[CLSA-2026:1794443452] php: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-12 13:58:54 UTC
Description:
- CVE-2025-1218: fix various packet over-reads in the mysqlnd wire protocol - CVE-2025-14181: fix SOAP HTTP client response buffer overflow check relying on signed integer overflow - CVE-2026-6103: fix phar tar entry injection via unchecked entry size and data-carrying entry types - CVE-2026-91765: fix unbounded recursion in SOAP XML parsing, decoding and WSDL node search - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin http redirects
CVEs fixed:
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:467e97722b8965dde415df28846c37eaf83d3aaa5d5bc5cf2b351a36efedc563
  • php-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:c0681023914ef8ac3795a4a8f0713f99d71d5c0323270dbc808472b2ff9ea48b
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:2fc05200c9973b44f72e6abf5e109e4185500fcd7c874ee55604f16bd6d3b7b6
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:5665abe4d9c17efd8826e93ca461e467d689af4ec6e8fb8c4fd7e9873152b0ec
  • php-cli-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:2875f8a22883a81649827ce0b183ba0435704b9ec3e39e2b617e493a020a5a1f
  • php-cli-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:de5bba2000896e1473512bf81ede92de1094e8e2bb5a25d13615a40ebd94e8ae
  • php-common-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:f84d754f7bc81c6255875f75a03516f8076eb4ca71f28df7c7b406291ebba140
  • php-common-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:c52196e107bac4bca424404fb3e79fd121f5fc74c76bd5778f4d918907a3048b
  • php-dba-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:04c0f05717b8a71945bbd3b6f3de7bfb50d1e3fd297a65fd4f9dec8c06f6dfe1
  • php-dba-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:d1c7cb94c7113cd3e0d885d64aa9390d6b847f5cf3d4a9a87e6ba19f5d017ab6
  • php-devel-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:50ab2e7ed1484a4f49b48b4f296feec4fb62c4002d41a59ea4017322f664335b
  • php-devel-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:7268361b3041c4ba8aa64c14019a2f92ae5477b974e85ce1d0a74f68e049ec5a
  • php-embedded-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:62fa5d985a241a06549dd51f9950d312676a7cfc5cebe54b161ccd384b86c9cc
  • php-embedded-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:29ccc30598b1f89c71f45ebc8381b33f1bd5d2f609fa45464e1e993fe6c6d28f
  • php-enchant-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:5f95ff8c8a2323e2e8efb89732dcf2da8866cf1aad78fa1e7e975b2bdfd2d98a
  • php-enchant-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:843aa5e32cc45088a9e5f69d8916dd5f3d550ab87e4f5598c7f57c2017fddfdd
  • php-fpm-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:f999ec4caee60d74406eb9fad7d4916dd102f65bd640534faa134588ddc76861
  • php-fpm-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:f56c9a6bc35f6cae5f92c51d1f55eb4a3fd45abbdb09ef19f647d67db013f3f2
  • php-gd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:1300688c7b3e0f4c5e97acadc557532178e4da29b3511f56d87167146f352a6e
  • php-gd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:a22d84e1b2a453a5eb91889f69d806204b4361146b1cc8feaeba33309bf91e37
  • php-intl-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:acab96ee013cf957a7289bab08a3c5a353d2f4bd426dac9f131661711213c285
  • php-intl-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:9c81e58ab2ab82c1105000f66e27815b4c4813b53ed7e3da31b9c51204d972cb
  • php-ldap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:3f8ddcbf88684c9a1462416b73816130fcf15909b64c7e8b5067ffdb9e03abec
  • php-ldap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:f7894bcc2c08b216c109580ec7a645724c1c351af2e42ce2237988c45ca02e75
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:e4e4f4543e1b2fb169cf7cc13c66cb9a1e2b9119181da66dbdcc2b4c5735496c
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:c4861001b296b39cfc5cc739ba855d4002474fef2d5842a3f7e1f2cc59db1e99
  • php-mysql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:212e72c9720bc68393526b0224be4f132b1fc26c81a94fc193eff50ca671c362
  • php-mysql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:0472e451db9369c566df7c4792c97c352de12b63cc7b6f187df2242e9fbcd141
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:fe61fe8ce8a06da1e9658275c7488d28ea0796f2e7d6e0e676418fae12f8e461
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:f5e7fd920c8811e81d24bcfa2c55265bb9b6fcb0a4f5c9b768fbb2468f7b251b
  • php-odbc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:279fd10c1c4990773951bc33c46bd332b26149f9fa165e80cac1633daed25e5f
  • php-odbc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:8fe2f7e587ef3326b81bff5c6663190d9c7e8854b35f8e7e96f0af1b67840fc1
  • php-pdo-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:46f7ae009ab2ec47e984629a343c6dcd19fecba8a36cd6741b2c68163bcfcd59
  • php-pdo-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:790237e65a822f469a204f6c4eeec52b8cc876c006a3cc806cf482de6705d112
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:d9b603aa8ec9fc3458858057ac37a72f78f06880a10006d4007dc30d5411ac08
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:40c4d6e63f1649d737f5b5c8ee798f2a362142af063c3faf995cdbb2c2e06c19
  • php-process-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:c37231e51abf545acb5509a97c5b129820455ab5f4da31fbcec3e89af3db2b98
  • php-process-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:3976e3f723fa2809fcb950e1b07f155cd8693ec9214b0160fbb73dfa2bf90fbe
  • php-pspell-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:f2e9fbc42498e014a077d288a45f52e2625cf773850539078b7e4c479c92d958
  • php-pspell-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e6278a3ee054613d89752432b0ab29d8bb9dbae488ff5b736d8e5774e8de885a
  • php-recode-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:415c97b9a507e92bdaec22e1a3de58a7f7cab0d2b604d31046597ca97cd55b25
  • php-recode-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:0444c8be0ef21b65c0e9c7bc0000fc8de869fc3f6d7ad69f765d042e1791a077
  • php-snmp-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:9274cd166eaec3a834c49a31b57c4d45de688580d4bdf92e326a207b98cd9ade
  • php-snmp-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:71ea0181b128478d0baaf0acecdde682b4ef3f9bb09799a1bd3a23966bc88303
  • php-soap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:7d59067ae9e0138152c27e6a37050bba9295808c351a2f047735e5e0b8a81dbd
  • php-soap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:3fb08b8e8c0ccf567f80cc9a7079cf71e5f7f28d2a3d4018f56342f42049c56f
  • php-xml-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:4bfbfa8db6425a7802a9f39af3114b9f1df19c9bd3d458c8c03d5f2e2818317d
  • php-xml-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:9f3f516f13da3b44140b02f5e65a5b3ea3895f06c1419d4737285d4598656dc2
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:f995826380d21e0829c47647ff07837497502dfd23168239b34a20bc8214a924
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:6cb1fb4d273b86b9001fe381bc76cbc486e2cab069c5da914234eac2b3449326
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.