[CLSA-2026:1792612253] Fix CVE(s): CVE-2026-109618, CVE-2026-109619

Type:

security

Severity:

Critical

Release date:

2026-10-21 19:51:04 UTC

Description:

   * SECURITY UPDATE: state corruption via bailout during request handling
     - debian/patches/CVE-2026-109618-CVE-2026-109619.patch: terminate the
       process on allocation overflow instead of bailing out, reset request
       and executor state on shutdown, allocate request arrays minimally,
       keep only used multipart headers and disable session upload
       progress tracking
     - CVE-2026-109618
     - CVE-2026-109619

CVEs fixed:

Updated packages:

libapache2-mod-php7.4_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:6c935abd2c69f7d738eccf9e067ef50d74b82162
libphp7.4-embed_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:0f0fc662dd6cc02d8798530bbe6de89bbfd42bbe
php7.4_7.4.33-1+deb11u12+tuxcare.els2_all.deb
sha:697eedbff36de35539c6c033b5a3c1e029ba173c
php7.4-bcmath_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:385b7fcbd12224e12888ef26c954b4337c880ad0
php7.4-bz2_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:ef7776c9f596ec7ae463b66c9bb4a9804feef2fc
php7.4-cgi_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:14589410a5ed1b8a6bdbd0391659a3301e1ea7d8
php7.4-cli_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:eb1e179b6f3c3ace1cc997614982d8549671164a
php7.4-common_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:607a3b37f8b344823f97cc520887c91d01e9b3e9
php7.4-curl_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:da10ecb30a3f6b7e74c9392c5afdcc990c62a884
php7.4-dba_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:8e1295b44b9c8f764b3a7f500f7ca09691e9ed84
php7.4-dev_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:db16b601bd3bdb5c9acf1c2276d6060a10a4ddcc
php7.4-enchant_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:7b06affaac8f64b540f70edfdf005f6bba1105d7
php7.4-fpm_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:d697926704d99fb16a45589b7106ab0be13eb76b
php7.4-gd_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:4e216d1c38b2aa5954f8c75fe61996da078b7445
php7.4-gmp_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:3bca379180f2d68f0d0f94c906685081d36c89e1
php7.4-imap_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:9bdbecbccf0ee0d46eaed8fb3780e9a488927154
php7.4-interbase_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:fc94fe986d5baa935a5126da66691c5fd35eb986
php7.4-intl_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:408d720bc08ec2dd33fdc0263c9763db0f6b675e
php7.4-json_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:d4bf6fad27f051e8246a81536ff78f8b6f9083f6
php7.4-ldap_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:454dc3287894327066a2860feddc3b82b5fdc453
php7.4-mbstring_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:4bf6374435cb9eb4b56ecfbbe4aab30c50c6e796
php7.4-mysql_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:0de2a015fd85b551db9b9e1a5d784493fce4e9fd
php7.4-odbc_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:600c62ae8bde862e6deff692d2118e13d59e7725
php7.4-opcache_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:a7e5a583b4574986f6737fac76b51a90717db26c
php7.4-pgsql_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:bde5fae4733fda3fd9e7d1437f00045d954f2535
php7.4-phpdbg_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:7eb2fc5dc5a46f25e0e34872df2972c38b805a9b
php7.4-pspell_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:7e56023c2991831d0f24017fb28b226a10d04bdb
php7.4-readline_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:6b07f5158cb482a39bfa0c535c59fb95293dd176
php7.4-snmp_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:3b6af9d30dcab0bc7d5fcd3cf13f9dcbda7bf4ea
php7.4-soap_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:8e5538ce6022af02417c204b2a26c460264b6ec3
php7.4-sqlite3_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:b5cf2d60a8643486e590bff8f5cbb065fb4cbb3a
php7.4-sybase_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:45f6b4dfa27b3b5f8605b96386bf7549459af2cc
php7.4-tidy_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:f861085570cc1908bfeb00699bca67381ac3381d
php7.4-xml_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:1fc958ff7f76a1a37a007d517d58e2c2fef3908f
php7.4-xmlrpc_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:fd290f6758b25ff8f996cc5882b5f0be84da1a07
php7.4-xsl_7.4.33-1+deb11u12+tuxcare.els2_all.deb
sha:7d4b5a4aa47e63d74f6fd36cac48b39f0534ae88
php7.4-zip_7.4.33-1+deb11u12+tuxcare.els2_amd64.deb
sha:4af0a3141bab7e6ebd99561a124090b260c0aa96
libapache2-mod-php7.4_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:a33c282f2fa7f655c3964a4bd2aba21f83fc7d2d
libphp7.4-embed_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:56ecf2c5a88ef228ae9610ae1d5ca1400d999a34
php7.4-bcmath_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:984fca81b833ea591986f835e6f6d6effa5c8ef0
php7.4-bz2_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:e5ef9d0f01a3925a3fe68b009708d46f5dc2cc28
php7.4-cgi_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:efc4d79763c69a28035b561e0e5b108d1cf3cb7f
php7.4-cli_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:ca87459ccb2adb9d1c730ee1b19bfb7fd4d60320
php7.4-common_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:4c9af117d373bb368e8dbf3589c2300cbfb35521
php7.4-curl_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:fb4cb83a5474c4971f00f03d9edecf7b81b4fc4a
php7.4-dba_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:258dd7cd789a957e1357f10c68e4008c5504f08f
php7.4-dev_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:45db13d98e17bd41e0f47c755f6f77b7bc479f22
php7.4-enchant_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:db735606f9547fdbd1f2fba51f78ae2f8d995c5a
php7.4-fpm_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:a7807ce95bf9158dbdf4d163861a4b5b292418eb
php7.4-gd_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:82ade9edae0ece1e24f1c1485ec17acb2b2ce2d0
php7.4-gmp_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:9f8982589d7c4493cfa02cd1e7b47f3b242de8a1
