[CLSA-2026:1792660363] Fix of 11 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 09:13:01 UTC
Description:
* SECURITY UPDATE: security hardening in the memory allocator and the multipart request parser - debian/patches/php-8.1-CVE-2026-109618-109619.patch: report allocation failures without re-entering the engine from the allocator error path, and take substring_conf()'s length as size_t rather than int; upstream 1d7dec17 (PHP 8.1 branch) also disables the session upload-progress callback as upstream does on the EOL branches, so session.upload_progress.enabled no longer has any effect - CVE-2026-109618 - CVE-2026-109619
Updated packages:
  • alt-php81_8.1.34-39_amd64.deb
    sha:4c39571db9f9fcb0d97e0fe0c7ef64505b00152c
  • alt-php81-bcmath_8.1.34-39_amd64.deb
    sha:daf711b3d90edab40192d47a9c507d651ce08b87
  • alt-php81-cli_8.1.34-39_amd64.deb
    sha:c7d54dc8a7bc7aa7816634f5506be5ed2cc37092
  • alt-php81-common_8.1.34-39_amd64.deb
    sha:80a12d8667c50da1527f8d7aab583b2ddeefe502
  • alt-php81-dba_8.1.34-39_amd64.deb
    sha:23ca3bf6fbbb7c7ac01ec279a1248aaddbe126b2
  • alt-php81-dev_8.1.34-39_amd64.deb
    sha:bbd67887cd5cb8f360a2585f49afeaf334f9bb31
  • alt-php81-enchant_8.1.34-39_amd64.deb
    sha:f9148d8772b13ec3e9dd1de038dc6185339f1502
  • alt-php81-firebird_8.1.34-39_amd64.deb
    sha:c7634e66b8910b2f7e9480221613ea8dfe73ce1c
  • alt-php81-gd_8.1.34-39_amd64.deb
    sha:1f97150fbda1ce1e467aed6d425de370bfb9a6ac
  • alt-php81-imap_8.1.34-39_amd64.deb
    sha:3f3c5e98e347f4b556003c1d5e58a36c8408d9e2
  • alt-php81-intl_8.1.34-39_amd64.deb
    sha:ba0f1c9780a8746dddde6654875bf3cfdd8a1819
  • alt-php81-ldap_8.1.34-39_amd64.deb
    sha:8aa8351cddc071218e4532a65f530dca30bdf37a
  • alt-php81-mbstring_8.1.34-39_amd64.deb
    sha:2ff41616f17b983cf3c56d71a27427fd7265b5d7
  • alt-php81-mysqlnd_8.1.34-39_amd64.deb
    sha:8ab3b15141e3d4fd907ef03d92c92f891d9771be
  • alt-php81-odbc_8.1.34-39_amd64.deb
    sha:3eae8fbab3ef8dbd36d9a4465e9f2214da09eab7
  • alt-php81-opcache_8.1.34-39_amd64.deb
    sha:9f04b55a0af44f9f7844889c1c55e37d95d4082d
  • alt-php81-pdo_8.1.34-39_amd64.deb
    sha:0c89be6ee1fc3936b75ec8f7e8f7827baec9ff81
  • alt-php81-pgsql_8.1.34-39_amd64.deb
    sha:b49279d1c5b787826e12a7b09781b5465a401da5
  • alt-php81-php-fpm_8.1.34-39_amd64.deb
    sha:9e45e500812be02011104af5d94a72f8c0687f52
  • alt-php81-process_8.1.34-39_amd64.deb
    sha:3bbea87625e5cbd9ac05d9c70efbcdb1e7483676
  • alt-php81-pspell_8.1.34-39_amd64.deb
    sha:b026600cd8ff7d8ae134a4a82d2dcace615b667c
  • alt-php81-snmp_8.1.34-39_amd64.deb
    sha:5dbb8c251362fb39057d62efa7cb119f210aa8fb
  • alt-php81-soap_8.1.34-39_amd64.deb
