[CLSA-2026:1792621135] alt-php81: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 22:19:05 UTC
Description:
- CVE-2026-109618, CVE-2026-109619: security hardening in the memory allocator and the multipart request parser - report allocation failures without re-entering the engine, and take substring_conf()'s length as size_t. Upstream 1d7dec17 (PHP 8.1 branch) Also disables the session upload-progress callback, as upstream does on the EOL branches - session.upload_progress.enabled no longer has any effect.
Updated packages:
  • alt-php81-8.1.34-39.el7.x86_64.rpm
    sha:b57048ef7f6e72621f7601212c8fdd3728c48858d21be599ef0a5ff8c9e3d3a4
  • alt-php81-bcmath-8.1.34-39.el7.x86_64.rpm
    sha:2cfc28bc00241aaf839349c908aa523cc280be01b98a4b35453f7f0d853714d5
  • alt-php81-cli-8.1.34-39.el7.x86_64.rpm
    sha:ccac106aec6380a130ccf7c01ce56296028029c96a431b7244e2e0bf4f62e5c1
  • alt-php81-common-8.1.34-39.el7.x86_64.rpm
    sha:3db3c651180579b59e183a6f6c446b46ce8b1fd906bfb714862121ee75b7c663
  • alt-php81-dba-8.1.34-39.el7.x86_64.rpm
    sha:ea604602eb806cd425dcd454d16b5aaaf045157290b15fed1e698bdce9ac811a
  • alt-php81-devel-8.1.34-39.el7.x86_64.rpm
    sha:f230ed468a88ca568c75409b7e7d69b590dd01ac5f7303277c5ae2a2a90c25bd
  • alt-php81-enchant-8.1.34-39.el7.x86_64.rpm
    sha:813c161ff8d448b674026746c3756a3d197f58afa4964cf92b035251d9e0ded7
  • alt-php81-firebird-8.1.34-39.el7.x86_64.rpm
    sha:79c633a33115329cd581261416bafd156cd69e7fcd939a50e2256b16651adbcc
  • alt-php81-gd-8.1.34-39.el7.x86_64.rpm
    sha:39022539d03903f88c3add5c6e234f5a47411a821385d9cfdf8f65cc9337a7d3
  • alt-php81-gmp-8.1.34-39.el7.x86_64.rpm
    sha:8d9b516b29a01ddfb22c3b11d7b2e4602d8b08a7ecf89553117d72929ecdebe9
  • alt-php81-imap-8.1.34-39.el7.x86_64.rpm
    sha:fd228fcfd090a07c1c0cd1a5e9c40e1502738b43bf50de35f4a7fac46b92dd31
  • alt-php81-intl-8.1.34-39.el7.x86_64.rpm
    sha:1c4542f16100c223de5228fd9c8c16914911121210e86422efaa93b08adad430
  • alt-php81-ldap-8.1.34-39.el7.x86_64.rpm
    sha:352556137dc2f5692ef8401ea758ee2150a0917ff62361b6c2e697781d5e33f5
  • alt-php81-mbstring-8.1.34-39.el7.x86_64.rpm
    sha:267828f17b1f302f6861c08964fe7dc4340313cc80319d2b94bf04222ef385fe
  • alt-php81-mysqlnd-8.1.34-39.el7.x86_64.rpm
    sha:f67d41ad5bff609fa84d349a6d56eb1dd69ae21ff7042ff1407c38270cda5535
  • alt-php81-odbc-8.1.34-39.el7.x86_64.rpm
    sha:0b7af5cf1f6950003ac4b31a532ca392e47ba724b33b096d233e18720923b16d
  • alt-php81-opcache-8.1.34-39.el7.x86_64.rpm
    sha:7b74465a81fc23cd2357b4a111736c2637f67e9684821b05ba0700e1bd0dfb7a
  • alt-php81-pdo-8.1.34-39.el7.x86_64.rpm
    sha:3eaab09843e4b962cb9a052db88359b248f795631c1983fc8d7d87511676f6cd
  • alt-php81-pgsql-8.1.34-39.el7.x86_64.rpm
    sha:6c6276f09ba841b4084114aa348f034282046fce8b1cd0fe4fda428188fcf97e
  • alt-php81-php-fpm-8.1.34-39.el7.x86_64.rpm
    sha:74f513aa9cf7b96ae71545c547fd9d9e812e48166896d664e20f53c76b98458c
  • alt-php81-process-8.1.34-39.el7.x86_64.rpm
    sha:2c677a5c03ff41260b270dccbf191933d5fa7020b91d0c8cf56979a5b224e119
  • alt-php81-pspell-8.1.34-39.el7.x86_64.rpm
    sha:9f67e21142ae24d4f0fce79b613772e6ec0162f844c75d1574941c93da780821
  • alt-php81-snmp-8.1.34-39.el7.x86_64.rpm
    sha:98759ade36b145f2cf0df3d20a3bcc732b9da12ee1dd734a4c869e277506007c
  • alt-php81-soap-8.1.34-39.el7.x86_64.rpm
    sha:88a0fa1b1f497773a266162c2721fa90d862eaa21ca4c71555013279793ef777
  • alt-php81-sodium-8.1.34-39.el7.x86_64.rpm
    sha:4cb9290201faccf4c7c5c90342dae5c79598c389048c87aec0123a627113c824
  • alt-php81-tidy-8.1.34-39.el7.x86_64.rpm
    sha:ef6920165237eef0795ae8036dea6f861d75ed8672bd6a90c321f19fcbad5d72
  • alt-php81-xml-8.1.34-39.el7.x86_64.rpm
    sha:a3935760aeeacf25a68b935ecf1b51e53c3f03131580004ebf193aab3e3b870d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.