php7.4-imap_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:04d1a1248dc03758161a7dfa42c97a9435c30776
php7.4-interbase_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:4e4b645c32d5f8e497bd0519df13de0f2ccdf08b
php7.4-intl_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:38f62d0f66e0c041e9b7c6158989fa0476a9190f
php7.4-json_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:110446a07ba515bd53f4b5ef13dbd99bba028caf
php7.4-ldap_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:e8509d556a0c8be9f4ba04a6994912691f136448
php7.4-mbstring_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:6faf735be773786bc77607a70026b04da9a78e4f
php7.4-mysql_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:848c4e516c52ca66b1c9e60b7095ab9ed552a48c
php7.4-odbc_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:ead34a17613fc42e278f86acd2bce6176326ba68
php7.4-opcache_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:cb7c10326e12896f626924d3fe45084e20a4f699
php7.4-pgsql_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:f82ef298d05c96e1b3d3a2f83404a64361d41db2
php7.4-phpdbg_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:af8835a84a0992ef53ac8961eda511d387efe68a
php7.4-pspell_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:7c6d9140f9c086e9ffde06089aa29c98b61fdb6c
php7.4-readline_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:df448c0051af0c57c90ffc020b39aac1c2d12563
php7.4-snmp_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:58039854edc72fef55094c628e62e9d8915366e6
php7.4-soap_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:c4b4ccdf5d2f38d1dc8b3e75dcfc722c510ba217
php7.4-sqlite3_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:cd5d88f1597f9c3e5998188b187b83c967cac012
php7.4-sybase_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:c63181311b39943d288ae149ec29aa286620df02
php7.4-tidy_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:0656a83d998c7605f2d2344c282ace70fd0b61c9
php7.4-xml_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:2238ab3622ee0aaf43f9a3e56013aa516db0e111
php7.4-xmlrpc_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:3b9dd93289a7cd8aea989acdde761bf10150870c
php7.4-zip_7.4.33-1+deb11u12+tuxcare.els2_arm64.deb
sha:3bdfe261c82469debb9b0a132224fcae0fb5ad94
libapache2-mod-php7.4_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:7b44aca9852bc41a4a4411fd00278b784ff5f963
libphp7.4-embed_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:0bbe5e3e5c88c8a8e31716e876eec18c9ea9c3f5
php7.4-bcmath_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:98fad2b0e4b9aa2c3da57e1024a8a887aad3a140
php7.4-bz2_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:41f56d24d53cb619a7ee8cc96807bcb3fc292dc1
php7.4-cgi_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:6c4ea3cb2af8eb0f701f2cb81652db25b64694ab
php7.4-cli_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:516cb90d32845d892511d4770249d41033aa808a
php7.4-common_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:f18fe4466d2443c33b865e48e66e5557cb595819
php7.4-curl_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:545002093e08323c631742cc4951ad7705e8a436
php7.4-dba_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:d22fefe69593165b27ef26d4d55776f561573acc
php7.4-dev_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:968044493f15e3f8f6aa797784392e84d73b09bb
php7.4-enchant_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:622fbc28cf5d8fb0d31bb03e420cc55ff57c0983
php7.4-fpm_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:e7630dde615754cd036780537e718c102df2b646
php7.4-gd_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:bb30df9438d4cc16aca03b80ce62226e8cffad69
php7.4-gmp_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:06116bb322f10539d729168de35bd7f976af86f6
php7.4-imap_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:e96053f456a0a2c37179293f95438ed625e769a2
php7.4-interbase_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:e2c46fc31361ab5e12b88f05eb2e536f2613fe9e
php7.4-intl_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:d8d1b30a0558f80df86be0136fd01c22fea63ddc
php7.4-json_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:40581f84b8875176e857d52c881fd51378e35c42
php7.4-ldap_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:cc4d1fe46814dd2ccfe3234683b4233e1f478648
php7.4-mbstring_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:7f7ac38818b63fae980faafa249178fc0d9bdaff
php7.4-mysql_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:046e776cc4fc30a4a136e746954b09bed6779ce3
php7.4-odbc_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:65ec15977e3f886592341e3ca17bc14d90494d0a
php7.4-opcache_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:6bacd1d03f3cf943555d87c9ced358bd0f339c5e
php7.4-pgsql_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:b4a0a76784d7d3fd2a9d3a266c25fba79eac7400
php7.4-phpdbg_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:df68969bb742e02e013529e67e0b900b60d0c485
php7.4-pspell_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:9e55dcebf6521674f4dddf851e8578016119cf10
php7.4-readline_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:ef42716ec11977348d7fc4dd6bc24b3bfbc51733
php7.4-snmp_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:fec1f48a5d0d3b5f2ad7c3f2f0f60cc00f02f398
php7.4-soap_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:81722252105e6fee91b0cfef1f1baba6ef577c8a
php7.4-sqlite3_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:c6d4ad0fd433f317c6005f32c7b2f8cfedc225da
php7.4-sybase_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:d5de0bf57e1afd4af36946cfdf20ec51797fcf58
php7.4-tidy_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:5cc7ecafb11d5190fe296d1de160818f78e75f23
php7.4-xml_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:846abb260cd432a54b6cfbe09b33d23836cbafd3
php7.4-xmlrpc_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:9827a302284c725c24dccd74d252b9a7bedb2148
php7.4-zip_7.4.33-1+deb11u12+tuxcare.els2_armel.deb
sha:49e34e2bfa86c14887eb60938892240a29ff353c

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.