    sha:01207f1f4215842ad2299a5c1a99c2441b2079d2
  • alt-php81-sodium_8.1.34-39_amd64.deb
    sha:fdc46033550fd197839ab002a634292fe86c8503
  • alt-php81-tidy_8.1.34-39_amd64.deb
    sha:f103959e9f2b1ce7a1bc80baf8216c8b52514f9e
  • alt-php81-xml_8.1.34-39_amd64.deb
    sha:6f121c6cbc97735a48c22011d1a48e84c42d75ee
  • alt-php81_8.1.34-39_arm64.deb
    sha:db0f5bd89b407da581d54570d0291117178d0b85
  • alt-php81-bcmath_8.1.34-39_arm64.deb
    sha:7ab9d5fa2bb8741e182105943ad6a77d29a6f6cb
  • alt-php81-cli_8.1.34-39_arm64.deb
    sha:023d6bb4f8c39a266177d6aadcd00a6e80c6ed7d
  • alt-php81-common_8.1.34-39_arm64.deb
    sha:5e97beb9008b5241fe1fe94cb11315b5347bd962
  • alt-php81-dba_8.1.34-39_arm64.deb
    sha:b7d11d42f5af848b255f70308756047ac7f0762d
  • alt-php81-dev_8.1.34-39_arm64.deb
    sha:55d7ae94ce0b0ebc9e983f02892a3562eb7b71e6
  • alt-php81-enchant_8.1.34-39_arm64.deb
    sha:14a3e7078e738314030247b7ebed3dd61cf109df
  • alt-php81-firebird_8.1.34-39_arm64.deb
    sha:a0f573ea7e5197262b670e3c3fc9fa548f93a639
  • alt-php81-gd_8.1.34-39_arm64.deb
    sha:6fe6c4b14eafa538b6e4ce09da92d996f9fbca74
  • alt-php81-imap_8.1.34-39_arm64.deb
    sha:f414fe4ca3494e6f0c56ef7708dd243c604b87e2
  • alt-php81-intl_8.1.34-39_arm64.deb
    sha:529fbb434bc4bc0230872ceee917d0121b282c01
  • alt-php81-ldap_8.1.34-39_arm64.deb
    sha:7f2079f4843324bd01f4990a73c8a6ecaf349017
  • alt-php81-mbstring_8.1.34-39_arm64.deb
    sha:91a7b5752fcf5b741a2bf7737b931a6ebd797d63
  • alt-php81-mysqlnd_8.1.34-39_arm64.deb
    sha:6375ccf8a5dda3c8b1a084d0821cd96d0f182668
  • alt-php81-odbc_8.1.34-39_arm64.deb
    sha:fc8ce79aae0a996f8f747fefbca8972759fcc0af
  • alt-php81-opcache_8.1.34-39_arm64.deb
    sha:1d69393cd563cbde3f909ada5c9389b496915f5a
  • alt-php81-pdo_8.1.34-39_arm64.deb
    sha:0b031389eebdac0de13496d4bbacbded2bbd27fc
  • alt-php81-pgsql_8.1.34-39_arm64.deb
    sha:5cd0c016226b1aa40d354c43960e80b25f0afcfc
  • alt-php81-php-fpm_8.1.34-39_arm64.deb
    sha:cc4691f3f99b130cec07fe0588395baecdf544a8
  • alt-php81-process_8.1.34-39_arm64.deb
    sha:b929a892ac261053347bd21d85194b9bb621c186
  • alt-php81-pspell_8.1.34-39_arm64.deb
    sha:fa20e8162c4b2f24a08485c3d2feb8eca09bbae7
  • alt-php81-snmp_8.1.34-39_arm64.deb
    sha:dd8614ea61c00ea6fd6c1b2bac4e7d9ebeb8622d
  • alt-php81-soap_8.1.34-39_arm64.deb
    sha:32f58f3359a7d4298a8aec8f9313bc121c3db90a
  • alt-php81-sodium_8.1.34-39_arm64.deb
    sha:0fe450cfb9a2bea22dedf920bb28a525581aa000
  • alt-php81-tidy_8.1.34-39_arm64.deb
    sha:a136812ba9d113443d5af6ac763720834cef4228
  • alt-php81-xml_8.1.34-39_arm64.deb
    sha:d8838b6dd0b7c3297066b15657150d99ec9a512b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.