[CLSA-2026:1792621341] alt-php81: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 22:22:31 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 1d7dec17 (PHP 8.1 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php81-8.1.34-39.el8.x86_64.rpm
    sha:57bd85115ff79d17fc4ca4129d20642f15fb8e64a432bf99c5dd0d0f4dfb51e1
  • alt-php81-bcmath-8.1.34-39.el8.x86_64.rpm
    sha:cb440dc76656cf53aee643f207d57acef528778ff4aeac75ec5282f066aa7f13
  • alt-php81-cli-8.1.34-39.el8.x86_64.rpm
    sha:7e83395e495e2015d8f3e84d1903fbae741149fd045319845385b704105192b1
  • alt-php81-common-8.1.34-39.el8.x86_64.rpm
    sha:5d12f5128f50b5f1e47918ca3d609a69ce7e993e6a73586de1810a29694741a2
  • alt-php81-dba-8.1.34-39.el8.x86_64.rpm
    sha:e362d01763b136c765ee3f758a122f2b7f520522bed527412953a9d12eacd98e
  • alt-php81-devel-8.1.34-39.el8.x86_64.rpm
    sha:fc35f7f6ea14883e237fe2d4efc92a8a8c8e56e4575581d6fd38dd25c8b22f05
  • alt-php81-enchant-8.1.34-39.el8.x86_64.rpm
    sha:6e6dc98ce95a63ab419c343e40732b0a9f70c25b1da3c2d8dd3e4941bda11493
  • alt-php81-firebird-8.1.34-39.el8.x86_64.rpm
    sha:2db8d47f7aa5d43e980f702b8e4f689e636bfbffcaa3a5f9aaf4816c03822a4f
  • alt-php81-gd-8.1.34-39.el8.x86_64.rpm
    sha:0d9a005c41a32ef838db5e6f0aee95db7e9faa868438f6f15356f21095361bda
  • alt-php81-gmp-8.1.34-39.el8.x86_64.rpm
    sha:298a44bb56709b76d2b0d6270bf9808817893dddce7d6329229b161282981bfa
  • alt-php81-imap-8.1.34-39.el8.x86_64.rpm
    sha:224986ebc8c169e6b1a437a7ad7cb0c8fa0a2fe65e680391886000bd00dd3061
  • alt-php81-intl-8.1.34-39.el8.x86_64.rpm
    sha:233d9e5d9fd16391e04aa7fae662e2faeef94fddac91e59f176c61364b39d4cb
  • alt-php81-ldap-8.1.34-39.el8.x86_64.rpm
    sha:113134818a7de5898617005d858e87c29f65593352209a3241200f09079925b5
  • alt-php81-mbstring-8.1.34-39.el8.x86_64.rpm
    sha:5769c90baa4a2285d9f2f491528c9315b7f02863306cb8d2d53a1912bf77764a
  • alt-php81-mysqlnd-8.1.34-39.el8.x86_64.rpm
    sha:b65601bd498131d415b60688c2903719170eef437f51e4aebf4886ad8515909c
  • alt-php81-odbc-8.1.34-39.el8.x86_64.rpm
    sha:ecf517233d24e3be21f92d75fda1b4b1b9acc983efed21e2345cd65a02dfeebe
  • alt-php81-opcache-8.1.34-39.el8.x86_64.rpm
    sha:01dd229f69e1fc344fcb3e3ebc0dd40409917ca428e05a2a52bc823ad5c55cae
  • alt-php81-pdo-8.1.34-39.el8.x86_64.rpm
    sha:1005a6ee23acfe7199412619552d4a1c8d19038a13332a2eb58442dbaac30a48
  • alt-php81-pgsql-8.1.34-39.el8.x86_64.rpm
    sha:41656b1bf36d86e1a3de619e28963997a0e5ac1c373303c25269945720c882a2
  • alt-php81-php-fpm-8.1.34-39.el8.x86_64.rpm
    sha:5978ada1e06261809678a49d3cbf8a52bb54c3bc125103e62bd1c10f3cb9b59b
  • alt-php81-process-8.1.34-39.el8.x86_64.rpm
    sha:6e70e0a67545c83ae736315c4df2a3e6486616782814a313ec73ec760cb48d9f
  • alt-php81-pspell-8.1.34-39.el8.x86_64.rpm
    sha:9e0e36f5de3729c2bdfdabec7da4b1ee9ba5365b6197d1cbbce2d6b9243f9ce0
  • alt-php81-snmp-8.1.34-39.el8.x86_64.rpm
    sha:bd82515c778028dfb0bde4bc38b105dbdfe61c784c0b4b30d0652431c7f6f67a
  • alt-php81-soap-8.1.34-39.el8.x86_64.rpm
    sha:517dda743ed8d778cb1f903f88906d0e9358a8fab7ff699eb67bcc008d5669a9
  • alt-php81-sodium-8.1.34-39.el8.x86_64.rpm
    sha:1252858af4cb4c0ab26e420cb268149e3a4a12b58cc659f9217f1585f9adb59a
  • alt-php81-tidy-8.1.34-39.el8.x86_64.rpm
    sha:86682551972fce0f741a458fee9617cb9352e0050d72060a16cd24a78961dd8c
  • alt-php81-xml-8.1.34-39.el8.x86_64.rpm
    sha:f21301a9a560ec0a4d88cad516a6cae78cce0a2669ca390e7c34826cc764fd86
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.