[CLSA-2026:1792683893] Fix of 9 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 15:45:11 UTC
Description:
* SECURITY UPDATE: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109618 * SECURITY UPDATE: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - CVE-2026-109619 * Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run * Behaviour change: session.upload_progress is disabled * Wire php-7.0.33-bug78620.patch into debian/rules; the deb build was missing the zend_mm_alloc_huge() aligned-size overflow check the RPM build applies
Updated packages:
  • alt-php70_7.0.33-151_amd64.deb
    sha:901c95f798dbc79e6bb07ce4f7ae3d701d06a400
  • alt-php70-bcmath_7.0.33-151_amd64.deb
    sha:4e3cf36463f0823d0ed485b1b7068934e312e70c
  • alt-php70-cli_7.0.33-151_amd64.deb
    sha:fa2570c697b55e85c7af182faf83fceaf35a5850
  • alt-php70-common_7.0.33-151_amd64.deb
    sha:ca01fcfc44508e9b8259fe244be5f4fd1a553ccf
  • alt-php70-dba_7.0.33-151_amd64.deb
    sha:f762b933d4bf4a7c41cf92a853fe66e20c73e93c
  • alt-php70-dev_7.0.33-151_amd64.deb
    sha:ab255c1099ea8012d2fa4752a21521eaf0612101
  • alt-php70-enchant_7.0.33-151_amd64.deb
    sha:a42b4f1d2d6245eb2cca5bb9bcfbed2b295185a2
  • alt-php70-firebird_7.0.33-151_amd64.deb
    sha:2e5f914643b3643ce3fc9bc54116cfa8a0f33f4b
  • alt-php70-gd_7.0.33-151_amd64.deb
    sha:ff6bc3ce53e0542aa12bb2e70cfd787704e7b412
  • alt-php70-imap_7.0.33-151_amd64.deb
    sha:71c96ececa3ce0f0b4c0e17c005c23e726feafcf
  • alt-php70-intl_7.0.33-151_amd64.deb
    sha:1e70454435ba956baa860be17d3bdd632021d921
  • alt-php70-ldap_7.0.33-151_amd64.deb
    sha:8c99316d6ecd3789437f39e4dbf58e011d8f1c09
  • alt-php70-mbstring_7.0.33-151_amd64.deb
    sha:5dcee3e7a1ea809932293dde93176d0f290b0f0a
  • alt-php70-mcrypt_7.0.33-151_amd64.deb
    sha:8a97be671a8dcf999c423f97f8ae18e2eccae1dd
  • alt-php70-mysqlnd_7.0.33-151_amd64.deb
    sha:7b79ae7b27192bb397ca03b80f58b6305bf62e4b
  • alt-php70-odbc_7.0.33-151_amd64.deb
    sha:38019ab2d2dbebe4dac432b2705fc3344ccb4c86
  • alt-php70-opcache_7.0.33-151_amd64.deb
    sha:6078222011d8740dd7e302c1dd503f6684885c80
  • alt-php70-pdo_7.0.33-151_amd64.deb
    sha:ef00b4aac80a3b7f6c053b11a98c6d2250ed689a
  • alt-php70-pgsql_7.0.33-151_amd64.deb
    sha:c8c987c39f85ff96dbf7eea31a1073ae652d37b4
  • alt-php70-php-fpm_7.0.33-151_amd64.deb
    sha:ced2254b795e4cadda9a46c78010e1e3b3da1dea
  • alt-php70-process_7.0.33-151_amd64.deb
    sha:5f9499975ac61a180cc91696bad934b678a73668
  • alt-php70-pspell_7.0.33-151_amd64.deb
    sha:5fff95bcb33c173f0d409a4ec3eb6524d98e466d
  • alt-php70-recode_7.0.33-151_amd64.deb
    sha:68644a5f9263ccf852c799ec1d52184101b3fd47
  • alt-php70-snmp_7.0.33-151_amd64.deb
    sha:fc43f647d58581d9ef64ad563e7da9f5cdbc5b30
  • alt-php70-soap_7.0.33-151_amd64.deb
    sha:35565e49f953ae3b7a2e5d086a3a79aa44a4f116
