[CLSA-2026:1792677332] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 13:55:42 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php72_7.2.34-100_amd64.deb
    sha:05cc607a19a4abf3cb280d3674be3c786a1d7f3a
  • alt-php72-bcmath_7.2.34-100_amd64.deb
    sha:732af3bd5488b1c6022c0c7326c1dfbbaf18d526
  • alt-php72-cli_7.2.34-100_amd64.deb
    sha:9dc826660d224694268d64688d3863bae6a79fec
  • alt-php72-common_7.2.34-100_amd64.deb
    sha:433ee0f2b38e5af294be4b4c388780850e396d80
  • alt-php72-dba_7.2.34-100_amd64.deb
    sha:2b10bcb2adaff12a5912cf02c60701d3eea9614c
  • alt-php72-dev_7.2.34-100_amd64.deb
    sha:24b184100c4d3cb3cbc8b7a61554a908d4fe5c7f
  • alt-php72-enchant_7.2.34-100_amd64.deb
    sha:44d1697b46b395119511326fc08740aefba29cf4
  • alt-php72-firebird_7.2.34-100_amd64.deb
    sha:cc3cd4359d6d0aa6528cdb1b08524cc4bb0b97c9
  • alt-php72-gd_7.2.34-100_amd64.deb
    sha:50f230cd459c080cd83c4ffd91035067132c0277
  • alt-php72-imap_7.2.34-100_amd64.deb
    sha:94f10647115c207dc4198e38f9514e38834276ce
  • alt-php72-intl_7.2.34-100_amd64.deb
    sha:0af5f4792a4bae7b87eabc91c620eb7037f0bb29
  • alt-php72-ldap_7.2.34-100_amd64.deb
    sha:eb1559f801e54176f8b2b0b9e89b914cc6a0b4ab
  • alt-php72-mbstring_7.2.34-100_amd64.deb
    sha:37373be9fb0098985b078eac29333aff860faca7
  • alt-php72-mysqlnd_7.2.34-100_amd64.deb
    sha:e31a17888b5b4686bcbe31eb19b7fd7e31316f6e
  • alt-php72-odbc_7.2.34-100_amd64.deb
    sha:b387326a4745296ccc4c73b84d9e3d609c3a9a9b
  • alt-php72-opcache_7.2.34-100_amd64.deb
    sha:63baadb66e4388d62bb675000933d8dce499f20c
  • alt-php72-pdo_7.2.34-100_amd64.deb
    sha:ad71a64f546b857cfd26c15242cfff25378b9a1e
  • alt-php72-pgsql_7.2.34-100_amd64.deb
    sha:130fe604ab1303407cdfc76ce8b9c66a6ad356c8
  • alt-php72-php-fpm_7.2.34-100_amd64.deb
    sha:1a94134dfe774515d07e42c1d32d3135fb8348a9
  • alt-php72-process_7.2.34-100_amd64.deb
    sha:8efc54366d7377a13d8d9e7577748d5af19d7e8d
  • alt-php72-pspell_7.2.34-100_amd64.deb
    sha:cba4b33903d781b8ea06c0c777defea6312168b9
  • alt-php72-recode_7.2.34-100_amd64.deb
    sha:8628c0a9c05ac22b859532c776e7fc0f089dfa9e
  • alt-php72-snmp_7.2.34-100_amd64.deb
    sha:a6043193eb677b533c7149f2d35fe25c2439aa17
  • alt-php72-soap_7.2.34-100_amd64.deb
    sha:4464cb9a6846788aff093aa3dcc2918dffc6eee8
  • alt-php72-sodium_7.2.34-100_amd64.deb
    sha:bcf896d10ee8f657b44225cd2b4dd4d5f38393ed
  • alt-php72-tidy_7.2.34-100_amd64.deb
    sha:1a2fea9622eada2ba53431a40d38e162888a5c4b
  • alt-php72-xml_7.2.34-100_amd64.deb
    sha:09aaef15f6f39e3e03260588b06cf4638ca861cb
  • alt-php72-xmlrpc_7.2.34-100_amd64.deb
    sha:f79695c518dab6a2edb48d35038c0fbcbf4bcd1f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.