[CLSA-2026:1792627318] alt-php73: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:02:10 UTC
Description:
- CVE-2026-109618: do not bail out from inside the memory manager; an allocation failure now reports to stderr and terminates the worker instead of unwinding through half-updated engine state - CVE-2026-109619: clear the error and exception handler globals at request shutdown so a bailout cannot carry them into the next request - Behaviour change: exhausting memory_limit now terminates the worker process; the fatal error goes to stderr and shutdown functions do not run - Behaviour change: session.upload_progress is disabled
CVEs fixed:
Updated packages:
  • alt-php73-7.3.33-82.el9.x86_64.rpm
    sha:9dc337bb25a0f5fc731f9fe4181cb505da92f24c5856b1c5afb1f13e13549b2d
  • alt-php73-bcmath-7.3.33-82.el9.x86_64.rpm
    sha:e6cef7e760d7d03647c780e4e2eb940f37a687e351c83e7e915384e9dd82b5fb
  • alt-php73-cli-7.3.33-82.el9.x86_64.rpm
    sha:e1b6f90151f3b3e01608be92c472710a73b6f815111796ce9c5f3d4de6b54c16
  • alt-php73-common-7.3.33-82.el9.x86_64.rpm
    sha:d679fdd781c97f4773ebdf507647b334233a2e7a34e1f6819be27105ebb420ec
  • alt-php73-dba-7.3.33-82.el9.x86_64.rpm
    sha:4db67b3719c96f1ad467a058f45fdde5760885d0be783bf29ab0b7165fe1a958
  • alt-php73-devel-7.3.33-82.el9.x86_64.rpm
    sha:14e4b19c19f7ac6fee23198e2d154e8cfc59f88a8cd9bdd28413d16a2da26146
  • alt-php73-enchant-7.3.33-82.el9.x86_64.rpm
    sha:62be44733c63d1c3d5a0cd5e655b215b629a64e8fa917d7a3506c9d4653f9f19
  • alt-php73-firebird-7.3.33-82.el9.x86_64.rpm
    sha:26e8f30c6ba81aa9ca97aa4984fc824aaa2d256ceb4bebcc203506a838e2b382
  • alt-php73-gd-7.3.33-82.el9.x86_64.rpm
    sha:9e719f62948f5f6f155c932387c5b90d0a973a87fab55a82d39e0c394508ce36
  • alt-php73-imap-7.3.33-82.el9.x86_64.rpm
    sha:062f8578d058bb72748086bbb46dc6637ac6a668c3ee10f417837e359ffabc49
  • alt-php73-intl-7.3.33-82.el9.x86_64.rpm
    sha:99f6d22e2652ec4e83ce7997a52c7e8f1bf881575359a6b9daf3a5755ff27147
  • alt-php73-ldap-7.3.33-82.el9.x86_64.rpm
    sha:48ae8a1cd00ddaca45a5b4b48df263a4b3bbb1079af60abd5110bbe10955110e
  • alt-php73-mbstring-7.3.33-82.el9.x86_64.rpm
    sha:3c6c26b40509530bec8dd69004678bb5e8f0edcdff9745a9251b206c2363b053
  • alt-php73-mysqlnd-7.3.33-82.el9.x86_64.rpm
    sha:76e74963f46cde37f653c9f9e3d7c0a8e9498b942942ba3d9aa73b64e2778ee8
  • alt-php73-odbc-7.3.33-82.el9.x86_64.rpm
    sha:5191c0316b9975534173621736551359a97fee736b485d0dceb2fc4273f6751f
  • alt-php73-opcache-7.3.33-82.el9.x86_64.rpm
    sha:fd205a044faea8ad7509caf73cfc4574d2af0148d273d0404f49660a10eb4daa
  • alt-php73-pdo-7.3.33-82.el9.x86_64.rpm
    sha:c24ded457a591186bdefe4075e11668039af2161822d64e53c1e5e75cefe8f94
  • alt-php73-pgsql-7.3.33-82.el9.x86_64.rpm
    sha:725463ad97785fac27b4dca12d0e1c9aa2e5b545806f6561e41cb0babffdcf0b
  • alt-php73-php-fpm-7.3.33-82.el9.x86_64.rpm
    sha:34dcf9e70df1f8d527be583d50c60b08bfa391a6b9849e3aa15ab785d64a4113
  • alt-php73-process-7.3.33-82.el9.x86_64.rpm
    sha:b288d0bb9c241cd8ffcccb8cbce463a27952d33cd08f875bdf9b24fb713c0155
  • alt-php73-pspell-7.3.33-82.el9.x86_64.rpm
    sha:015e3db945f6afdfbfebeef0dded072935b5e245025b1718190443c2a0e01478
  • alt-php73-recode-7.3.33-82.el9.x86_64.rpm
    sha:ddbac53e1191be2ed726e042cad9715e943077811242d9f620bd345b5e5b219b
  • alt-php73-snmp-7.3.33-82.el9.x86_64.rpm
    sha:46e19b1b57e81dc0a5ec8d4059f95cf3872d39ffd0a0364e52407ba6dda8c9ca
  • alt-php73-soap-7.3.33-82.el9.x86_64.rpm
    sha:3dc514dbe34009ec8b0739eb9c782b60c0cdf02bafaba980e296aa610a5c0724
  • alt-php73-sodium-7.3.33-82.el9.x86_64.rpm
    sha:4d076f68d7095eeb1be77950263d6bb49717436c6b8933aa0cd2c8557bd09ba5
  • alt-php73-tidy-7.3.33-82.el9.x86_64.rpm
    sha:9ef1b2302a0cc425da48c1a6ab6b91eecf641b8cba9e1bda5f703832e7fabaf2
  • alt-php73-xml-7.3.33-82.el9.x86_64.rpm
    sha:198a4ab506d43623c309f2f81cff7d334793ef472b69a770169e47b2a69aa3b5
  • alt-php73-xmlrpc-7.3.33-82.el9.x86_64.rpm
    sha:7046db024a7f5b6a705e0bf56e8cde9f1e52f7334f3581a5dc4e41432c6a9847
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.