[CLSA-2026:1792599426] Fix CVE(s): CVE-2026-109618, CVE-2026-109619
Type:
security
Severity:
Critical
Release date:
2026-10-21 16:31:40 UTC
Description:
* SECURITY UPDATE: code execution via state corruption after an out-of-memory error and via stale global state - debian/patches/CVE-2026-109618.patch: terminate the process on memory limit and allocation overflow errors instead of unwinding, clear request globals at shutdown, disable session upload progress and keep only the Content-Disposition and Content-Type multipart part headers. - CVE-2026-109618 - CVE-2026-109619
CVEs fixed:
Updated packages:
  • libapache2-mod-php7.2_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:29573b326c2e9aa46382861fbb092fd65ee86d9d
  • libphp7.2-embed_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:5116f444d1a1756aacc1276de7e952e283d5b5d4
  • php7.2_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_all.deb
    sha:16bda6ebdd516672ffc61333603cea2d3dd0b365
  • php7.2-bcmath_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:18128cb0624fb6ab5f3dedda9a1ebcb9d79dedf7
  • php7.2-bz2_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:a4ba85bd83badd10cd1ba70a80d957aa8f8c2efd
  • php7.2-cgi_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:6d019e4121d7d9340b5ab8096e65d99dedd14b1d
  • php7.2-cli_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:52f61e4356e5ad5d09c605a224d24ad6392ca4e9
  • php7.2-common_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:e3c2311e55c950332c20d763a13b4985a9f65f38
  • php7.2-curl_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:926df7134bfdcb8f55a832694ed70d36d1121989
  • php7.2-dba_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:bf315bc7c9ac1cb1ab8be86769c87c712978d624
  • php7.2-dev_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:6dc86796fe102ecea7d3139a3d5b1c35912a2ece
  • php7.2-enchant_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:aa803e6f29ab61cd685645366681e30d2ee4f7d3
  • php7.2-fpm_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:55a3db4fa66c8085e678687f1a54db152aa11c87
  • php7.2-gd_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:757c6258c577698e53aacf3e6b948ac37009dd72
  • php7.2-gmp_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:c3000ade30723995e12434d035e0f2815b33b548
  • php7.2-imap_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:f73d820e9a523ebc5d451d19ccd3581f2eee9fa1
  • php7.2-interbase_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:e7a5d0a4b08c2ce46fef0b20e717005673713b36
  • php7.2-intl_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:20046762e6331713cfe389344d5f864d537c4a0f
  • php7.2-json_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:9ab670f31c8d7ff031bc382eb5bd65279c1eb275
  • php7.2-ldap_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:3e0a4fb04dd38f6b7586faee7c2f9773178bd646
  • php7.2-mbstring_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:37b6670e37d7570cb39d7c51b4ef8bc72504f190
  • php7.2-mysql_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:8e011b54fa37ccfd9270f2fa25070c3719d2f437
  • php7.2-odbc_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:f9eee3a7d38f91293ee8a186c4732d0b44d3ee96
  • php7.2-opcache_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:62851a70ee5ec2992d1d341f5dc3dce462bdffb1
  • php7.2-pgsql_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:8ebf5b5f90cd711ba6af629b060eaf846277088e
  • php7.2-phpdbg_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:211f55141417507c3998baad7a285dea64fc08e0
  • php7.2-pspell_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:c8269e91e8d423e616d38ee574d0e14d0621d077
  • php7.2-readline_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:a3f8e9682fae01611a7026ae88195ed1f03f1d57
  • php7.2-recode_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:802e0a02f375a98fb11d67c18bc7a92a4abf265b
  • php7.2-snmp_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:ec66b1a66ac08e350268a9833b25409bab332e52
  • php7.2-soap_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:3c5acf3b2d9abbb680f1accdd8b259a9968f7c5e
  • php7.2-sqlite3_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:63db75afb375aae60598f0f2d5f7bae2da6bfd0c
  • php7.2-sybase_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:214f1af203dc0da24cfe486637fa6ccc08e2a066
  • php7.2-tidy_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:e1230628dd98709ec5a79ac9c8e6f6bf1c3a320c
  • php7.2-xml_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:89ddc7961fe40dffdd320f4691b72e0e6e69f9cd
  • php7.2-xmlrpc_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:ed412d21e45708192b0d72d5c9071acb261ca205
  • php7.2-xsl_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_all.deb
    sha:fdbff527f3128f4747e465b4d8de7b1e3c958e54
  • php7.2-zip_7.2.24-0ubuntu0.18.04.17+tuxcare.els21_amd64.deb
    sha:8e6cc33da32c6c5abe45d6aaa976a7c97ac87f05
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.