[CLSA-2026:1794347545] Fix CVE(s): CVE-2026-109413, CVE-2026-45133, CVE-2026-45304
Type:
security
Severity:
Important
Release date:
2026-11-10 21:52:39 UTC
Description:
* SECURITY UPDATE: Yaml stack exhaustion via unbounded nesting - debian/patches/CVE-2026-45133.patch: Yaml stack exhaustion via unbounded nesting - CVE-2026-45133 * SECURITY UPDATE: Yaml billion laughs via collection alias expansion - debian/patches/CVE-2026-45304.patch: Yaml billion laughs via collection alias expansion - CVE-2026-45304 * SECURITY UPDATE: Yaml stack exhaustion in the inline lexer - debian/patches/CVE-2026-109413.patch: Yaml stack exhaustion in the inline lexer - CVE-2026-109413 * The YAML parser now rejects documents nested deeper than 128 levels or resolving more than 128 collection aliases; both limits can be raised via new Yaml::parse()/Yaml::parseFile()/Parser::__construct() arguments
Updated packages:
  • php-symfony_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:bdc94937a84822152b4467c26de00ac1d8b6f238
  • php-symfony-amazon-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:b665ef4274b84d36933d34221838b39657e99800
  • php-symfony-asset_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:c6b6d1b9753f233a4573027ffd989ef634ed8346
  • php-symfony-browser-kit_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:0d08d6b15efaa3d743c6b4f59468b27b9c432068
  • php-symfony-cache_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a0e5c820768aa976bc6ef76f4f337b557631905b
  • php-symfony-config_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:abc142e3e438415186afdbcfcd4b4237f28c4383
  • php-symfony-console_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:27d46d8c6a8483393f6f29a2ce6044d6704bcad6
  • php-symfony-css-selector_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a341abd40f957994c64e543498b749c3c31c8358
  • php-symfony-debug_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a6038e8f5d3b551de5779142250cabaf584b0f40
  • php-symfony-debug-bundle_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:90cf75bb0899bb387927b697351f5a675270d405
  • php-symfony-dependency-injection_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:61547feb610b8006ee6ee7ca60baf47aab3b0eba
  • php-symfony-doctrine-bridge_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a90851d1e3a5c1b2f520c30749dfd9e6eb2a2a74
  • php-symfony-dom-crawler_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:f9aea8cf4a96fb4928f0f05145a8b0f7eb1b9519
  • php-symfony-dotenv_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:db015fdf0e86f982c1f9bc3f69d2541be64150f2
  • php-symfony-error-handler_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:f322a8d2cbb74df1cf1e202b689afa521d684407
  • php-symfony-event-dispatcher_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:32299af269fb1e8815147c9608e9e15b234fe3e9
  • php-symfony-expression-language_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:7b1f34c52cd5c0bdc5d6be29146544df8ff87eec
  • php-symfony-filesystem_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:d402b328a10e492df70365a76adf5ae82e40e949
  • php-symfony-finder_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:b3aab224fe7c5363b1be8f7894f7d05921e488e9
  • php-symfony-form_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:dadee4bbe735141f641407d8a8553c84326fabe8
  • php-symfony-framework-bundle_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:e9edf84bfb24790c6ebc5158d171524ca6d33e28
  • php-symfony-google-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:525ed803a4b987b3074861f872afce588fbc6739
  • php-symfony-http-client_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:9cf51e8b7aaf82dfba18cb7be33fd99323308672
  • php-symfony-http-foundation_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:7927fe6e0229eb9e9053f936e17531bba8539501
  • php-symfony-http-kernel_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:2ac956a2bd79b3c44a26c6d05ec7dde159408642
  • php-symfony-inflector_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:1ccc255a513ca796abe76efbed876fe26bdd4bb9
  • php-symfony-intl_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:5a6876b9317587967b775af64822490b564fb741
  • php-symfony-ldap_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:db24186b1fd26596f172a755869d254304c4701e
  • php-symfony-lock_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:1f9e30f91673594c829cebeb2094b5b2f9ae0840
  • php-symfony-mailchimp-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:75f2a6b3a306474e3a68d201715c641af192c534
  • php-symfony-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a92e3f9eee210f8d85f875ea83f15958c34dedeb
  • php-symfony-mailgun-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:b382e35ef6b3345bbf2f1664bafc525a952c5fba
  • php-symfony-messenger_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:672033ac763d3280d0aeaf441f143c8d62c25caa
  • php-symfony-mime_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:534e57954c807a4b6a211491a0cf2a2baaac72ff
  • php-symfony-monolog-bridge_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:4c6fbe2ad7be4f24ef5e79d4322d2328113c1b11
  • php-symfony-options-resolver_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:d3e9f8a4af868b770939674709409f1c8e7a0a68
  • php-symfony-phpunit-bridge_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:ee6be321955892d28e58982c9ae46a3329c00150
  • php-symfony-postmark-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:38d8ab5092218fb7de326207ce9d9de79d0fc0e3
  • php-symfony-process_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:56dcf5b158df1b3d69ef5eca0d541021c2956bd6
  • php-symfony-property-access_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a1d1bc3e33d3e3b45f22f9ec71335f6219e10eda
  • php-symfony-property-info_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:31850e00ae0f626c6f87389756d8f0d3f1708ed0
  • php-symfony-proxy-manager-bridge_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:f68e20c739f1b32aaa708f58e0bf9be658ab8998
  • php-symfony-routing_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:10ae2e71abc42fed9654c909859fe185292709a9
  • php-symfony-security_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:7a2a26a2b1c34af3d79bcdcc09c588ca589f1194
  • php-symfony-security-bundle_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:1504d175457712c6704ec69854562836ef196353
  • php-symfony-security-core_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:f73eeecf234212ba707aa874b2c7467d04aa320c
  • php-symfony-security-csrf_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:e90a2b8a10575ccc78bea12b6d074ec7fc952a8f
  • php-symfony-security-guard_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:2d400c19e9109d532c8463fea95e9172248bdd63
  • php-symfony-security-http_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:ddddcf6ef8c5291d0c3e5d7967c82cc0d8dc9186
  • php-symfony-sendgrid-mailer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:aad50c48e0291648661454b1559f3d942985671b
  • php-symfony-serializer_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:bfcaefa989a89e993a143ad5f480dac1c8fbc622
  • php-symfony-stopwatch_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:eb662121e84c59268d44b052e956020344aa8742
  • php-symfony-templating_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:75cbe0e3bce634cdfbffdb2f68ba8dde08994a9d
  • php-symfony-translation_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:1d1107da8be19b6dbc02e5f2c7224ec81a92e48f
  • php-symfony-twig-bridge_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:e192f1a0525e51ecc0f4052470363da4e1527573
  • php-symfony-twig-bundle_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a33677ec316a3948d5078cd150cb00ec287438d2
  • php-symfony-validator_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:a2ff1bb8b755b2013a7dd17824441e680342e0c8
  • php-symfony-var-dumper_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:1b58effbd3395e6a47b74a01df1492eb6fb5d290
  • php-symfony-var-exporter_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:1093c8275ef810c82dc5626dffd1f4e5d0a42f04
  • php-symfony-web-link_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:b4c7efcb1ff32d30441cb949a40fbb34111b9d5e
  • php-symfony-web-profiler-bundle_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:b1da788243267344f0ca6bac45816a99666b31b2
  • php-symfony-web-server-bundle_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:dde5b7edda05bc4a1044e56157a76000315fcafd
  • php-symfony-workflow_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:12576db989336339f3243ec377fed790134575d0
  • php-symfony-yaml_4.4.19+dfsg-2+deb11u7+tuxcare.els2_all.deb
    sha:06990599f613f70ecb83e9230f6ea7ef2d4bb3a0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.