Release date:
2026-10-21 19:51:36 UTC
Description:
* SECURITY UPDATE: remote code execution via state corruption after a
bailout and via stale request-global state
- debian/patches/CVE-2026-109618-CVE-2026-109619.patch: PHP security
team's minimal mitigation for EOL branches: report allocator
overflow and out-of-memory errors via zend_mm_safe_error_ex() and
_exit() instead of bailing out, reset executor, SAPI and request
globals on shutdown, add overflow checks to the CONCAT and
FAST_CONCAT handlers, keep only the Content-Disposition and
Content-Type multipart headers and ignore duplicates, and disable
the session upload progress callback, in Zend/*, main/*,
ext/session/session.c
- CVE-2026-109618
- CVE-2026-109619
Updated packages:
-
libapache2-mod-php7.4_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:f735b0fb487d7cc05c876c812ba76ffdb7d3bb02
-
libphp7.4-embed_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:a16a2c27f190c006ac2d9dbe1337e6757a74680c
-
php7.4_7.4.3-4ubuntu2.29+tuxcare.els10_all.deb
sha:8acecb4eeeeb9dd031c2bd1809cf88ab37de173d
-
php7.4-bcmath_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:696332af031434742a9444dd4273573cfe52a804
-
php7.4-bz2_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:ec963618bb32965e99b297d1790abfe7acab3b34
-
php7.4-cgi_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:a9cf62a719edbec375e09785171fcf0573e21a5f
-
php7.4-cli_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:50a4e48a377c4b54332791eda6da686fd82be047
-
php7.4-common_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:4eed488d0be5e0b0cbe0fb42741f73192464b46f
-
php7.4-curl_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:fa16bfc33f49de5e39eb2762267381fbdf8f97ce
-
php7.4-dba_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:030a02822ad4d5b176c522ad64f4993b0cddc0ba
-
php7.4-dev_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:8fa97d5fe79ca53b10a34db773049a76fbbea246
-
php7.4-enchant_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:004ed203cb8451fbd156abb35faede5c97afc657
-
php7.4-fpm_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:3c9c4f4b77be4d6caa79a88de64ca4d024d8ee4d
-
php7.4-gd_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:89ba0d7eb54bbd0f3549589e859a2defe3e95057
-
php7.4-gmp_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:89a4ab951e11be08eb95e1920a3a6ccaef3a5c8f
-
php7.4-imap_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:3ad5f8fff27c486574df506e6ccf875e48bc009f
-
php7.4-interbase_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:e0e9396e7029a45b9d7006c6743a749dd4a343aa
-
php7.4-intl_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:a7d3b8101f31058b82f3a6b12df712cc92141dfa
-
php7.4-json_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:8a052734b50bd33d1c437be94c341d9e51cb176b
-
php7.4-ldap_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:7b30f19b44d34c4a0a871a7e40aae4399d0f6fd4
-
php7.4-mbstring_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:a6dc5fa62d95799af85a483944ff490ea6d522b0
-
php7.4-mysql_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:a1b7247c2b96555e010e8ceabcd319e33af9f903
-
php7.4-odbc_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:982def92549ceed21e541c348be71e6c74e1d109
-
php7.4-opcache_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:10abec437f90efe39ccb3a9bc84e8312ae74ab35
-
php7.4-pgsql_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:0835fbe9b660738b51d28ad2aac084a52264ab08
-
php7.4-phpdbg_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:7c9320032b5bb47cf8862b5a151909def6f6256c
-
php7.4-pspell_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:e8fea5cbeace41eb418583cbe36056acf1f9a356
-
php7.4-readline_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:0fbd67607e79f8d7ce77287531f342570b1467d4
-
php7.4-snmp_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:0acd4aad8b23a3b5ba3e0906b3c49ddb81129a4d
-
php7.4-soap_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:d8b070ff66306ca2ad6ef57db7f0a336104820d7
-
php7.4-sqlite3_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:c859107fba35195eda23e37ee0d715e4a7884417
-
php7.4-sybase_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:ab94cc6aadbff9e32bc8a58b0a7334027725dba7
-
php7.4-tidy_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:2209e636facc0259bb918506d23d63a5d6a2d280
