Release date:
2026-11-03 12:59:02 UTC
Description:
* ALTPHP-2638: Update to 8.23.0, a security release: fixes CVE-2026-92392
(High, HTTP/2 upload use-after-free on a server RST_STREAM) plus
CVE-2026-86410 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-86415
CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87865 CVE-2026-92386
CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391
CVE-2026-94265 CVE-2026-94266 CVE-2026-107929 (all Low). CVE-2026-87866
(wolfSSL) and CVE-2026-107928 (GnuTLS) do not apply to this OpenSSL build.
* ALTPHP-2638: rebase the nscd hosts-cache patch onto 8.23.0 (context only)
* ALTPHP-2638: skip upstream test 2095 (new in 8.23.0): it fails only in a
full-suite run, with OpenSSL 1.1.1 and 3 alike, and passes on its own
Updated packages:
-
alt-curlssl_8.23.0-1_amd64.deb
sha:5c57860f74a5198c84beaeca2a8256669f48612f
-
alt-libcurlssl_8.23.0-1_amd64.deb
sha:bb03a4364d7d26f0e96be225fbba4285cd8dbd90
-
alt-libcurlssl-dev_8.23.0-1_amd64.deb
sha:bf9b42208d53205089c65eb31954da972fca4f6e
-
alt-libcurlssl-doc_8.23.0-1_all.deb
sha:06337ba74f193c8ff237bab9908264ee13196157
-
alt-curlssl_8.23.0-1_arm64.deb
sha:f1476b1b68915bb60fc5ef2818b8629da908c340
-
alt-libcurlssl_8.23.0-1_arm64.deb
sha:eb2abb1c1e993116e0ba993bec644786e883ea26
-
alt-libcurlssl-dev_8.23.0-1_arm64.deb
sha:a46d7d0299ec066c64e5984ee68691a91e2d67c3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
