[CLSA-2026:1792659621] Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 09:00:38 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-8.0-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; upstream 82f8f31b (PHP 8.0 branch) also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • alt-php80_8.0.30-70_amd64.deb
    sha:4ee4aabefaf96006eb10c84f12a70ea5285d4688
  • alt-php80-bcmath_8.0.30-70_amd64.deb
    sha:b5f416b79adb2198f9f32a963c07dea05bdb16d8
  • alt-php80-cli_8.0.30-70_amd64.deb
    sha:841ef30c798493bc28b6b898d9ccee162e5d6f05
  • alt-php80-common_8.0.30-70_amd64.deb
    sha:b03f9e02138e7499c9ebcd8d9f051808c180b095
  • alt-php80-dba_8.0.30-70_amd64.deb
    sha:2d8a8f6e314b372ce0e50060b03068494014d47b
  • alt-php80-dev_8.0.30-70_amd64.deb
    sha:bb602883b2979d5397e16d41cc796dffba69f550
  • alt-php80-enchant_8.0.30-70_amd64.deb
    sha:fd249601bbc2c699b255da482a8b890f33e50398
  • alt-php80-firebird_8.0.30-70_amd64.deb
    sha:18b44e5ea047628333c7f8c95e9609f47eedec80
  • alt-php80-gd_8.0.30-70_amd64.deb
    sha:03adfc4e49840065064c6ff913f8592bf509b021
  • alt-php80-imap_8.0.30-70_amd64.deb
    sha:accf46d0dd5c80bb23bfc5124377e4acd4758d56
  • alt-php80-intl_8.0.30-70_amd64.deb
    sha:0ad6c19af33e9f55b5bc5d0678887dd3402b712f
  • alt-php80-ldap_8.0.30-70_amd64.deb
    sha:2f2f57a7c130c0f7bcd29e7acf4ec9fbd2361e34
  • alt-php80-mbstring_8.0.30-70_amd64.deb
    sha:bbc1ba132835d44e23ed0b1f383a32d908a7bde8
  • alt-php80-mysqlnd_8.0.30-70_amd64.deb
    sha:19d89c86ed6736dfb8050ffd729e6a1ca782234f
  • alt-php80-odbc_8.0.30-70_amd64.deb
    sha:f6e04d607a9e3197679887b9d1bea0fb493596c2
  • alt-php80-opcache_8.0.30-70_amd64.deb
    sha:3bab2ed5cd0c99ba580072c95f3d7d8db4e6811f
  • alt-php80-pdo_8.0.30-70_amd64.deb
    sha:69772cd5c727d0d3f163a3f4ab79816fcf4e7e69
  • alt-php80-pgsql_8.0.30-70_amd64.deb
    sha:0a44a454cbf30c48069bf98d41fb182772b5fbfa
  • alt-php80-php-fpm_8.0.30-70_amd64.deb
    sha:6769462c8e5fc4e4126cd25d3493bd5676faedd5
  • alt-php80-process_8.0.30-70_amd64.deb
    sha:4bab845517f9c12fba4b7e1e17bf44d13640fce9
  • alt-php80-pspell_8.0.30-70_amd64.deb
    sha:d43a9b7cbfed32a462a142ae115786ea50d393a9
  • alt-php80-snmp_8.0.30-70_amd64.deb
    sha:dc5d092afe5f0209e8a7d8e2dc34eacbe5811869
  • alt-php80-soap_8.0.30-70_amd64.deb
    sha:ffe486bd7768138fdd08511215e4cc66f981b67f
  • alt-php80-sodium_8.0.30-70_amd64.deb
    sha:e392eab865e802dcdfbf35861f3ddd0377f42916
  • alt-php80-tidy_8.0.30-70_amd64.deb
