[CLSA-2026:1792624278] alt-php83: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:11:29 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator, the multipart request parser and the session upload-progress path - report allocation failures without re-entering the engine, take substring_conf()'s length as size_t, and stop the upload-progress handler running user code while it decodes and re-encodes the session mid-request. Upstream 3c832b52 (PHP 8.3 branch)
Updated packages:
  • alt-php83-8.3.35-6.el10.x86_64.rpm
    sha:3ce189f6e3320310ddb61974872f1a590bc08097301cc2f4a5b9835c36296832
  • alt-php83-bcmath-8.3.35-6.el10.x86_64.rpm
    sha:33f984afc8cb05835584b8e75e18c42afff903ef2d16617d92ef9f8835659a5a
  • alt-php83-cli-8.3.35-6.el10.x86_64.rpm
    sha:16a7fe56a9b30c755f639215f2d4fc437d5b076ecea61a21676b6b05875d4dcb
  • alt-php83-common-8.3.35-6.el10.x86_64.rpm
    sha:f7af8f4becce160789d6b7cd90e960f506944cf10c3a6494f77b00531d594139
  • alt-php83-dba-8.3.35-6.el10.x86_64.rpm
    sha:5b0e6df5eb66990ea1fdc8a91ec392c50e8de7df2743ef4c50096440e0780aca
  • alt-php83-devel-8.3.35-6.el10.x86_64.rpm
    sha:2f8c29d890f06e67965317f3e3d2952ae53d587a132edff177a1fa26cf316a0a
  • alt-php83-enchant-8.3.35-6.el10.x86_64.rpm
    sha:4e87b3eb8ed76784e5fa9ef7b8c63637dd2af43da330aa1fa6477735040e5cdb
  • alt-php83-firebird-8.3.35-6.el10.x86_64.rpm
    sha:af6114119b18b0f08dc8d221f189a329a89e370f2685c912f971e6df07a55e5a
  • alt-php83-gd-8.3.35-6.el10.x86_64.rpm
    sha:eaa294f4db79e25cbc53d58e00048b2691d6fd96acfd8cef71a2e961b65ef8e3
  • alt-php83-gmp-8.3.35-6.el10.x86_64.rpm
    sha:5fa72a775ef743955174365b230b5a58b5508b0833d66223fb84c83fa3884f4d
  • alt-php83-imap-8.3.35-6.el10.x86_64.rpm
    sha:59ea13534e748f892c1ff85b58c3638505bd6f1026fc43d3f24448ee4754b555
  • alt-php83-intl-8.3.35-6.el10.x86_64.rpm
    sha:287f80406db7ea3091665c4cabf84349b4bee0eedc45fa4ec1e88af5dc73a21a
  • alt-php83-ldap-8.3.35-6.el10.x86_64.rpm
    sha:44196ffb074f240bf8a09af12f75b92c009a4d495d163813d08bf2fba5c51da4
  • alt-php83-mbstring-8.3.35-6.el10.x86_64.rpm
    sha:b857cd6eb720b6814fd26dedae5aa3054318789bc10486f298ce06b10426591a
  • alt-php83-mysqlnd-8.3.35-6.el10.x86_64.rpm
    sha:fe7a14a6f8cdf791c220e42e565bbe45da1166516f0bcd4f0fd8a2f5d6979c72
  • alt-php83-odbc-8.3.35-6.el10.x86_64.rpm
    sha:b6a068feae0664704e4c132a22d05c817a89ecedebb5bc772593427f621609c9
  • alt-php83-opcache-8.3.35-6.el10.x86_64.rpm
    sha:c6b81b0a4431cb67f9ad725539482e09a24f826effb9106ab7deed5e948c14fd
  • alt-php83-pdo-8.3.35-6.el10.x86_64.rpm
    sha:399c868a9cc1ce2e8a7118f7cde0b036bfb1ebae04950bb83d02bca3832d2e94
  • alt-php83-pgsql-8.3.35-6.el10.x86_64.rpm
    sha:c763a780cdb49dd449d90b6189dfd6c2a853350c6cd5fc2b3b96ac9f8d1870f3
  • alt-php83-php-fpm-8.3.35-6.el10.x86_64.rpm
    sha:73c9c26b36971301f6dd491e0817d11793df11bdb056e0021c57793c34b8529a
  • alt-php83-process-8.3.35-6.el10.x86_64.rpm
    sha:3c55e39c8dd0c0b50bb25f6f3ce41df812308559b24a3cbdfbfbe137fe564cdb
  • alt-php83-pspell-8.3.35-6.el10.x86_64.rpm
    sha:87fb3528d6ca488cb6b5c21b935ccbfbd12a36e2848350a7972dde4e2b1f24de
  • alt-php83-snmp-8.3.35-6.el10.x86_64.rpm
    sha:d05ae17f14f7d27bb828fc1139bf2e8d8b8bb03c4b1f4f1f60481516b4eb8c82
  • alt-php83-soap-8.3.35-6.el10.x86_64.rpm
    sha:568a238f3797d2fa57a19a597d238fffd99219558f6cdf0072cc4579909e8925
  • alt-php83-sodium-8.3.35-6.el10.x86_64.rpm
    sha:f2be43bc771f5a8d567e2bcd1fc50c9d114b069e8cd4fceca4e419ed576ded94
  • alt-php83-tidy-8.3.35-6.el10.x86_64.rpm
    sha:fc30c84c6073e7e793d18b332fed288de8c3071c5abe057c64dd02dfc5cb85c8
  • alt-php83-xml-8.3.35-6.el10.x86_64.rpm
    sha:9e1743e2877d9b578ca1f9cd30e475fae53f5de8df5a758d015052cdfc1eec96
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.