Release date:
2026-11-03 13:04:56 UTC
Description:
* ALTPHP-2638: Update to 8.23.0, a security release: fixes CVE-2026-92392
(High, HTTP/2 upload use-after-free on a server RST_STREAM) plus
CVE-2026-86410 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-86415
CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87865 CVE-2026-92386
CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391
CVE-2026-94265 CVE-2026-94266 CVE-2026-107929 (all Low). CVE-2026-87866
(wolfSSL) and CVE-2026-107928 (GnuTLS) do not apply to this OpenSSL build.
* ALTPHP-2638: rebase the nscd hosts-cache patch onto 8.23.0 (context only)
* ALTPHP-2638: skip upstream test 2095 (new in 8.23.0): it fails only in a
full-suite run, with OpenSSL 1.1.1 and 3 alike, and passes on its own
Updated packages:
-
alt-curlssl_8.23.0-1_amd64.deb
sha:0fe225fc8c86ea78bf3f8c1db9fd691f3567e691
-
alt-libcurlssl_8.23.0-1_amd64.deb
sha:2ea3a41efec6a422c9eeed508a4d3b8a5738e510
-
alt-libcurlssl-dev_8.23.0-1_amd64.deb
sha:fb9ff394f825a8b3b007cbbcaf12478ffc0be8a3
-
alt-libcurlssl-doc_8.23.0-1_all.deb
sha:e8c15c84d48059884ec95851fc4507b2f8c9b053
-
alt-curlssl_8.23.0-1_arm64.deb
sha:e12aafae107b9da70cddc2217ef54b3c4f49ac28
-
alt-libcurlssl_8.23.0-1_arm64.deb
sha:ba951a92157cfb0914312bff0cd7d9aa024fb7a3
-
alt-libcurlssl-dev_8.23.0-1_arm64.deb
sha:43dc38554eaa44f317900fef3418272e5d17ada0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