  • alt-php70-tidy_7.0.33-151_amd64.deb
    sha:f77059846826f0c72242c78bbeec0ef59b9c8107
  • alt-php70-xml_7.0.33-151_amd64.deb
    sha:01a51443a3fc3c80a9f0ee993bd6cc20d491a707
  • alt-php70-xmlrpc_7.0.33-151_amd64.deb
    sha:21294ce8f6e8fb57548763415224643ac9869933
  • alt-php70_7.0.33-151_arm64.deb
    sha:d4e04c3fce995431b917713358503a113de18c22
  • alt-php70-bcmath_7.0.33-151_arm64.deb
    sha:50869a4a1440b15a55eb46bacde2e4ca7561fd86
  • alt-php70-cli_7.0.33-151_arm64.deb
    sha:da0c7ba8ad568bbd2eaa6ffd949b1381e553c6c3
  • alt-php70-common_7.0.33-151_arm64.deb
    sha:3199c0cf227341c6e9dd746f8ca0da4bd7f49aa6
  • alt-php70-dba_7.0.33-151_arm64.deb
    sha:130c899d0389eb83bc47adf4727415ea50e04189
  • alt-php70-dev_7.0.33-151_arm64.deb
    sha:01633e5564b57498f700ae80af57ee0f70f521e9
  • alt-php70-enchant_7.0.33-151_arm64.deb
    sha:0d565128d51e57f87a4075a3e33c616b643b917b
  • alt-php70-firebird_7.0.33-151_arm64.deb
    sha:70d2ac3cebb44a8ec8e1798d98e3e15c98dee01a
  • alt-php70-gd_7.0.33-151_arm64.deb
    sha:6cf81dcc9e665240fe8b98735760e5cea119ef6c
  • alt-php70-imap_7.0.33-151_arm64.deb
    sha:23b214272c5bbbb0bb986bb42aa41fc866af3573
  • alt-php70-intl_7.0.33-151_arm64.deb
    sha:d7ea9b879c8a777aef3b2a64cff27c603da09640
  • alt-php70-ldap_7.0.33-151_arm64.deb
    sha:c3163a2fb31b023382a7d9716b2db4a2195a78a7
  • alt-php70-mbstring_7.0.33-151_arm64.deb
    sha:d35fa6c901c89277d197c0001eb820b812901d99
  • alt-php70-mcrypt_7.0.33-151_arm64.deb
    sha:c8580306f9b67c1a11c8f3d9d68669cd4351f40e
  • alt-php70-mysqlnd_7.0.33-151_arm64.deb
    sha:a6d8727778050b7c98407af3e40b4123ced5257e
  • alt-php70-odbc_7.0.33-151_arm64.deb
    sha:5e439168502053f0c34be099a295d43a1d416066
  • alt-php70-opcache_7.0.33-151_arm64.deb
    sha:686e35b4237fb52b950fed9c707e5d09125bfb33
  • alt-php70-pdo_7.0.33-151_arm64.deb
    sha:2e378094d20eb130281ad49698066dcd2fc31265
  • alt-php70-pgsql_7.0.33-151_arm64.deb
    sha:8f7081f8259410853901ccb7df2e2cec136c8a37
  • alt-php70-php-fpm_7.0.33-151_arm64.deb
    sha:887a0b598c4870d70901a0c5903f0bc89f57a95d
  • alt-php70-process_7.0.33-151_arm64.deb
    sha:80b3d4fce28638c3603776f9cd57737e859cbfc9
  • alt-php70-pspell_7.0.33-151_arm64.deb
    sha:723ee032e417bece4771e9812617bf0ccf9acb62
  • alt-php70-recode_7.0.33-151_arm64.deb
    sha:a68b94da979a4338c089eba2945c617e6ddf7298
  • alt-php70-snmp_7.0.33-151_arm64.deb
    sha:4e6b93d71575938c5aaebea8e135db05847546dd
  • alt-php70-soap_7.0.33-151_arm64.deb
    sha:2cbd74bd3cd09054fbb2720fb15d559593e411e8
  • alt-php70-tidy_7.0.33-151_arm64.deb
    sha:5596e76b4314c5d7ac82f554c18820be7fd728ee
  • alt-php70-xml_7.0.33-151_arm64.deb
    sha:aad20f0f95a37eee90bd71234230748ce228cb88
  • alt-php70-xmlrpc_7.0.33-151_arm64.deb
    sha:d62b0bec2743cc13c021efb0cfec8a52fa8cfb58
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.