Release date:
2026-10-22 09:17:54 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator, the multipart
request parser and the session upload-progress path
- debian/patches/php-8.2-CVE-2026-109618-109619.patch: report
allocation failures without re-entering the engine from the allocator
error path, and take substring_conf()'s length as size_t rather
than int, and restrict the session upload-progress handler so it no
longer runs user code while it decodes and re-encodes the session
mid-request (in_rfc1867_update, incomplete-classes-only serialization,
a modules_activated guard and a _SESSION cleanup); upstream 01a40e89
(PHP 8.2 branch)
- CVE-2026-109618
- CVE-2026-109619
Updated packages:
-
alt-php82_8.2.34-6_amd64.deb
sha:2e9132496a66ad1bb633e88c4614725d2b9a5cd1
-
alt-php82-bcmath_8.2.34-6_amd64.deb
sha:aa10cacca1d0ab28c0f6863fe67f99f1a70c01dd
-
alt-php82-cli_8.2.34-6_amd64.deb
sha:39285ad608c677e726fd0f9af1c6e4b3e633ba56
-
alt-php82-common_8.2.34-6_amd64.deb
sha:e398c541bcbd33c1cc1a4edc5b82c91fb4c37b96
-
alt-php82-dba_8.2.34-6_amd64.deb
sha:ba7a651553dfa69969c63d1b71f1e3d0b4236cb6
-
alt-php82-dev_8.2.34-6_amd64.deb
sha:2ffe45c9cf8580e429efd06583e85ae9c4a75259
-
alt-php82-enchant_8.2.34-6_amd64.deb
sha:de67e6bfa10a57daa466fcebeb02c96f85bfa54c
-
alt-php82-firebird_8.2.34-6_amd64.deb
sha:dd43aa80c72f6731c8480606e2b59921b5791c39
-
alt-php82-gd_8.2.34-6_amd64.deb
sha:c3b3e95443470b60dee11534ec53ffd90f1d44e6
-
alt-php82-imap_8.2.34-6_amd64.deb
sha:0ebe165df7dd6e6718df10956ef627b9d41e82d8
-
alt-php82-intl_8.2.34-6_amd64.deb
sha:96b5515b9d770a636a6b8b91e8114fb0c36de62d
-
alt-php82-ldap_8.2.34-6_amd64.deb
sha:43b7ca33b33a4a8e80a98b168b56f04e788d4ac8
-
alt-php82-mbstring_8.2.34-6_amd64.deb
sha:ed697fcd69397b6911a70054884076e0c3038f56
-
alt-php82-mysqlnd_8.2.34-6_amd64.deb
sha:00f59c50340fa322376f6f2096cbe10d37df3936
-
alt-php82-odbc_8.2.34-6_amd64.deb
sha:6ea1770eee9905a61d83903f6c3c31eb6a4278e3
-
alt-php82-opcache_8.2.34-6_amd64.deb
sha:dc3ec41f13e7b8df464b2fba72383c4ff247412f
-
alt-php82-pdo_8.2.34-6_amd64.deb
sha:e4254a707fee1ae6003606dffb5bee22ab7ae809
-
alt-php82-pgsql_8.2.34-6_amd64.deb
sha:4376bee3cd60fbd702f00b2c2053512228ee8438
-
alt-php82-php-fpm_8.2.34-6_amd64.deb
sha:83dcfd81c7796abf5ef18e4bda6a67f24e874416
-
alt-php82-process_8.2.34-6_amd64.deb
sha:52f0d474d3ffde515f45903692ac0c5e8f7a365e
-
alt-php82-pspell_8.2.34-6_amd64.deb
sha:be2d45f581e5a50e2d6e3aa226a839958bb32413
-
alt-php82-snmp_8.2.34-6_amd64.deb
sha:a2240232c88361a100889d1fd27ca4629d3280cd
-
