[CLSA-2026:1792628070] alt-php73: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:34:03 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php73-7.3.33-82.el6.x86_64.rpm
    sha:d543d55261e49f4a801735d25924f90b1db0840f2183a2b914d6a58ddb04b6d3
  • alt-php73-bcmath-7.3.33-82.el6.x86_64.rpm
    sha:c34d9599f2030ecca9ab495d9f62b6bd7bb108eda1abe34183e63655f055174a
  • alt-php73-cli-7.3.33-82.el6.x86_64.rpm
    sha:84ad8028f63e51ae2bfe46ea35a7898c8bc17e816673391eacdd5fda92d33245
  • alt-php73-common-7.3.33-82.el6.x86_64.rpm
    sha:5dff1c539f3ccf46dee008867690482e20e4064a145c1200bf50ce9da492ef9d
  • alt-php73-dba-7.3.33-82.el6.x86_64.rpm
    sha:6db0506c7e6778c058176018cb1da97580ad7b77aeea5b9c5a309f556edecb81
  • alt-php73-devel-7.3.33-82.el6.x86_64.rpm
    sha:619e5272ba8ca5fadee4c1dd73aa8936cc9366dff4c8a9fbc038b630e2cb0d5e
  • alt-php73-enchant-7.3.33-82.el6.x86_64.rpm
    sha:cca7be459dfa9648d8ba9a6db52cda4cb1a7a1e985159558118fb4809baa3db8
  • alt-php73-firebird-7.3.33-82.el6.x86_64.rpm
    sha:a16d4346eae5625cd4b4bee793390160b3b6a23ac909dc6388c8ba8540a82997
  • alt-php73-gd-7.3.33-82.el6.x86_64.rpm
    sha:0db95200d293e4cf3f41e3c22208f1d5c9c7cd4bc1e58adb727b45a7d0068f91
  • alt-php73-imap-7.3.33-82.el6.x86_64.rpm
    sha:15fd9c4e44a392d50af621d9e8b5e32d315db7df47e1308e25353722c7f2f592
  • alt-php73-intl-7.3.33-82.el6.x86_64.rpm
    sha:978f25f03621abcda02e23acd5c5ef11e9d7a21f2c7a1ea8ca2a53e437395370
  • alt-php73-ldap-7.3.33-82.el6.x86_64.rpm
    sha:5f412cd8c1ff4f564dadbbce43f87e5675fe2f2783d36acb5cca68e60402c753
  • alt-php73-mbstring-7.3.33-82.el6.x86_64.rpm
    sha:10b1f85b3b67ec5393fca487d82fbafc27de8d26752d39bdce681f15a01eeb3f
  • alt-php73-mysqlnd-7.3.33-82.el6.x86_64.rpm
    sha:0cb4fb2c8d279010003d04e2cec66f8b8184ae890ba78a03b685720a7c5dad60
  • alt-php73-odbc-7.3.33-82.el6.x86_64.rpm
    sha:cd873cefeed399cf17fc45105570c3fbfa48670440e8770a6cb2daab11c6435c
  • alt-php73-opcache-7.3.33-82.el6.x86_64.rpm
    sha:9476c07c616e557822d4bf3b447a12e7692a8d0791964fd6a67b9653dbaa846e
  • alt-php73-pdo-7.3.33-82.el6.x86_64.rpm
    sha:37b05d0fc865705e3f8f2e6baf04870ce3996bb22bbc23baa688e5ea21dc2a88
  • alt-php73-pgsql-7.3.33-82.el6.x86_64.rpm
    sha:ace1c4b5836e0ffcb777232f3d40246b2f4fbd526590bce7de4b5fc4fc47cef6
  • alt-php73-php-fpm-7.3.33-82.el6.x86_64.rpm
    sha:3fc5ca79c5fa17de15dfc2d6d5b6d0c748a8287dacf76fd8f9c8de7602f7cd95
  • alt-php73-process-7.3.33-82.el6.x86_64.rpm
    sha:b06d70e6409e25c1c7140df51098ac91a61c5dae887db941d601118d25de4430
  • alt-php73-pspell-7.3.33-82.el6.x86_64.rpm
    sha:e616a95961aa0286ae9e67c416ae91cef3c1edc644bdf5c571e97494f90cf6c0
  • alt-php73-recode-7.3.33-82.el6.x86_64.rpm
    sha:6b6665da7c0792ef45b895a8502317fa34812c9deea3f7ceb655256578bea57e
  • alt-php73-snmp-7.3.33-82.el6.x86_64.rpm
    sha:ac1efad14f35e41435f28ee084af753f5a4137318bf086d1193f01b8bf4a28b4
  • alt-php73-soap-7.3.33-82.el6.x86_64.rpm
    sha:fadb082a7db5fd308d0a11181f5dc14b5b3a870da65d4c7335d9f032ef4ddbbb
  • alt-php73-sodium-7.3.33-82.el6.x86_64.rpm
    sha:1e140936724f0b40650fda17846e16b3a019bd83af89aa3de89a04b23f6553c7
  • alt-php73-tidy-7.3.33-82.el6.x86_64.rpm
    sha:1def1349a5fa09293c7ef4f6cf10975060de73498437cf016c63d6c57767f681
  • alt-php73-xml-7.3.33-82.el6.x86_64.rpm
    sha:98c4afa611212d14cc81d1b380fe87a03ad0218ef4f377eeebec8eb7f17f6e52
  • alt-php73-xmlrpc-7.3.33-82.el6.x86_64.rpm
    sha:c712b9f371a10d9a1ea99202651f09ab1b9d6a9f44ddfa9124ecdb778a81f7bf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.