[CLSA-2026:1792658458] Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 08:41:18 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-7.4-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; upstream 712e60f9 (PHP 7.4 branch) also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • alt-php74_7.4.33-81_amd64.deb
    sha:82e3718db525323dc1440a4af24e5ae397870d42
  • alt-php74-bcmath_7.4.33-81_amd64.deb
    sha:f285fcd67932e401216c653b0617c474f5301bd6
  • alt-php74-cli_7.4.33-81_amd64.deb
    sha:aafae761198a17bfda90afc79fb523e9e85a0c73
  • alt-php74-common_7.4.33-81_amd64.deb
    sha:0edf24a0f56cd2ac1ac66bd4bbee2d3246ee3ceb
  • alt-php74-dba_7.4.33-81_amd64.deb
    sha:abd52790f731b2a5988bb3c8b5c61da6911032e4
  • alt-php74-dev_7.4.33-81_amd64.deb
    sha:2558b22bb69fa4c46387d9faf391e93ea6d7c2df
  • alt-php74-enchant_7.4.33-81_amd64.deb
    sha:7244b33100da2af240f5c6c291e9fde2dd567242
  • alt-php74-firebird_7.4.33-81_amd64.deb
    sha:48d7f3b61e52025845a1456b66c83d06f9c7638d
  • alt-php74-gd_7.4.33-81_amd64.deb
    sha:575f8578c732c3029b671b9ede14aba8b95beac5
  • alt-php74-imap_7.4.33-81_amd64.deb
    sha:62e1a9f26a8ee62f9684bfbf72ea67ceed8f8ded
  • alt-php74-intl_7.4.33-81_amd64.deb
    sha:5c7aa8c2cce8dca3331753c2eabdc0ca5b98f332
  • alt-php74-ldap_7.4.33-81_amd64.deb
    sha:59481f205aa6011da4cbc4d04479f9157265ec76
  • alt-php74-mbstring_7.4.33-81_amd64.deb
    sha:9c15ed122cd64c41bc3b1b0716cb014f0ae4d315
  • alt-php74-mysqlnd_7.4.33-81_amd64.deb
    sha:7afc08fec87273ea51febf29ed9d3a606f4d35ca
  • alt-php74-odbc_7.4.33-81_amd64.deb
    sha:a0cba293127f5a0fc3877732d4ee89e788b57586
  • alt-php74-opcache_7.4.33-81_amd64.deb
    sha:7803314f51eccb8f3d23e65136fd52ae76526e5e
  • alt-php74-pdo_7.4.33-81_amd64.deb
    sha:d6d80330d8eb7bb24e33a49567bfe92b185a3d0c
  • alt-php74-pgsql_7.4.33-81_amd64.deb
    sha:8072eaf074b558c0642b109b8dade4c9689791cb
  • alt-php74-php-fpm_7.4.33-81_amd64.deb
    sha:b99d4782e197d0fe420e4c753b275cb0dcbadbea
  • alt-php74-process_7.4.33-81_amd64.deb
    sha:e17188dad63e0a652741393d4fafced667146eb0
  • alt-php74-pspell_7.4.33-81_amd64.deb
    sha:1693746f55949175403f5fb858f383a96c7cc94c
  • alt-php74-snmp_7.4.33-81_amd64.deb
    sha:1e578df2184bc5c4a5d3e0ca9c034366adb13dba
  • alt-php74-soap_7.4.33-81_amd64.deb
    sha:298cfd78fde6e2e608e6a5495b3b5af6cce151df
  • alt-php74-sodium_7.4.33-81_amd64.deb
    sha:dd5a8199e09f24cc3bb924960045e4fbfe60a7f8
  • alt-php74-tidy_7.4.33-81_amd64.deb
    sha:5ba1825270751272e948a80df7b227bd53e0acbd
  • alt-php74-xml_7.4.33-81_amd64.deb
