[CLSA-2026:1794465998] Fix of 9 CVEs

Type:

security

Severity:

Important

Release date:

2026-11-12 06:46:53 UTC

Description:

   * SECURITY UPDATE: out-of-bounds read in convert stream filters with NUL in line-break-chars
     - debian/patches/CVE-2026-92842.patch: out-of-bounds read in convert stream filters with NUL in line-break-chars
     - CVE-2026-92842
   * SECURITY UPDATE: FastCGI allowed_clients compared only 96 bits of IPv6 addresses
     - debian/patches/CVE-2026-91768.patch: FastCGI allowed_clients compared only 96 bits of IPv6 addresses
     - CVE-2026-91768
   * SECURITY UPDATE: out-of-bounds read in php_openssl_matches_wildcard_name()
     - debian/patches/CVE-2026-91767.patch: out-of-bounds read in php_openssl_matches_wildcard_name()
     - CVE-2026-91767
   * SECURITY UPDATE: TLS peer name falls back to CN when the certificate has a service ID
     - debian/patches/CVE-2026-91769.patch: TLS peer name falls back to CN when the certificate has a service ID
     - CVE-2026-91769
   * SECURITY UPDATE: phar tar entry injection via unchecked entry size
     - debian/patches/CVE-2026-6103.patch: phar tar entry injection via unchecked entry size
     - CVE-2026-6103
   * SECURITY UPDATE: unbounded recursion in SOAP XML parsing and decoding
     - debian/patches/CVE-2026-91765.patch: unbounded recursion in SOAP XML parsing and decoding
     - CVE-2026-91765
   * SECURITY UPDATE: heap buffer overflow in SOAP HTTP chunked response handling
     - debian/patches/CVE-2025-14181.patch: heap buffer overflow in SOAP HTTP chunked response handling
     - CVE-2025-14181
   * SECURITY UPDATE: out-of-bounds read on empty Location header in HTTP redirects
     - debian/patches/CVE-2026-93682.patch: out-of-bounds read on empty Location header in HTTP redirects
     - CVE-2026-93682
   * SECURITY UPDATE: credentials forwarded to another origin on HTTP redirects
     - debian/patches/CVE-2026-91766.patch: credentials forwarded to another origin on HTTP redirects
     - CVE-2026-91766

CVEs fixed:

Updated packages:

