[CLSA-2026:1792623401] alt-php70: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 22:56:52 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled - Wire php-7.0.33-bug78620.patch into debian/rules; the deb build was missing the zend_mm_alloc_huge() aligned-size overflow check the RPM build applies
Updated packages:
  • alt-php70-7.0.33-148.el8.x86_64.rpm
    sha:944ab7a0cb79733be55ecd7b82c22c7e206ca69cbb586c977346c413a42d2af7
  • alt-php70-bcmath-7.0.33-148.el8.x86_64.rpm
    sha:66a2d92b59b8e3d76d5dcf66148a242b5a2afc157f6a6dd4cccfb743b8050218
  • alt-php70-cli-7.0.33-148.el8.x86_64.rpm
    sha:c5dfd4cae5b5108f5cb1c6d48cf2708a238cd379495beb4a1dd39bc72922fe0a
  • alt-php70-common-7.0.33-148.el8.x86_64.rpm
    sha:ee526f247c4b6f8229e5b883a7eca56d4ff491e87638a943054aa696d5e548b1
  • alt-php70-dba-7.0.33-148.el8.x86_64.rpm
    sha:70bfc985ec3780b6ad589c3539cd0d431b5ad91030e94d1454ccdebb68aeffe5
  • alt-php70-devel-7.0.33-148.el8.x86_64.rpm
    sha:f9bc475ddf1ae6900c8d788c8efb0c2ad42d8add35e06d60784cfa2149e93b5e
  • alt-php70-enchant-7.0.33-148.el8.x86_64.rpm
    sha:9f22787a3e827449d0b153017c42855e7c4078146a46e6c25ecc5a91203fd443
  • alt-php70-firebird-7.0.33-148.el8.x86_64.rpm
    sha:0ef39d514799ccdbd7118910c34dc0dd0e6d43e57c6f59d6fca1082e12010cd4
  • alt-php70-gd-7.0.33-148.el8.x86_64.rpm
    sha:4e0056f8e5276286c72f99967a766933ec5bff14584fd4a009161c848a523192
  • alt-php70-imap-7.0.33-148.el8.x86_64.rpm
    sha:55afc6cf9b6a3a3774db44931fb833dcde73ab1b503d6f775f7db55a9e9b93fa
  • alt-php70-intl-7.0.33-148.el8.x86_64.rpm
    sha:5acf93ca9f19609075fe555dbf70b2ac18e719f25dfad8c60514b54dfa6580c3
  • alt-php70-ldap-7.0.33-148.el8.x86_64.rpm
    sha:b9723deee8a1968c7a70380388c3c6931be742a1ba4e46d97486019d87132c95
  • alt-php70-mbstring-7.0.33-148.el8.x86_64.rpm
    sha:d6a3303b21c004939c0a7238dab4991cfbff59a700a1850b9edd81f8cf8f5943
  • alt-php70-mcrypt-7.0.33-148.el8.x86_64.rpm
    sha:dd03c3fc5ca79de587526d5671c49c50dd90fe2ed4c71a4a85bf2739a8188e53
  • alt-php70-mysqlnd-7.0.33-148.el8.x86_64.rpm
    sha:31ec199308a8a2f884efb84058c903c21f1280d838faeadf98a6eba48c1c008b
  • alt-php70-odbc-7.0.33-148.el8.x86_64.rpm
    sha:4aca1590a9bedb12013ae29d0f7433a43c666dfed74d1b88fde5f192fc4b5ef1
  • alt-php70-opcache-7.0.33-148.el8.x86_64.rpm
    sha:cac6f9353c529466f9a7e0526f0a4caec86e9b5cba620d98f2608e1f9fa77f49
  • alt-php70-pdo-7.0.33-148.el8.x86_64.rpm
    sha:f96792e5dc2004ca0a83f35cbbc7f2fbf85a6d48d3fa3043fae18e72c5e6a9eb
  • alt-php70-pgsql-7.0.33-148.el8.x86_64.rpm
    sha:096fa4a596bee06f457cf5ecc3e924594ce6b811771d175e9c09cd5e59a54f2d
  • alt-php70-php-fpm-7.0.33-148.el8.x86_64.rpm
    sha:21a358fc4dbf79368b68be9dc632f9a0d841b613cc7ced59dd0eacfb86e531e0
  • alt-php70-process-7.0.33-148.el8.x86_64.rpm
    sha:85fcaedee470b9422f26f4280970a03ce237caad28e5a1ec334df93378b30f2a
  • alt-php70-pspell-7.0.33-148.el8.x86_64.rpm
    sha:c0f2dab0c5aec2f50e65eca4326ced3b249d16ba8a053e442873aee6b7e37491
  • alt-php70-recode-7.0.33-148.el8.x86_64.rpm
    sha:854972a0755891376d8f23a0d74a6bbcf3e98f1d6e35c302af87a968c036f9ce
  • alt-php70-snmp-7.0.33-148.el8.x86_64.rpm
    sha:356de3ee2fc7d150f5271512b8e5beaf990acaa6a74752108335e4f2559d7b5e
  • alt-php70-soap-7.0.33-148.el8.x86_64.rpm
    sha:4b3d55842deddc8e3c10207d34244cae4c480306662879d876cb463646973426
  • alt-php70-tidy-7.0.33-148.el8.x86_64.rpm
    sha:7788260d9439e5447a423e58abda4649739c2de6bc0eb906e46a2480a1825fc3
  • alt-php70-xml-7.0.33-148.el8.x86_64.rpm
    sha:47ad5f9f78fca5ab0a9b45d49343885ea8445671d9d9cc4eac7ef3cfd37d73f1
  • alt-php70-xmlrpc-7.0.33-148.el8.x86_64.rpm
    sha:937d64f3acdce2bef49d63e94b67e9f6b932e40ebaafcb70737af96278eb20da
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.