    sha:53efaac05f074bf61437406f985ff84aef7ec4c7
  • alt-php74-xmlrpc_7.4.33-81_amd64.deb
    sha:ab5ec5adcc7c2d0f324fbc52ad8df03b8d6dc652
  • alt-php74_7.4.33-81_arm64.deb
    sha:e1631102ab283d645ddb1bd9fee36ae86a15a382
  • alt-php74-bcmath_7.4.33-81_arm64.deb
    sha:dffeb444de55a542972cdaf4cdf1ae2cc9fcfc5d
  • alt-php74-cli_7.4.33-81_arm64.deb
    sha:9bbd7a2411c5b9951b801faa9464e224eeaf9113
  • alt-php74-common_7.4.33-81_arm64.deb
    sha:92030dde9384b1667fb5da42d245a15e77d5f731
  • alt-php74-dba_7.4.33-81_arm64.deb
    sha:9c9387dc0a30ae435d1891c59480ae32a46a457e
  • alt-php74-dev_7.4.33-81_arm64.deb
    sha:d7dc7ec78f4fef4a576d08bd41775f0c12cd3fd7
  • alt-php74-enchant_7.4.33-81_arm64.deb
    sha:583b20819e316c50d0125c252b1f33aae029017b
  • alt-php74-firebird_7.4.33-81_arm64.deb
    sha:59322fa0a005292d46686bc325a7b7b701caa6a2
  • alt-php74-gd_7.4.33-81_arm64.deb
    sha:a1d1d5b049fa7745a69cfb05fe7219ea047a18ff
  • alt-php74-imap_7.4.33-81_arm64.deb
    sha:2e05d787fa2d732ef7776b9cacb0634747666ca4
  • alt-php74-intl_7.4.33-81_arm64.deb
    sha:dcf52442a3192cd6504f42d8b6af18f79bf818bb
  • alt-php74-ldap_7.4.33-81_arm64.deb
    sha:2a2a77826013733811ef5a51d277ab1a25d62384
  • alt-php74-mbstring_7.4.33-81_arm64.deb
    sha:89f68c391320da0cd585b3f7b8d18e9303c56860
  • alt-php74-mysqlnd_7.4.33-81_arm64.deb
    sha:e53964decdb2428e836103ded05428c57fd0749c
  • alt-php74-odbc_7.4.33-81_arm64.deb
    sha:4c06b9e5df57bf5cf4119b2a49152ba7f09740ad
  • alt-php74-opcache_7.4.33-81_arm64.deb
    sha:ad1df06390900c120afe86d9ac29429294f1bed1
  • alt-php74-pdo_7.4.33-81_arm64.deb
    sha:dde7cf140f29e705f033b31dbd47db669bf3de8f
  • alt-php74-pgsql_7.4.33-81_arm64.deb
    sha:5f70dac9342c836eee93961c599cd6d31ddaefa5
  • alt-php74-php-fpm_7.4.33-81_arm64.deb
    sha:d9bc4b4e8f762fb92f48e2bd764552314ec5a0bf
  • alt-php74-process_7.4.33-81_arm64.deb
    sha:71488170fb65ef53c3ca6d05a06c659a557aa220
  • alt-php74-pspell_7.4.33-81_arm64.deb
    sha:d6975ace9af5e46040818441bfa276399fde12ac
  • alt-php74-snmp_7.4.33-81_arm64.deb
    sha:98dbec3cc188aa7bcaa21c872f3de6e6546ea481
  • alt-php74-soap_7.4.33-81_arm64.deb
    sha:97d3d5c8a173a431a858d0b362d1ae090470846a
  • alt-php74-sodium_7.4.33-81_arm64.deb
    sha:5f03ddffadf6e72ac96fd4ffb4196f57356d68f8
  • alt-php74-tidy_7.4.33-81_arm64.deb
    sha:c305e1ad079e844d4a297b97bee4a280638ce802
  • alt-php74-xml_7.4.33-81_arm64.deb
    sha:7bd7f6e41d07f244554e5072ec44c8046dd5848a
  • alt-php74-xmlrpc_7.4.33-81_arm64.deb
    sha:9e1b23e48f1707d4f213b294c8a4c16cb4ca29af
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.