[CLSA-2026:1794443456] php: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-13 08:24:09 UTC
Description:
- CVE-2025-1218: fix various packet over-reads in the mysqlnd wire protocol - CVE-2025-14181: fix SOAP HTTP client response buffer overflow check relying on signed integer overflow - CVE-2026-6103: fix phar tar entry injection via unchecked entry size and data-carrying entry types - CVE-2026-91765: fix unbounded recursion in SOAP XML parsing, decoding and WSDL node search - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin http redirects
CVEs fixed:
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:69fc8fd59d8bf7317fdbd4eda1eba6db173bb81414a335999bf149aa62084c7e
  • php-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:79bc41675b31a3d96a72c19f1d8fb94888a5c274013058203a9b288b76ea9f43
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:5a5401abd6f133fcc0ee51ef2c98de41d220d2f13f8d041c21ae62b6848eaacd
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:59afbe2e3e6e7b873e15820a40a7f30c250c76847638f4885cd609f5276ffa4d
  • php-cli-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:be55de0ef77c964372419876858d5624e0735271ebb0a3da36db06f37240bce8
  • php-cli-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:7f4e84ad4be522ef8b8251ab9d1c67a4247d22879019527271574de9b08d43d7
  • php-common-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:417642bdfe783ed13808795884c71f1284d50f90b21edad15b7dd4a4461d2f57
  • php-common-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:b79aa8a6a54c8eaa2ef997e89a7f75d49ac681c83699235f6e5724261e5cab57
  • php-dba-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:8089dc5bbb38c1d4f41e459c9464eef399ee869a2862186ac81d5c3ce897ae21
  • php-dba-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:63f316a5d08922c7aa1fb4cb5cc9fece7244f6808f63c4ff4a7080ad08759d83
  • php-devel-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:8913b70ef7482a1a90623e6b1a95d009b4dff028b9924e9a9f36d75c29382b51
  • php-devel-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:97d3e898a15c73ad6bd66f2935786bcaf5487abd45e81ae18027584d2135463b
  • php-embedded-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:8b47a27dda647ee7d2ee9158a4b1b9eec2e98f8a079bc4c7c0ea408d99a863d4
  • php-embedded-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:b3be6645c018487ecfb5644aaf4dd6013ffad9e5d3c5455946669b6133e19aca
  • php-enchant-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:bb29e27b48c6a8881516c0dbf84a0db2769105fc103e7cb6a1f562b28245b13f
  • php-enchant-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:24ca3620e2b6f8efcc7eb8c685425d3f419479f61c7624e94dbe3e5c709845ca
  • php-fpm-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:5b4dea7ab791379c21701e008c71bb433b4c7f9c0fc06817965001852c8f84ce
  • php-fpm-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:4a3d76846544575a9d3523457e4eb7e42253aafaf22b94fe6e8124d063cae503
  • php-gd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:853ec56bc783a888674058ac9c7d19668fe85960fbe602cf6770c7ca1cd6dcfb
  • php-gd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:ed4568f7cc3ef1b94051a7d8224a715234583d7edea1079bcb7c6d33f1fe9979
  • php-intl-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:8d0b60328dde49a052c0255d80b8957663d54e004063d9f8aef55d84ba378120
  • php-intl-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:509231c0becea3832507b8058909ca0ce141b0b6bc991bdb571758e99901ccdd
  • php-ldap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:4167a7b3424a17278386348590526f959305335964e4af8078de5d836dadcce7
  • php-ldap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:4e553cd98b67cccd38c5d1523175817738db88e5938b031f89c6312490565704
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:3589eef5c428e30afef8303a70f95ee1cb95b34ba6d89cd08ed54c36bd9e818d
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:82bbe73eca54907ee16e4384beb1787ac096a757248c4a6f5585e231cec739c9
  • php-mysql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:ff9e1a78bf031772e1491f83c29edc1cfc2cad439e8b52bcb8c26932b3471b9b
  • php-mysql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:9bbced0602db0716450507495fcb59edb56a88dd80a085fe93a1a9ead3032b84
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:5f2dd7ed5a63763468a41235449e4701479a8f691eb449749f1722583151bd74
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:c1daaa7a4c57495e1f572ab23978ee85ccf91a78ac4d85bb8b05f1932843589d
  • php-odbc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:f307027d6103db59a938ba76f85b1d24668a004cc57a25d870cbf137bb154363
  • php-odbc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:ee05f8db5df4ea8437fc97b2a3291ae16e2287cd488809fb5a944683ddf8a85f
  • php-pdo-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:a24408eaaebba916de2ded3e76e57a78f4f8a02198c928b5e355607d788604bf
  • php-pdo-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e8f4a85dff945b5a132ab1b2dc39b5668b8ce6a29cb95923de2e1fb541e486b3
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:6a8a08fd748ec87e4c70d5a47cfddcbc4734fd201436659b0a47a4dfc6c36caa
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:94f5bff9ccf85dac5d6efafa4dca308a9df32828e25806c320ae9593232a57b4
  • php-process-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:93ae32c5c6429e2b7365cc70d26df5a5c1df41d5c11c33e99a86b5c2e7b3d423
  • php-process-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:09f02b9e55d280d8626c8283755e684a98dbedc38cd71e69d8b9d10d331acd59
  • php-pspell-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:6ba2b3b45532e54553e1ba0b4f541ab92afe29ff3031fd3ee8f898cdc024e944
  • php-pspell-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:b6da83810bc09df69cdb2558b7912fc1cf0f1f1cd375d67de7bf4a485ccc04ff
  • php-recode-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:27f58fc27da73ea0c417810dcea6d105e30d9e52c4b65137db86dad09accd368
  • php-recode-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:c05d899554bf88bc49466cf04af1802f5bda1ffadcf6b9e5f50a33d39f1410f1
  • php-snmp-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:eac3809546089cd0b706aff2a74fb7b6f3af2390a6590252282fcc7dd885c5a3
  • php-snmp-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:79588b4ffb340191190605405ab552207769dc59004618670abd177a9c50fd49
  • php-soap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:ba42870b47d0b866cfbab0d6367a438d74637f4ac869413eb43ea0bdac24e41e
  • php-soap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:d89cf937e76879122e9e4a86d899a25617f7c5e835d4f9a749d3bd07012df8c3
  • php-xml-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:fce99b37d281e168ce04e9f6dd4dcec27d90590b431553743be8d93a7a77f731
  • php-xml-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e9219b842750b36061cd61a42fdb4bc892b43f5cdb22e22b5479f28298b23708
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:0b938f4d6092afd829fb3ff94dadf4f1aed3e139317051cc69ac9ca66c744978
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:f857210d669c964a06bc85a467f32ca6e76352e83346401122ec680aa8e71b7d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.