alt-php82-soap_8.2.34-6_amd64.deb
sha:a2df16ee3764f6cae22505943d04f3f040ca61c7
-
alt-php82-sodium_8.2.34-6_amd64.deb
sha:a6b182020a604d3ebb1652cf38a3a452dcdfedf3
-
alt-php82-tidy_8.2.34-6_amd64.deb
sha:d90b87cc281bb6327c4cbc02385e51602e1b6af3
-
alt-php82-xml_8.2.34-6_amd64.deb
sha:0fc84595065264d5f729ff1634a831d78ef51925
-
alt-php82_8.2.34-6_arm64.deb
sha:356cfdfb4bfab4a2bdff71673834b9d4176c15a9
-
alt-php82-bcmath_8.2.34-6_arm64.deb
sha:365819d2f8dc6c1cd909159a40bb36fa8eeaa6bb
-
alt-php82-cli_8.2.34-6_arm64.deb
sha:cb473102409819f7f9523d3b168f7334399ccc1b
-
alt-php82-common_8.2.34-6_arm64.deb
sha:129c3c34c70a09b767a858218561d9e4a09526b9
-
alt-php82-dba_8.2.34-6_arm64.deb
sha:d62803bb138295ec9d292ed59fa97698e5b89d65
-
alt-php82-dev_8.2.34-6_arm64.deb
sha:95e8cde9f1334c87dc433d49814d7531050ebf72
-
alt-php82-enchant_8.2.34-6_arm64.deb
sha:83a3a64b4a7b1ee30f1f2257daaeb418fe0689b1
-
alt-php82-firebird_8.2.34-6_arm64.deb
sha:0a7bf6d1e9874df44998061bcaa577f9ecf22f89
-
alt-php82-gd_8.2.34-6_arm64.deb
sha:6626623244acdcaecde22d176428721fe9d1a712
-
alt-php82-imap_8.2.34-6_arm64.deb
sha:19e2e2b624e9974b60762785260c5516b4e158f0
-
alt-php82-intl_8.2.34-6_arm64.deb
sha:a0a49434bd65f7d9de261eff5bbdf4d4d8046f81
-
alt-php82-ldap_8.2.34-6_arm64.deb
sha:293fb879d28469492093eb2247c87af0048c5010
-
alt-php82-mbstring_8.2.34-6_arm64.deb
sha:f9fb5a4ccc1922a9a73dfa133d43b0143af4e2d5
-
alt-php82-mysqlnd_8.2.34-6_arm64.deb
sha:63fe79db1e0340a26d9fc0ccea71be728f0f6fcf
-
alt-php82-odbc_8.2.34-6_arm64.deb
sha:cd287e81ae49d9da0b5d07093f32cb87d90539f8
-
alt-php82-opcache_8.2.34-6_arm64.deb
sha:b5adcea33e0425bdf6b0739d8d9c723063818f7b
-
alt-php82-pdo_8.2.34-6_arm64.deb
sha:294c81132190482a166d1073bc4e2f60b584971e
-
alt-php82-pgsql_8.2.34-6_arm64.deb
sha:4eeb646ed47c13154e4f9882e6121e7e4740f965
-
alt-php82-php-fpm_8.2.34-6_arm64.deb
sha:71aa9b7cc11dd46cfcda9e0d0e3683e2b6c33e8f
-
alt-php82-process_8.2.34-6_arm64.deb
sha:cafd4ddd2bb8609a80c26f46bce858c0a53d9345
-
alt-php82-pspell_8.2.34-6_arm64.deb
sha:81f5d6d84086eadb34c7e7b436eed0e5a5d928cb
-
alt-php82-snmp_8.2.34-6_arm64.deb
sha:46aa40b2d51f13c5f4e8e64ac6907b0c4e57c571
-
alt-php82-soap_8.2.34-6_arm64.deb
sha:944400ba2dbec653543f030bfc6821dadfc79c85
-
alt-php82-sodium_8.2.34-6_arm64.deb
sha:2c5b4a39cd2346c24d75757dadbac145a4e96364
-
alt-php82-tidy_8.2.34-6_arm64.deb
sha:513e14043e342005e55c0a4865d8439be1e0daf2
-
alt-php82-xml_8.2.34-6_arm64.deb
sha:3c2bd18a03f9ef1f0c2b58141d7811cf88b15187
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
