[CLSA-2026:1792676865] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 13:47:56 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-100_amd64.deb
    sha:05cc607a19a4abf3cb280d3674be3c786a1d7f3a
  • alt-php72-bcmath_7.2.34-100_amd64.deb
    sha:d8ab152a5421bda1ff772c9144833cb90c73a4ba
  • alt-php72-cli_7.2.34-100_amd64.deb
    sha:0eed0958c964a02de7b0cb997f862ee45f21745d
  • alt-php72-common_7.2.34-100_amd64.deb
    sha:7aeee5248299ecd437f4d84f57793d1a9493f639
  • alt-php72-dba_7.2.34-100_amd64.deb
    sha:dfdb679e4436c71112cc700a0eaa2de194ded34b
  • alt-php72-dev_7.2.34-100_amd64.deb
    sha:2b068967bc0537bb94a57de070232b50e4bd0ed3
  • alt-php72-enchant_7.2.34-100_amd64.deb
    sha:a73f2a2e1be4d9bad2ac2c4ab6f0a60b7ce9b430
  • alt-php72-firebird_7.2.34-100_amd64.deb
    sha:e42f9181273243e87a313fa9a54ec70fcdacf851
  • alt-php72-gd_7.2.34-100_amd64.deb
    sha:bfc71db39cf31ffe19b7da8f96cd93dea79992a1
  • alt-php72-imap_7.2.34-100_amd64.deb
    sha:13495c0db566296b1ca5f87681db355bf41a727d
  • alt-php72-intl_7.2.34-100_amd64.deb
    sha:c8ffe323a005a4ea7823f36386f70f2cbb122cd9
  • alt-php72-ldap_7.2.34-100_amd64.deb
    sha:26a2ed0be0fa8f58668b190ec00a667c8660144b
  • alt-php72-mbstring_7.2.34-100_amd64.deb
    sha:0be180a26c3c8c605c1d4cbab855d610bd9a433b
  • alt-php72-mysqlnd_7.2.34-100_amd64.deb
    sha:ef853be0dd53fb68f7bf757d67e3219d718d385a
  • alt-php72-odbc_7.2.34-100_amd64.deb
    sha:a1fec360c3a0cb2d0d60389d26b6173208a59ac3
  • alt-php72-opcache_7.2.34-100_amd64.deb
    sha:285c85abe5ba1ef5706ea5fea4a3cfdf68bced28
  • alt-php72-pdo_7.2.34-100_amd64.deb
    sha:2e3be0577bdd7b0fb38110a7b1cd98dc0edb8ed2
  • alt-php72-pgsql_7.2.34-100_amd64.deb
    sha:0fa34709dc32d18d07824aa98cdb646525586f49
  • alt-php72-php-fpm_7.2.34-100_amd64.deb
    sha:7e1d9d02c5b4ff6fdc54d6c6f9a4642edb6238ac
  • alt-php72-process_7.2.34-100_amd64.deb
    sha:9cc454a5daa9a36c85f3cbf0ca72dd512351e763
  • alt-php72-pspell_7.2.34-100_amd64.deb
    sha:957b91a1235cbf27447b87170e7a7527a9bd38ce
  • alt-php72-recode_7.2.34-100_amd64.deb
    sha:d59918aabd5d0f4eb1c1732564ee32b39bc49811
  • alt-php72-snmp_7.2.34-100_amd64.deb
    sha:2a7d3e10ba5d093e3a2a41b03c99a5dd68cd990c
  • alt-php72-soap_7.2.34-100_amd64.deb
    sha:e041c4acf78c0afaa44e1e18863a12d8e594d5f2
  • alt-php72-sodium_7.2.34-100_amd64.deb
    sha:fe15e828d2c4740667c3b36ec615d0368c189bab
  • alt-php72-tidy_7.2.34-100_amd64.deb
    sha:53b841fbfe86a74fc7fd2290ff9629f88202ead3
  • alt-php72-xml_7.2.34-100_amd64.deb
    sha:193880e99ff8edccca002412a2bb36bf821380f6
  • alt-php72-xmlrpc_7.2.34-100_amd64.deb
    sha:7b4825ee1c4520f69a4085f50320a233c6160c2b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.