[CLSA-2026:1792603707] alt-php80: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 17:28:38 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 82f8f31b (PHP 8.0 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php80-8.0.30-69.el7.x86_64.rpm
    sha:5fb45063bd3de07794cdac929437daed3093bbf20c92010e54367ea39161b526
  • alt-php80-bcmath-8.0.30-69.el7.x86_64.rpm
    sha:64eba2dcfdb6ff7d0f3663b972f8d8af4836f5ae4e60c383beb13f03184b464a
  • alt-php80-cli-8.0.30-69.el7.x86_64.rpm
    sha:d31001cee2242b53ef3298aa432b2ccfb6eb811154fc48a3cd9c4872dce0de73
  • alt-php80-common-8.0.30-69.el7.x86_64.rpm
    sha:d622561b26f43b4764e1e0c6553fe38d9c20c7b326a2893e22a7e358f7486fcf
  • alt-php80-dba-8.0.30-69.el7.x86_64.rpm
    sha:eb7b263626da48ae643e311d501798ceb5ec1f1787dfe9abbdea02df1b402527
  • alt-php80-devel-8.0.30-69.el7.x86_64.rpm
    sha:88628ce5c63c3ddee46d756b3cf671ef2c6018ffca6c7a2d4363178ee740d9f2
  • alt-php80-enchant-8.0.30-69.el7.x86_64.rpm
    sha:7da91908747584680207b7e35e6439f05ce2ac1fbca02e3754c76767100993c7
  • alt-php80-firebird-8.0.30-69.el7.x86_64.rpm
    sha:61b9288bc387924ab29f898529f8cdb7341cb94324e31faf7c20d2f1d73fb565
  • alt-php80-gd-8.0.30-69.el7.x86_64.rpm
    sha:015662a8d2e2caa8c59314ab9b531b62d224a8b59dee83f72e9b9250ffb81533
  • alt-php80-imap-8.0.30-69.el7.x86_64.rpm
    sha:3ad98a307416e8255ee7f22be949e7448010b083ccab9937acb2218e661c36e3
  • alt-php80-intl-8.0.30-69.el7.x86_64.rpm
    sha:7a09de37bf561e2046f064191de60ada69e2f4c5fdb7cd14c8b68fd16f573c05
  • alt-php80-ldap-8.0.30-69.el7.x86_64.rpm
    sha:08f26c1cc7459bdf6aac8973801ab02cd05880d27bbeefc5b49dc1b363c43a19
  • alt-php80-mbstring-8.0.30-69.el7.x86_64.rpm
    sha:7b55ce2c30491383346bf1f5b27c6417947d3dc5cf760e15f8c3669f1da593a1
  • alt-php80-mysqlnd-8.0.30-69.el7.x86_64.rpm
    sha:2375dfb65bb0f253980d7100514653b3fb1758aeec5115f88ea5ce0db93fc3d0
  • alt-php80-odbc-8.0.30-69.el7.x86_64.rpm
    sha:0868baec6e5a96783ad783bfa55548164bafe19b5e7c0e05c0e9196653ccf481
  • alt-php80-opcache-8.0.30-69.el7.x86_64.rpm
    sha:0e8ee7a3cfe4788af40378351141a2db579d475f63bd96d751dc6aa9228885b6
  • alt-php80-pdo-8.0.30-69.el7.x86_64.rpm
    sha:3cb1266d51ec121e58fbf0d477591c8cd386318397c513b03da58fcd85763da3
  • alt-php80-pgsql-8.0.30-69.el7.x86_64.rpm
    sha:0bc1b77f01bd7acfe65f71c06a25d548def281bfc1396ee2c072c5697735f154
  • alt-php80-php-fpm-8.0.30-69.el7.x86_64.rpm
    sha:0ef9d31b8883f50e155d9491cb124e9e55a967ec40a3892fea72e7f934c456a4
  • alt-php80-process-8.0.30-69.el7.x86_64.rpm
    sha:6efb6f50dd4e297183ff7ffbc6565d3edf4b9c82ef68202a3e8c3917c82b1958
  • alt-php80-pspell-8.0.30-69.el7.x86_64.rpm
    sha:44d2f1580eb0c45e0f36121d4dd46cc0f962e085ce8fec1c194ff2f64de298aa
  • alt-php80-snmp-8.0.30-69.el7.x86_64.rpm
    sha:e2d95ef142698ea050622e8ceb1ed33444fddc15199a47cf3e37822e63369092
  • alt-php80-soap-8.0.30-69.el7.x86_64.rpm
    sha:c8545c45dec91729d2cd7e87aa1deea4435e5906dd61b20315a2e7519765a446
  • alt-php80-sodium-8.0.30-69.el7.x86_64.rpm
    sha:506c9c531a10c9cee1d33378e9ec3e9d3f955e34a947f054732c751c1e071a6e
  • alt-php80-tidy-8.0.30-69.el7.x86_64.rpm
    sha:e3ce20af9c4517131fb9d44b620233034453a304013a9fae02c8b0fec3a5ba96
  • alt-php80-xml-8.0.30-69.el7.x86_64.rpm
    sha:41bc3a4988f470ad96d9a37c8e60a546feabe34f0d207be606cb10f2e8727be6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.