd824f38c3b1df2e33d62
  • alt-php83-firebird-8.3.35-6.el8.x86_64.rpm
    sha:4a22efd632ec3c7302fadd17240cb4d8edae2ff8e6b8ac2194667e4182aa3467
  • alt-php83-gd-8.3.35-6.el8.x86_64.rpm
    sha:177af6020cab7a4ed0d8554365dee3b6bae679204a2d544bd6d44589bc42c149
  • alt-php83-gmp-8.3.35-6.el8.x86_64.rpm
    sha:706f0295330c0ae3060536b118c2df20e2d3615d08fa8f2e5bcf47c8e466fb31
  • alt-php83-imap-8.3.35-6.el8.x86_64.rpm
    sha:5b7099ae7a6d27ee44a08f3d7a18a009bfc53041a6c23b33efcefbcd68dde28f
  • alt-php83-intl-8.3.35-6.el8.x86_64.rpm
    sha:9e82aa375c1f3e6693b026fa278faa33f196c75e3b1ba47c8369f2045a40efa1
  • alt-php83-ldap-8.3.35-6.el8.x86_64.rpm
    sha:947fdd0cb90d89ed3dc1f7aefdad56d653f672f3ea46d218023b5f124c72ba3d
  • alt-php83-mbstring-8.3.35-6.el8.x86_64.rpm
    sha:3734381772901ae2939778963c33a8338b775490da359964b3de5f3315a25efc
  • alt-php83-mysqlnd-8.3.35-6.el8.x86_64.rpm
    sha:4a7480e036a325ff4c3a36f8d4d4ba19854a211fc442653fc0822c9a6e122a13
  • alt-php83-odbc-8.3.35-6.el8.x86_64.rpm
    sha:3942b367c15f226eb6550b92d13000a907648beddf9a5dbcfc0a8fbac405abd2
  • alt-php83-opcache-8.3.35-6.el8.x86_64.rpm
    sha:67eb4fddec8016e04bac477eea865a9d2cb70d8bcfe4905b256040fbba2039e7
  • alt-php83-pdo-8.3.35-6.el8.x86_64.rpm
    sha:9394dabb2857b5c93f3f37862fff5f0be935321fdbfb062f0735f27e99772ae8
  • alt-php83-pgsql-8.3.35-6.el8.x86_64.rpm
    sha:14752bb7ef49b0133948d1c01822374f298a80a6b2c0f34700c98bfb67ff0e6e
  • alt-php83-php-fpm-8.3.35-6.el8.x86_64.rpm
    sha:486937c96f3f9cb82a20049dbafe66a1dbe07fb84174c838f0cc087b8bceaafc
  • alt-php83-process-8.3.35-6.el8.x86_64.rpm
    sha:781124931fb62dcdee0525f0b6c25ea4864cfff9842ca9e14206314b25f1263f
  • alt-php83-pspell-8.3.35-6.el8.x86_64.rpm
    sha:09de746616df42800a0d129ff08ab65bb34347dd1be6917f8525a9ab9b55aeb3
  • alt-php83-snmp-8.3.35-6.el8.x86_64.rpm
    sha:f8d2b044fcaa0286fd74880408f3544c74fcf701a6b5595ba251ca30ba282a38
  • alt-php83-soap-8.3.35-6.el8.x86_64.rpm
    sha:c7f56fd4d8c0a8862c107f30859fbb7d3268d1d295fbeee57f34673dc2b843d4
  • alt-php83-sodium-8.3.35-6.el8.x86_64.rpm
    sha:c44e79e638a3da328ee7ca2f43add1d872ddc12c2b14999cfbe5e90402873d1f
  • alt-php83-tidy-8.3.35-6.el8.x86_64.rpm
    sha:dcc3cbff6599a07165498b1d35c9e9ae4525d5bba9255ab8431ed4ca02f3eceb
  • alt-php83-xml-8.3.35-6.el8.x86_64.rpm
    sha:e9a8896cfef0f4d4ab71b7fc3cd4c9981f1161167d4fd26c97363f8df3bb47aa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.