[CLSA-2026:1792630001] alt-php71: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:46:52 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
Updated packages:
  • alt-php71-7.1.33-114.el10.x86_64.rpm
    sha:354585be6c118524e5c4fbd6cd22fcdc2c8e3474c82fbd27f7f0f37ff133cd4c
  • alt-php71-bcmath-7.1.33-114.el10.x86_64.rpm
    sha:094a039ee4e50858fb367e829feb140fcb69dd4fb4edecf796123f4d630cd343
  • alt-php71-cli-7.1.33-114.el10.x86_64.rpm
    sha:5c2fa24b6c6ddb3defad1369890b01422d5f1279af992602177b5a45e891e2ed
  • alt-php71-common-7.1.33-114.el10.x86_64.rpm
    sha:6b7bdc9410fe9e234e03bcab6420ffef58aecaa3a046be18cb9169673994385a
  • alt-php71-dba-7.1.33-114.el10.x86_64.rpm
    sha:c9dc28e5d3177de28683dbdb583dbc0efc45cdccb520f1458cf4ce630a2bad97
  • alt-php71-devel-7.1.33-114.el10.x86_64.rpm
    sha:d2f16894e02dd80c2508148269e2972b240e6c56bf428c8572306590255cfed2
  • alt-php71-enchant-7.1.33-114.el10.x86_64.rpm
    sha:96f6c98238d72e19f04cd036126b1668eef2dd2ece9e9c89e1c8a6f058a7f98e
  • alt-php71-firebird-7.1.33-114.el10.x86_64.rpm
    sha:d7d19d1428314933f16f52203639a5107f3dd1393586f16dc52cb985c72a2698
  • alt-php71-gd-7.1.33-114.el10.x86_64.rpm
    sha:e643352eaf0837934a2f895eda5e3e0725586e9c51ef67d596654de48d37cd17
  • alt-php71-imap-7.1.33-114.el10.x86_64.rpm
    sha:09af1ecba48b9a45985983379de207f3a801fddb1d3ab75d927b114271530bc7
  • alt-php71-intl-7.1.33-114.el10.x86_64.rpm
    sha:0b53ad53a15de40c30dff9f2ee163e7d7529bc1d9a6d1c8be752d09bbfd6aaf8
  • alt-php71-ldap-7.1.33-114.el10.x86_64.rpm
    sha:2226f1d683584a68f73be851d8575ddf98f45ccee6dce34502872f4dedb22083
  • alt-php71-mbstring-7.1.33-114.el10.x86_64.rpm
    sha:99718eca17b169a2389160fd253c0faa731a8c06d59e1c5ae1d355739572a8a4
  • alt-php71-mcrypt-7.1.33-114.el10.x86_64.rpm
    sha:04683bcc3b3883f1d012158b0ea5ecf95431c77af8e2b10b4d7e23d0a540ec6a
  • alt-php71-mysqlnd-7.1.33-114.el10.x86_64.rpm
    sha:7eb89b2d8517f52b4f4d85e50ae85972eddd4f876b928fee17c69ee8b4a08d60
  • alt-php71-odbc-7.1.33-114.el10.x86_64.rpm
    sha:76544e85af54bc387577ce19b18a27f7dbc17f168bf35a81e9155756fd4a3de3
  • alt-php71-opcache-7.1.33-114.el10.x86_64.rpm
    sha:e17148e92c11cd7edae82823805bddcbb8bd13ed4865c790cfefcdaf2941bc94
  • alt-php71-pdo-7.1.33-114.el10.x86_64.rpm
    sha:9e166548962e4c62110d1a01f9df23d1245bd0665f51b74a2ba41499cc7d9cca
  • alt-php71-pgsql-7.1.33-114.el10.x86_64.rpm
    sha:2b37aeaf289ec40634d55512ed194d3c312c200784a8edfa4132214c2c3f5068
  • alt-php71-php-fpm-7.1.33-114.el10.x86_64.rpm
    sha:4416d600dfcdee96d38d8026598b690a09f02ef6e3acf27021410e73a196e2e7
  • alt-php71-process-7.1.33-114.el10.x86_64.rpm
    sha:67ac3dc62ebb36e3e0fc56c06e5fcd3cf206fbaf32f4ea1836d09e6eed2126b7
  • alt-php71-pspell-7.1.33-114.el10.x86_64.rpm
    sha:260ee2132cbeb2bdf77ec0cb87b914f1c6e2fe391d4f6db87a489c72adde749f
  • alt-php71-recode-7.1.33-114.el10.x86_64.rpm
    sha:a87bc7304ebf1adf829c1a7fc367b163ff692a6c9861ea52441e87500745ec6f
  • alt-php71-snmp-7.1.33-114.el10.x86_64.rpm
    sha:3af320779a3dc4f38ce0e6b1da310f5d5b0ddc9a8bc0af4984d120b403cdc203
  • alt-php71-soap-7.1.33-114.el10.x86_64.rpm
    sha:1714d790d4e0748c646fb0b7c6e1b8f0db3c736137f67c9a46f85398a6f61cd3
  • alt-php71-tidy-7.1.33-114.el10.x86_64.rpm
    sha:846f05223510e8e101674b21e00487d45579b3916e43055fb2d59815dfce8b58
  • alt-php71-xml-7.1.33-114.el10.x86_64.rpm
    sha:16a7062a42769dacdfc49044a2501851a5eb3d019f68865b9de2e282633cdd5a
  • alt-php71-xmlrpc-7.1.33-114.el10.x86_64.rpm
    sha:88548c0f727ecf1184b5a477c5ac9ac43315bf09429b87fd53759ec2a46fd630
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.