[CLSA-2026:1792679566] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-22 14:33:00 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php71_7.1.33-116_amd64.deb
    sha:92bbdc2e80222acb469e95f88b2c3cca5166b1e9
  • alt-php71-bcmath_7.1.33-116_amd64.deb
    sha:88f0b2fb4826236a2209abdc6cb156ea39b8e9b4
  • alt-php71-cli_7.1.33-116_amd64.deb
    sha:256f3ca0beafedc50c1eeb502506489746d6efc6
  • alt-php71-common_7.1.33-116_amd64.deb
    sha:5bbef6b80329e445dc1b0669153a9343b920311a
  • alt-php71-dba_7.1.33-116_amd64.deb
    sha:13a2c08eb57e18c4ec4f50b0fd7623b8150df424
  • alt-php71-dev_7.1.33-116_amd64.deb
    sha:39d5c481eb8ce35444853b5417534c88509ec402
  • alt-php71-enchant_7.1.33-116_amd64.deb
    sha:02f3fccc774aa3e62fb695d0ae2b3f3295a04816
  • alt-php71-firebird_7.1.33-116_amd64.deb
    sha:e1e55e8c722937f86578b299cf198bb3d0114603
  • alt-php71-gd_7.1.33-116_amd64.deb
    sha:7774f356a401ba1d3913e1203610bbb391ef9554
  • alt-php71-imap_7.1.33-116_amd64.deb
    sha:0ac718fae6b8578258e0d8d52f3248bf32b40f0c
  • alt-php71-intl_7.1.33-116_amd64.deb
    sha:7fb6e69954eff6e50aec611f25e23b918f34df15
  • alt-php71-ldap_7.1.33-116_amd64.deb
    sha:8d6b2692ac303a25c746e9b082d9f658d38005ce
  • alt-php71-mbstring_7.1.33-116_amd64.deb
    sha:e7969c572c15979f74898316148b4d9f0b613f84
  • alt-php71-mcrypt_7.1.33-116_amd64.deb
    sha:1e8d138a67f846b6e703720c72b6ff7bf2a1afb1
  • alt-php71-mysqlnd_7.1.33-116_amd64.deb
    sha:b488c4107a590f97d400e7822b31331af10ca883
  • alt-php71-odbc_7.1.33-116_amd64.deb
    sha:e5fdc2855b12ca61f5c10c7c6b9327c2f52e5992
  • alt-php71-opcache_7.1.33-116_amd64.deb
    sha:b97035d59ab8af0960469d7c15aa2f3a0638154c
  • alt-php71-pdo_7.1.33-116_amd64.deb
    sha:40265db3f80afc223747d189832569197a164507
  • alt-php71-pgsql_7.1.33-116_amd64.deb
    sha:95c80005de7e00f04811a06ed716e9481597f41b
  • alt-php71-php-fpm_7.1.33-116_amd64.deb
    sha:fdf7c232589db579f787e66f08ab3ea1e7859cfc
  • alt-php71-process_7.1.33-116_amd64.deb
    sha:e11a9c9d19f36562d5ed704849f976d1044fc15a
  • alt-php71-pspell_7.1.33-116_amd64.deb
    sha:a21a13f4e9f05312b98c817d4f0bd6c6719f0d1d
  • alt-php71-recode_7.1.33-116_amd64.deb
    sha:54c2bedbb42001c4444f4f13fdb9643ef2401a55
  • alt-php71-snmp_7.1.33-116_amd64.deb
    sha:7d2fe5f4d2c36eeec29deb93c8ab4544a7d1ecd5
  • alt-php71-soap_7.1.33-116_amd64.deb
    sha:36149098af4b6e5d775bc60229fc3b33d3932a9d
  • alt-php71-tidy_7.1.33-116_amd64.deb
    sha:c45d71851b0db73bd5adedab0f879f428070bef4
  • alt-php71-xml_7.1.33-116_amd64.deb
    sha:38545d0fd57c9d11ccfd3515e094a199052391bd
  • alt-php71-xmlrpc_7.1.33-116_amd64.deb
    sha:f9f745d6ccbb1ba98aa03587c19e1b7c131f792d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.