[CLSA-2026:1792630587] alt-php70: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:56:38 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled - Wire php-7.0.33-bug78620.patch into debian/rules; the deb build was missing the zend_mm_alloc_huge() aligned-size overflow check the RPM build applies
Updated packages:
  • alt-php70-7.0.33-148.el6.x86_64.rpm
    sha:659d5b4ce2b7c3a4d3aed2776d0fbbcef58eb8c26d91a03cd55e1496f88749a2
  • alt-php70-bcmath-7.0.33-148.el6.x86_64.rpm
    sha:247b0057b8318df7ea4d6234bf2724d2b229d8df0f1692fdc728517f00c850ab
  • alt-php70-cli-7.0.33-148.el6.x86_64.rpm
    sha:c226233941565724adfca2324a6e3dfc10e267f7daeb7d5fd893c03437d307c7
  • alt-php70-common-7.0.33-148.el6.x86_64.rpm
    sha:0970ba3f4d96822a07be20a4fa5d828fa4839e8461d789f10b70a4356efb7c23
  • alt-php70-dba-7.0.33-148.el6.x86_64.rpm
    sha:55c725353554929ddc23dd45be55a5a8f61655e613b3262829f4a660e62ea1ec
  • alt-php70-devel-7.0.33-148.el6.x86_64.rpm
    sha:4f4ead7848713958c11d7416e2cf719e30823430a5e8745bf6db41edac0f6dee
  • alt-php70-enchant-7.0.33-148.el6.x86_64.rpm
    sha:53d4025eee178e528dcae25211b8bcd6dabf5290a8dbaa7e035457d4b184cbf5
  • alt-php70-firebird-7.0.33-148.el6.x86_64.rpm
    sha:88d7b1ca92c73b5d35d0a4cf7f59dbca3b2fd69aa7ef953ebafb6bffe74f03e6
  • alt-php70-gd-7.0.33-148.el6.x86_64.rpm
    sha:e3e3e8f73a1f95775cbc40f702c799313ed9a09a05c6a73619abed12c258a1cd
  • alt-php70-imap-7.0.33-148.el6.x86_64.rpm
    sha:eeba25fdf987fbff73e19b9093e6c312c19d8250ebcd6c7c236cf9a2e4e8acae
  • alt-php70-intl-7.0.33-148.el6.x86_64.rpm
    sha:41d98ba6533a952e6fe5407583bee13a68947a79da26ba8afd42e66df22cd411
  • alt-php70-ldap-7.0.33-148.el6.x86_64.rpm
    sha:dd8c58a360227f88df1941801899ba29f106a42c645ea7a0707349390f719f7b
  • alt-php70-mbstring-7.0.33-148.el6.x86_64.rpm
    sha:cafb51935cf745644b451418566747a776cd5aecead21e52e70d27bcfc9a0df1
  • alt-php70-mcrypt-7.0.33-148.el6.x86_64.rpm
    sha:b6ccf5b85d48e3f939e4fb7058c8a346c9bb22186eeaef996690d525b4bc27d2
  • alt-php70-mysqlnd-7.0.33-148.el6.x86_64.rpm
    sha:189abcc1448541ec3536e01a71ce8eb2ef167a45852383ef60d0e6ddca585e52
  • alt-php70-odbc-7.0.33-148.el6.x86_64.rpm
    sha:fd12ead5efb80427754585635539fbac4bd1de6438063c35a79d157475f6a58a
  • alt-php70-opcache-7.0.33-148.el6.x86_64.rpm
    sha:765940199e95102a6a70bcad681ca36623e4fe4ef5f55980d619e01515a8233e
  • alt-php70-pdo-7.0.33-148.el6.x86_64.rpm
    sha:7a11ba65f2e4d908eaf01440759e6f18cb94172f5ccc1b5c18d469c09235638d
  • alt-php70-pgsql-7.0.33-148.el6.x86_64.rpm
    sha:d7af883e57a2e0360b49b1ce3725c802eb3caa910f530001121040267cf530a4
  • alt-php70-php-fpm-7.0.33-148.el6.x86_64.rpm
    sha:bc2b0c2338104c6d6a2694e98088a30fc50a499bfff5807f21cf00cf158ce443
  • alt-php70-process-7.0.33-148.el6.x86_64.rpm
    sha:9e51eda3e79451624e6828ebeea58220c557f5292d95c2baed977db4bfbc47da
  • alt-php70-pspell-7.0.33-148.el6.x86_64.rpm
    sha:8e966bc5ff15a7ebd8ca6bd62e8035d1e0a338dd256dd5667028b694454477ec
  • alt-php70-recode-7.0.33-148.el6.x86_64.rpm
    sha:7a80bd0c88d64e912e88fcfe32956fe7efbf3637ed4e183c4802057ef8ab830f
  • alt-php70-snmp-7.0.33-148.el6.x86_64.rpm
    sha:a2eb08e4ea89172d21af48638021e534c743cc13570e744c4b95b79602582316
  • alt-php70-soap-7.0.33-148.el6.x86_64.rpm
    sha:4af9021db275e6f20949a3ac7e93c191b6689ee0099b7a19da4aa1092db5c0a4
  • alt-php70-tidy-7.0.33-148.el6.x86_64.rpm
    sha:05d4213755507d08f42cbe3616d82a3172547ecdf10abe9589c8e81baa44f712
  • alt-php70-xml-7.0.33-148.el6.x86_64.rpm
    sha:91a113b083f6dc2a69de5222f2cd9634fd897b3fb0c94d94917afc0065f547f3
  • alt-php70-xmlrpc-7.0.33-148.el6.x86_64.rpm
    sha:ba0d66b77d83772a7b93bf1fe1ddb9357c34ffb5582920e1603cfc3a66985023
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.