libapache2-mod-php7.3_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:1750ceba9b34793420f5095f7250d065b2ad95fe
libphp7.3-embed_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:99ded5453155014c0686b471ac8164ba5b763fe5
php7.3_7.3.31-1~deb10u7+tuxcare.els10_all.deb
sha:87b76108b84a7ab480e0a95863c13bfd3d435fab
php7.3-bcmath_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:5b5f147160db2de0a090688b016e482430808b93
php7.3-bz2_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:231d1455a9f32fbeb44da87368b5d45f633a113b
php7.3-cgi_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:9ae7b8517ac7e9be092eea9bb17db69e0c3b2f88
php7.3-cli_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:e99271312b4814b81b7a5516019889902797ff03
php7.3-common_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:d3d67e82f5780db43c5de4d8bc5f67bb4880bf13
php7.3-curl_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:b03463c81a743395526e2e0c4c5acfc19584426b
php7.3-dba_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:82ab267bd62dcba9acfad15cc04593100299ceff
php7.3-dev_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:a40cf90c9c5f6d29f22a3691a6da7d64f4034e88
php7.3-enchant_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:e6de21d0332442668ea6e93bf262b275cfb73a19
php7.3-fpm_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:0a00ef55a65d03bfb86b6d0d3bcecccdbf1a49da
php7.3-gd_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:4e7eb6504f62a6d77d94ce31fba5b867336ebaf0
php7.3-gmp_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:2d5b319cb9179325dc9c132574832e8749333e13
php7.3-imap_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:eb791863cef3b959c0ed5cb665a47c4d1bc0a112
php7.3-interbase_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:977d5f27fba1e9811738f34618de091c3c2b3add
php7.3-intl_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:366726aaa53080d76150d428c6cc74c1c6c5d654
php7.3-json_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:36554b20cf807b9da1733784c8466222dca38ef3
php7.3-ldap_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:428818e6798d99fdfe4b8e063c4fe3b6b16986ef
php7.3-mbstring_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:2fa3d9a8801914bf6d79646065150775b6a05215
php7.3-mysql_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:470c56375003085b8fedc063ad650014c04d6e11
php7.3-odbc_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:33128a79ed5d28add8f6b1db9450383778d24596
php7.3-opcache_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:03e4afb75cfa0078bee85af61b559de94ca89cd3
php7.3-pgsql_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:f6dcfc1dd0108f4314d12a3cbb37e9409617fce9
php7.3-phpdbg_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:a7cf5e4ee56a81d1b37150f8d5f3aa10f5931b95
php7.3-pspell_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:7c468c5f1f0b55342c05417253d4ad81856f6917
php7.3-readline_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:591bd32b6156f3bdbd093b9cd121ecd33b8ff5e9
php7.3-recode_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:1d05308ef7aa26ca6c6f9834efd45cc04a9915e5
php7.3-snmp_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:2f86a66d342e27158c1660cc42904863bf4897dc
php7.3-soap_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:6c037441e59fa0cb7afd871c7252038a17fb7e2f
php7.3-sqlite3_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:7649e5fd83a7edab47a9ba2c8c7b39c159152656
php7.3-sybase_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:e1d124ee03c0d6a38aaf3f67195fbc3d71ad8a54
php7.3-tidy_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:f039caaa6e4c15ca4e1203cefa19f109984bdd53
php7.3-xml_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:b810db5fb37da027ef5243bb0c0fc2082d7c3234
php7.3-xmlrpc_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:2430d395e8e7813ccd1020ead613d86db976ba6e
php7.3-xsl_7.3.31-1~deb10u7+tuxcare.els10_all.deb
sha:4a76918c4d01abc9f873201a74e0b1945c10c711
php7.3-zip_7.3.31-1~deb10u7+tuxcare.els10_amd64.deb
sha:feda69479749c226046e1529e47b91224f6d2a7b
libapache2-mod-php7.3_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:473398ebe81e8aa13225bcdb8eab5fabe22f30a5
libphp7.3-embed_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:ee8acfa8f891a5fdc58eae4f392bd90e6175bf40
php7.3-bcmath_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:99a11ea50599b81fe6eb722b6d0ebb2bdcd30599
php7.3-bz2_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:25ffc8de036fb4f824c0e1c0c71e60ec9bf31602
php7.3-cgi_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:05b2315ece78e573e5813f0c2c10e841d16da9cd
php7.3-cli_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:bff8e3c74d8fd73364b103b3812ff1105bab6997
php7.3-common_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:5b4f52b78afca6a27a7f625b625ecfd46efc8fd0
php7.3-curl_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:29b33a0e01e7856bff87778540e0997d96616d2d
php7.3-dba_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:30f90d9bd9452fb7122a88a29a06d1da98f17cb7
php7.3-dev_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:da2ecf0e7d9b0f6d3dbebddbb1fe3d65358f43c4
php7.3-enchant_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:1fd687cc95893f83d1f3cde2fbe117a713024b18
php7.3-fpm_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:e0c6419a705d7d6ca5b5b75f3909b8ea92cc32a5
php7.3-gd_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:715ce6ffd299b040cd3e2619219ff8ec69108f15
php7.3-gmp_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:ba1839a02725168f202229d728c9e385b3cc05f9
php7.3-imap_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:f3effa27154d2569a0e01907be558b04de425439
php7.3-interbase_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:6b33f4103f59d0dc2060627d14fd3835cd64ef96
php7.3-intl_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:9d67741fb30694a2800b19026f6f6186217302b9
