Skip to content

Fix CVE-2026-109619 and improve session error handling - #24771

Closed
SleepTheGod wants to merge 1 commit into
php:masterfrom
SleepTheGod:patch-1
Closed

SleepTheGod wants to merge 1 commit into
php:masterfrom
SleepTheGod:patch-1

Conversation

@SleepTheGod

Copy link
Copy Markdown

Added handling for CVE-2026-109619 to clear request-scoped rfc1867 state and prevent stale pointers/flags from persisting across requests. Implemented error handling for out-of-memory conditions during session initialization and cleanup.

Added handling for CVE-2026-109619 to clear request-scoped rfc1867 state and prevent stale pointers/flags from persisting across requests. Implemented error handling for out-of-memory conditions during session initialization and cleanup.
@ArtUkrainskiy

Copy link
Copy Markdown
Contributor

This isn't current anymore. master already fixes it in 3584a98, so there's nothing left to merge here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants