[CLSA-2026:1792622960] alt-php71: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 22:49:30 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
Updated packages:
  • alt-php71-7.1.33-114.el8.x86_64.rpm
    sha:9adbdeb59f0e064d6c3c5d72ec7c99051fc03061485fffc04bc9f543d208e89b
  • alt-php71-bcmath-7.1.33-114.el8.x86_64.rpm
    sha:771136c6057178d58487ee8add8c619774fb363ab2dbdaad1e3bab9ab640d7c6
  • alt-php71-cli-7.1.33-114.el8.x86_64.rpm
    sha:d3810dcacd7df9acf7d4fd6c6dd1ae8d06952815a39fb73d223bd1a6ba729e45
  • alt-php71-common-7.1.33-114.el8.x86_64.rpm
    sha:7fa2bfe7ee6cb5a8375e72d3f1293075496e517326c7c2ed4032db7e9abc1994
  • alt-php71-dba-7.1.33-114.el8.x86_64.rpm
    sha:65ddcbf05381ba0b931fb8c4508375309650e3ae878d2f3c6b37fb1019642b8c
  • alt-php71-devel-7.1.33-114.el8.x86_64.rpm
    sha:b7df913fe2150e0afcde1b508843251e3973de98482eb4fb9aa60b4729323d82
  • alt-php71-enchant-7.1.33-114.el8.x86_64.rpm
    sha:a9452e5df00b886883018c811298177a940ce0eb7429dceca9ae0e269dd5da48
  • alt-php71-firebird-7.1.33-114.el8.x86_64.rpm
    sha:97330d696cdc0eaee26ae4d9ef3ba33e67fb57b27f13259898bd9e322ca92fc3
  • alt-php71-gd-7.1.33-114.el8.x86_64.rpm
    sha:1a473d814d5f188efd80233f37caad6c98e57681dfd8e60584d9fe8cacce0a64
  • alt-php71-imap-7.1.33-114.el8.x86_64.rpm
    sha:3e67ef9a4d2f6bf235e5f191e39cf69293a608ae4eb325feb4705e5154b0053a
  • alt-php71-intl-7.1.33-114.el8.x86_64.rpm
    sha:7fe41cd26e3cb55a5ef3d7068dc65331f97521e7cacd9efe0bbdb5a11599b7e4
  • alt-php71-ldap-7.1.33-114.el8.x86_64.rpm
    sha:1cf514ebefcd6598fbef4f395cc8b4c90825226de3f93546c305b9b22af9f617
  • alt-php71-mbstring-7.1.33-114.el8.x86_64.rpm
    sha:0143ab322c97627118f709f258873221e3559bcb8e522698fcefa02ced8208bf
  • alt-php71-mcrypt-7.1.33-114.el8.x86_64.rpm
    sha:d24e45d0bd5d16d82ad14ac70f7ef97cdb3064ea98f8947de3e9b4d84a7d878f
  • alt-php71-mysqlnd-7.1.33-114.el8.x86_64.rpm
    sha:59985bc4d3c2cc03bdbeaa6927fd13d3822b28c331ea1eca5a3f1c6bfb3048da
  • alt-php71-odbc-7.1.33-114.el8.x86_64.rpm
    sha:eac9c888db9b36502dbc272046af1d6ef62dfaf0e43d83aef67c77c77de0c649
  • alt-php71-opcache-7.1.33-114.el8.x86_64.rpm
    sha:2bfd248005282c09edc9179acba79eaead63510e433db07a23fdaf73f6050880
  • alt-php71-pdo-7.1.33-114.el8.x86_64.rpm
    sha:d61414af0632561e93609e5db5e021590a192e39e80a05ecb33913ed9724ce85
  • alt-php71-pgsql-7.1.33-114.el8.x86_64.rpm
    sha:ac1ac306e0099bfb821d28a8d70a3bf8b0aa5df15822b2771c7a6094e3feaf26
  • alt-php71-php-fpm-7.1.33-114.el8.x86_64.rpm
    sha:d7eb65af455b74b2f3fae9e49ac09c52fd3a5d6a04cd3ad224af44e5214761c4
  • alt-php71-process-7.1.33-114.el8.x86_64.rpm
    sha:c252bfe5c616d86143b8179c8fc7ce014684913cb327012a6d6368aa41f31156
  • alt-php71-pspell-7.1.33-114.el8.x86_64.rpm
    sha:aec06cb12d8dbc91069e2e191a02754b368c126cc56f5aeb06c1b6a5e123169e
  • alt-php71-recode-7.1.33-114.el8.x86_64.rpm
    sha:e06af7ebf718ed25ae424d9d8241c2ec0ede218f1788534cc588b59e80e3d535
  • alt-php71-snmp-7.1.33-114.el8.x86_64.rpm
    sha:16ee9897ce172c4cac3eb25c33416646ad7b4f7ab31501d22dbe6bdfb36f9412
  • alt-php71-soap-7.1.33-114.el8.x86_64.rpm
    sha:7f963aa412726527944d0a7947cb156cc101565081b5625081550db2ed1407be
  • alt-php71-tidy-7.1.33-114.el8.x86_64.rpm
    sha:4071bfdbe67f88189716ac5e8c6c414431006bc3a0f118afee795953ba77b70b
  • alt-php71-xml-7.1.33-114.el8.x86_64.rpm
    sha:76270240a0dae81446e9b47164d4bf4f4af87bb1d53041d5a01a856525d99ee5
  • alt-php71-xmlrpc-7.1.33-114.el8.x86_64.rpm
    sha:b3203a0a0f24b6c7d3f7b359bc40e6bd6140551b87507f04b4129970846c313e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.