php7.3-json_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:1bb0cfedc79fb0e0ab208aa069e8a16bd381897e
php7.3-ldap_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:e68d4c793798e8fe2f374aae9b5d89401931f6f3
php7.3-mbstring_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:88f1c7c3d010b94f2e4263ea7d672bd353c239da
php7.3-mysql_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:dc83b024d7da8b74edd2e67a449025d908a48a08
php7.3-odbc_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:b05f42c0a9d40af11f95ad700e04f16808128975
php7.3-opcache_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:bbc1f31bb91ed2f991ac8c717dbb8a15f029a015
php7.3-pgsql_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:86e8c5986331234cfa3e3176502210b7238eae83
php7.3-phpdbg_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:30fe5388dfafa87c95d2f8e03962c46cf8b600b4
php7.3-pspell_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:defbfd83d38a321d2fa36295ccc1abf451fc9f60
php7.3-readline_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:27cba1c74fb40f2dca691469a74f7f9f25c9453c
php7.3-recode_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:8068ff379ef37e626a3db0ad304b4358e3cb9a44
php7.3-snmp_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:04f22faaf3c7f8abfd530b3774609c63ea153643
php7.3-soap_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:56f0f9859c48ceac1cedeb022959c386b2ed7ddb
php7.3-sqlite3_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:aa568ff04be3e2cbfa528d555d21326f733c8f20
php7.3-sybase_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:eaced0e825cf1ca13305a3da50bf4047ddb811cd
php7.3-tidy_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:b6c7c6e4bbb72581aaa4dc3b0381a7046137ba8f
php7.3-xml_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:f520bfc2fdb500d6abd4a5c4822fffa0e3c4613f
php7.3-xmlrpc_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:205213bdda57f4b0a1ee4755faa4774e805151c9
php7.3-zip_7.3.31-1~deb10u7+tuxcare.els10_arm64.deb
sha:d554adf75fb4df5ddcad9f8d9f17f86bf4e975be
libapache2-mod-php7.3_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:0f032bb2b40603d22acbc9a962f89818bd480605
libphp7.3-embed_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:d8440eed52d9b13d4488989fbc7d67dda9ace8da
php7.3-bcmath_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:7a9da9f70a66db00ac46fe5c3da81b8e30f03c62
php7.3-bz2_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:8a411f4b082c0e5a55cb77b008952ecfb084f81b
php7.3-cgi_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:fd895af227158610a0a646163d3cdab3cbb46cf6
php7.3-cli_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:20f7be2daa6209c8d7dbae11ec09c1212a982ab0
php7.3-common_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:f6516755f6a13be628d3db25e5218e595a180f9f
php7.3-curl_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:fec9c506c6775726bbbea10b28273f295b5397f5
php7.3-dba_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:7104be89c726a280eaa084afc29245dd57aba771
php7.3-dev_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:3c9f5f237ea124ac58085c8dd7120a9a709715a8
php7.3-enchant_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:7ab7125fafb1eae8098748a3f681756e48e1ca35
php7.3-fpm_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:d9bd750c9db896af2b5c2ab5a0c17acf1c2a93c3
php7.3-gd_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:08bf0a58a9205e2abe15c113f055798adbf89b59
php7.3-gmp_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:d9707ce60a7f4050b6c33b32bb7277ed80ad1ba7
php7.3-imap_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:8a392f331b951e50b1b9b844bebcf9b3fff2c379
php7.3-interbase_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:573ec59e6f80f50e13e5cc22bb40e1e22a83f98c
php7.3-intl_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:da537c17270f2903549bbdcfece0151e86c44e33
php7.3-json_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:b5bbfe7bbad89eb9aeced8a114c893ab1935be8f
php7.3-ldap_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:a25794b3a095e0ab71826938b59b904f0b0bacb8
php7.3-mbstring_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:65f1a3264c49bb539ea1a729ff068f085d963faf
php7.3-mysql_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:b0729d26b3470fc230c77a5372715f0c8812c1c6
php7.3-odbc_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:b098ea4d1ebadd99ae78a1c9968cbdf8b55848b1
php7.3-opcache_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:03de185bd29caeb84fc0e71fd74fe505b75d9a4e
php7.3-pgsql_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:c1777ae82ff969c5fc82b98b0e3494098c5f0244
php7.3-phpdbg_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:a3e014e089d5234428dc95b904c8e52783899c32
php7.3-pspell_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:80a70e383bccf13eebcfc6a6fcb4479601bcebc7
php7.3-readline_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:6d20d62978ca4e0892880f59178ced8f796c698c
php7.3-recode_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:88a27d45bede50372642062ffe14b9204ca10a65
php7.3-snmp_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:832c523bc14248b958576fc9f41d55493f9c0025
php7.3-soap_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:5ba2ee63678bc4cdfcc09ddd0657c094982979ea
php7.3-sqlite3_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:ae4cf6d0122ba0a5d1fde01b64578f3046ad6fab
php7.3-sybase_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:fca249963fe3b6b285415f6b7f3252bc42f8471e
php7.3-tidy_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:f41369eadbd1affbb226ac5e3bb3d6e1101babd7
php7.3-xml_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:ed88deeb33e851e5d02457f9941921d15d4d6e93
php7.3-xmlrpc_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:11a85d25abedcc4ffd78cfb44f6f2a0b6b1fe058
php7.3-zip_7.3.31-1~deb10u7+tuxcare.els10_armel.deb
sha:28b1dd0da7cc242bee0eb0fcfe3ba8954db7046e

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.