-
php7.4-xml_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:bf3b054ae168bc2d06516f3e2d87aaa14a3cf52a
-
php7.4-xmlrpc_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:edaf7f725127af38bf38868a7a42aca8d264bf38
-
php7.4-xsl_7.4.3-4ubuntu2.29+tuxcare.els10_all.deb
sha:ec1fba8a87f634c8f9e9e2ad07cf14928cf15f31
-
php7.4-zip_7.4.3-4ubuntu2.29+tuxcare.els10_amd64.deb
sha:60f6f2c7e346687006da246fb96414f984bd62ed
-
libapache2-mod-php7.4_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:59e7685c3e9052e57a4b3cc5eecbdc268f0a0ec6
-
libphp7.4-embed_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:66f60bbc8ca644a0d4a8cd93c11da4882abd3c03
-
php7.4-bcmath_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:1b2d7593dd6f1031cd3956543aa734281f218c29
-
php7.4-bz2_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:c4160c4344f68c5ca737c3ffdc6c90b8b0be55cb
-
php7.4-cgi_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:4f49cdee39b82ebb7bb815fcf68cb8e81adf4316
-
php7.4-cli_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:8fb833b41f2d9f10d661627934162e98c24dfb12
-
php7.4-common_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:a4698390041ffd0c6019446301b08f97589fe409
-
php7.4-curl_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:471ca58ea66d399604ea84ae60d42180ee9915c8
-
php7.4-dba_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:0b7dc7567311cd67325768e3ba4c2ebdc6eec227
-
php7.4-dev_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:0c6e6b7421939c83be3a16633d48658eb066b01f
-
php7.4-enchant_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:2ad50d549e1b3bc3bb2c4a5c1f00d9d42827b3ff
-
php7.4-fpm_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:412206277c8dcb8dad2b3bc6d11ec81beb1dc87c
-
php7.4-gd_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:5169a8449b5bdc28c98492e3a5274fee3c35a89f
-
php7.4-gmp_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:a1db2fd16132c1c0e6dd08b464d3fa6fcfc546de
-
php7.4-imap_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:1f856442f23ff866978c6cca03f40e74261daed7
-
php7.4-interbase_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:b2f1e6b0f36eac6b5444e7be69af5e7b236f3a3b
-
php7.4-intl_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:e0cb2745bd831e7c3fff244c32775b9cf7a5de19
-
php7.4-json_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:2feec8f023a6d754633f5ce4e41d7c4aa6203d82
-
php7.4-ldap_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:9b7b92e4c1c8899a25a61893dc06e9b0fa37d1a8
-
php7.4-mbstring_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:d791214376037518e839e93c76f963bd6dab03ed
-
php7.4-mysql_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:124892211d3e7031d72937e20b647c4354bcd07d
-
php7.4-odbc_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:4115f0b7a717522ca5d12208cbf4114d4818ab82
-
php7.4-opcache_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:7f5b8790f65378f30178495f249f78e6a63c33cd
-
php7.4-pgsql_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:72692e68e944f653767be4f4269be60845a28a2e
-
php7.4-phpdbg_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:572d0a45955392ff00a0a8808a7bfa19f672e50a
-
php7.4-pspell_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:60c6c4010b73913fdcf9964d2c913a94b3342572
-
php7.4-readline_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:a4ad38209ba24c589b0ef477ea82157d45f0a7fc
-
php7.4-snmp_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:6dd908992ca05fb41dac753185434309624b21d8
-
php7.4-soap_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:a9f23de33e927829d17b5cdcd4bb9deb4ad2ec7e
-
php7.4-sqlite3_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:05ca9a8c0367a2a46987ac6cfd35244f76c16795
-
php7.4-sybase_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:cfe2d0c0f94802878f477e844b9ae3b48af97a9e
-
php7.4-tidy_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:5e40bcf0c3758d1ddcc78045e4b5bafffd12f19d
-
php7.4-xml_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:7e538b90930f937e779a5f9af60e184dc0ea0656
-
php7.4-xmlrpc_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:d046890327973f0308afab4abd888ddc052aeb3e
-
php7.4-zip_7.4.3-4ubuntu2.29+tuxcare.els10_arm64.deb
sha:4c5136443a83a492c902d265ea0018c963e765b5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