    sha:97143f8863446848565d1e9d2f1f18667ffd9a7a
  • alt-php80-xml_8.0.30-70_amd64.deb
    sha:0fc0f243c54e4478815cf0cce38bce685820b3cb
  • alt-php80_8.0.30-70_arm64.deb
    sha:0a3c0a0d1b76a87bfb6a9380c64ef7dbfb732ccc
  • alt-php80-bcmath_8.0.30-70_arm64.deb
    sha:18ab971111e7c376f7e2c5215cb25745380f485e
  • alt-php80-cli_8.0.30-70_arm64.deb
    sha:053de13cd880c5439fa86ea63d48f9b0d806b290
  • alt-php80-common_8.0.30-70_arm64.deb
    sha:ec2cf87da2e4986929e3589d3a473ce5aeae22cf
  • alt-php80-dba_8.0.30-70_arm64.deb
    sha:b2134e9bead856f2774dee322e0e6677abc01dd4
  • alt-php80-dev_8.0.30-70_arm64.deb
    sha:88857376f53185c4fedaa6bae7262428aad0a1b3
  • alt-php80-enchant_8.0.30-70_arm64.deb
    sha:2abe92e3327e5d81a6b9aaeffa550281066ac04d
  • alt-php80-firebird_8.0.30-70_arm64.deb
    sha:4e71b884399072778422c6badfa18906a134cc98
  • alt-php80-gd_8.0.30-70_arm64.deb
    sha:87d28ace13bf5d876489068819422cfe731c29ab
  • alt-php80-imap_8.0.30-70_arm64.deb
    sha:3784ecbbef857a9f480f2a11c39837a46c2819d5
  • alt-php80-intl_8.0.30-70_arm64.deb
    sha:a59dba8e2e58f8cc468006b72a9ed6ed4a048acd
  • alt-php80-ldap_8.0.30-70_arm64.deb
    sha:9106a10be5c888d3dc849a38d7757b2db62fc528
  • alt-php80-mbstring_8.0.30-70_arm64.deb
    sha:c4c0f86edb23e7babac874797fd8e03965865f99
  • alt-php80-mysqlnd_8.0.30-70_arm64.deb
    sha:bc4e2bbd0934a544cfb76647ae6a8fd6409afa02
  • alt-php80-odbc_8.0.30-70_arm64.deb
    sha:e41e719ede4be536a2fa11ab465a32c045cc0590
  • alt-php80-opcache_8.0.30-70_arm64.deb
    sha:d8a63809809865ca61f3dda91ce63b8f364ecc95
  • alt-php80-pdo_8.0.30-70_arm64.deb
    sha:ed9dc8896ef26edc1dbd71e23b62becc84f374a6
  • alt-php80-pgsql_8.0.30-70_arm64.deb
    sha:c69332dfae4f01ecd25f3144325776c36d1c6a59
  • alt-php80-php-fpm_8.0.30-70_arm64.deb
    sha:1dd2aa9d55d5fc593a1531b2bb2ed7db9d11993b
  • alt-php80-process_8.0.30-70_arm64.deb
    sha:b33be592f513fb6b45e8108e6770bd80cfa732ed
  • alt-php80-pspell_8.0.30-70_arm64.deb
    sha:f83b6e4229b196fff6c01d98301d80bc4a9a424b
  • alt-php80-snmp_8.0.30-70_arm64.deb
    sha:42aad7b5aab7e78efc073b4ccec94cd3a73be677
  • alt-php80-soap_8.0.30-70_arm64.deb
    sha:6e8e4511cf0d2a439768c9fa3fdf527ca7b27f23
  • alt-php80-sodium_8.0.30-70_arm64.deb
    sha:59fdb3e7e5083174730990034fd4cf4a3a81dbe8
  • alt-php80-tidy_8.0.30-70_arm64.deb
    sha:6427d871cce29761a0e3e53fcb097d3b48e0d72b
  • alt-php80-xml_8.0.30-70_arm64.deb
    sha:9efb429430f916e497b12db68165febe72f03b86
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.