[CLSA-2026:1792625332] alt-php81: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 23:29:05 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 1d7dec17 (PHP 8.1 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php81-8.1.34-39.el10.x86_64.rpm
    sha:228c72814cbc6008ea714eeb0629da543b2b2dc3be549e29da6eeaa61a284c41
  • alt-php81-bcmath-8.1.34-39.el10.x86_64.rpm
    sha:7b4e06bfa79c6efc95a9c15d338bd752091a02304ece32dc9cdfdb70470df00e
  • alt-php81-cli-8.1.34-39.el10.x86_64.rpm
    sha:8a4ece050b251a4f269ec35ec58efc0e84587051cbe90f5c57000dd5dfa279fd
  • alt-php81-common-8.1.34-39.el10.x86_64.rpm
    sha:911a43046bac0e80e53311170614fb10cdb1b22e5f92b73a1eb746f329dd5024
  • alt-php81-dba-8.1.34-39.el10.x86_64.rpm
    sha:c046468b9349ed48cc692be2bfc25c5b507feee85b8b7a8de155c2113ad543a9
  • alt-php81-devel-8.1.34-39.el10.x86_64.rpm
    sha:9418502799d78f5def63345d531fc9cdbeb1134b2debe21d5b5c0b6b28475e53
  • alt-php81-enchant-8.1.34-39.el10.x86_64.rpm
    sha:1681e223c538da0c73826e7e5afee9962b96a8f67557f2a134bf58d5ac6fca82
  • alt-php81-firebird-8.1.34-39.el10.x86_64.rpm
    sha:961cef319a005a49da3a2fd8118f8f39b170fd03e441da1bfa5a4d856ca3c1e4
  • alt-php81-gd-8.1.34-39.el10.x86_64.rpm
    sha:509bfdf2c77bb3a5e8db89124f93b2dae8083eae63943e99ecad156fbe1e4eed
  • alt-php81-gmp-8.1.34-39.el10.x86_64.rpm
    sha:c5b2cfcc717a071ae394a3108e8708c9687ac85edfe0017583397620e992d43e
  • alt-php81-imap-8.1.34-39.el10.x86_64.rpm
    sha:7c0f1d7c62636f6fdb18e157693f3eb11aeb385c65275d7d86c8ef911db2b3a3
  • alt-php81-intl-8.1.34-39.el10.x86_64.rpm
    sha:16eecaf21cbd9886a21182963da28fabb520663a7dc8f5f7dc6de168d704ef5a
  • alt-php81-ldap-8.1.34-39.el10.x86_64.rpm
    sha:c75073f2ce5dbf1f32b3a6ef3d9352817e4c2c0a09ae269603438e37011b34c5
  • alt-php81-mbstring-8.1.34-39.el10.x86_64.rpm
    sha:996f4149d4790358525e410d690b92676b9f227a0ad83ac2e2058c68fd04142e
  • alt-php81-mysqlnd-8.1.34-39.el10.x86_64.rpm
    sha:af4f7fd0cf759f2864e30b3f040f5ce7e38e41debd813756372348dc60859437
  • alt-php81-odbc-8.1.34-39.el10.x86_64.rpm
    sha:24dd2bf0bb3570c9e8641c52d41c1fa09610f7dd7688895605c3265ce0758167
  • alt-php81-opcache-8.1.34-39.el10.x86_64.rpm
    sha:a7c32dec5d63bed8a25af802529e2926a1af99c303ec1b2822b91c1a86c8128a
  • alt-php81-pdo-8.1.34-39.el10.x86_64.rpm
    sha:b039d6e7dae86229cde31c29c5146d5fb06f80084eb06338c353ed72a27613c0
  • alt-php81-pgsql-8.1.34-39.el10.x86_64.rpm
    sha:823e1518b8ebcb90cd3570399c1260190fb84015aca8fe2b98e72db51e47ce70
  • alt-php81-php-fpm-8.1.34-39.el10.x86_64.rpm
    sha:559ef7e9e4c7e48851df29a65175993298a149e7a909c4b8b69d473a1185b67f
  • alt-php81-process-8.1.34-39.el10.x86_64.rpm
    sha:f04d0408f87ca8655f132a03cc46534a4c02a5bd5583de56bf2b82c1e9f681f4
  • alt-php81-pspell-8.1.34-39.el10.x86_64.rpm
    sha:b71a06b9c982d4f29be10a3f6d90eb226f94a1076ca58769fa50aad811620c9b
  • alt-php81-snmp-8.1.34-39.el10.x86_64.rpm
    sha:8651a992016819dd273addc1259b7e1f55d04b23eb44a2e772e121288ff9690a
  • alt-php81-soap-8.1.34-39.el10.x86_64.rpm
    sha:c65af6a4018b501618746b81942be2dcf37dbec233f08b588a39cfa0f930a991
  • alt-php81-sodium-8.1.34-39.el10.x86_64.rpm
    sha:bb101612b543b42c325605eaf73b465e3bb8fcfe9d86a623cb520e5f22253485
  • alt-php81-tidy-8.1.34-39.el10.x86_64.rpm
    sha:58a78262007a1f67e5d873f8cdab7fd90bb5f86912a75a4818e14b6337eb38bf
  • alt-php81-xml-8.1.34-39.el10.x86_64.rpm
    sha:efd1a6f3380eda538959aa4ffe1d273eeec9c4ec7cacdcea2f1ddfe55e889aef
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.