[CLSA-2026:1794488054] php: Fix of 5 CVEs
Type:
security
Severity:
None
Release date:
2026-11-12 17:57:51 UTC
Description:
- CVE-2025-1218: fix various packet over-reads in the mysqlnd wire protocol - CVE-2025-14181: fix SOAP HTTP client response buffer overflow check relying on signed integer overflow - CVE-2026-6103: fix phar tar entry injection via unchecked entry size and data-carrying entry types - CVE-2026-91765: fix unbounded recursion in SOAP XML parsing, decoding and WSDL node search - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin http redirects
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:89bf624085a10c0074600e6288ca2cc930ce56162695301c6846eec85640d16c
  • php-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:b0a45ad1e10b8597fb7148c6fdbd5928857d9b29feb1212c0d299220f1dbe407
  • php-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:ee40b370c1f1c551f274ecd56a52effc9502a59ddf1f54b31a63ec5d87c622ac
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:a1470b2fd7446005cf95ec8947b999ac1209eca66958d22d8a466968752cab75
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:59b5084a88f9e67bb20e8e17882ed9bbb89ed6777d045840d926da545030dbc9
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:684c65693720e7040cd3a6a4cc5fff751d6b758ae035773e82a3fb91a87bd808
  • php-cli-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:3ec121c369a285c2db5230e711f34fa21881c5c4ef3d162378dfee94f78fc0a1
  • php-cli-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:0b7acf85526a87490c8b1db708d76c3ebcc6eada72d6f57e06a317ce81c1b4a9
  • php-cli-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:cdac5bfb961f46f2f9b1d2962137d538755fba0f640ef23661c33574bdc0b253
  • php-common-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:0255b23ce63127574f9f7268d6602e30153542ec6817e238448ce2af10e70115
  • php-common-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:b294009c9b0e43ed0035430c1d72cfb7abef2d255e7e3bc8b839ef4edb7ab41f
  • php-common-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:c7c5d6d63c7906fbf307c4e023ad97405247f313206a3f7c92eb9c9721d50241
  • php-dba-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:bf293492a792329a4a613f7126d7e7df69f253b616f83132705da45f4fb02e14
  • php-dba-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:88e11c1a91e14f56fc369a7cd49f113e0506eeb969481bc1be4e8ed4c7238f00
  • php-dba-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:9044fb1bec3c1f76dd9beb653e892fc03bf8a51c8a9c428370a2a0931c0fa787
  • php-devel-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:296cfaf7f2983a1247e33c2861dcca897b2d0b7fc3250031e6a574992173d151
  • php-devel-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:484907049816c5acea9d21f7cc48881b3e4cf4b764fc26595659203adfacb505
  • php-devel-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:fb84ed261ca4109ac715395793a508aa763ce40914f6c5719baa33fb2d72ca3f
  • php-embedded-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:998b934c7ec6abc52559e95cef2f368c178c8533332c710812cda8ab456cc179
  • php-embedded-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:46fe4ce58a98d2dfb157944c9d82a2c02f200fdc8be0ffe097cf37c82bf1c3b2
  • php-embedded-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:4a1845b5394ded1c96dc228cc18821a4fd9262f2131fceb5f447377f0ca98569
  • php-enchant-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:7d977c43bee5f828f39a03985da472c6199b24e31079892f612ea9a24b7bb992
  • php-enchant-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:648b2497d2a2dc9afe47b5aaab35d294e1d82fdb3342f907b28b6f5c0fd60d5f
  • php-enchant-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:4e2e52b6d70f458abd2aaec94b2a72a78447f14b47b67e42d9874b9ded32955e
  • php-fpm-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:a59c10f13eacf7970dec80dbb9c4e2acb89cb908b5f63b22141cc0b9f1d842c5
  • php-fpm-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:bc1e8a67e2103377d721988b8564dabe7a9c0ca7faf941f8eae016c650d8ad0a
  • php-fpm-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:8f0551cd9901451e2d6c3c4050938d829813d91e2d8e1e59742a3df9dce84d22
  • php-gd-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:80225ff85c79891b20f55aecd207ace9c093c97e4aca1aed2d0044a3184a36d6
  • php-gd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:68dd14c498c34c00dddb9edcbceecace378a30a62062d32d9beaf4e836cb0f16
  • php-gd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:7de51d006efc2b0b08d52226ae492bf65723cd47a12bd814c5e4ebc23c989811
  • php-intl-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:f4b9d401ce1029d9b384c4ed92956fa94b1bddf4000e32d0973fe7fc82c53e49
  • php-intl-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:7f595271e4791c707b0e2e365fcbdd6a70f99fb25d75d228c5b70662ad40df59
  • php-intl-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:7a57b621a747bfa86177d1e5970ea55610e62783b556d5e44f04a318b75a191c
  • php-ldap-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:d01d93ffe3d8a7f2aca257e14e3ee72afb0df48b2a0b06b0854e65ff91bcff2b
  • php-ldap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:36a9b29ce8ec0357ac658009c0b408893cb9c767813fd994fb519027b73cf872
  • php-ldap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:b46fe407252b3861b037dda164a649f79276d5a1dde6ce5f5d719d242f80f38d
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:23a4631a17ca402666c9bf7ac0f32e6eb26ed434426f77ed54d20d74bc36c989
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:cd1d7e5321b924d00934cd9dc78dcf599129d6ad981baa39133cc088f9c39c11
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:14f7e6aaeab2198080ae71ba8ebef0d7663240e0a4ad6ca335db7e20acc19502
  • php-mysql-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:44111f3bac3167343fb05adb26703df560a45389d84e01ea009d04d8b3f4d7ea
  • php-mysql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:cb4092dba98597d9021bacd182433a3338be658c8f2d823178faabeab61bd626
  • php-mysql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:ccd3006d7189a81aa69f98b4dfe8435bf6f417e9672bb4be3353e4e082d81f6e
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:f78f2923f3d932e640bbdecbc886dee44058ef66bbc27f555c12d177aeae4f42
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:ae7de80ec7560774d868a43b7e88fd2dc11643fe0dd2aa587cc50728ddd6d024
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:2b4b813176de94599c1ace92aa986cecf5474c95f792d7ec7d892e1656994ac9
  • php-odbc-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:51b403202169f35a249f176592dd099ab5e800229017e8a1964ad82e8afe062a
  • php-odbc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:1cba67eca04bb2aa25e4e394352a814e5460d1c0178711d2ec55c6fd212f13a0
  • php-odbc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:778905911d2ac3324d27cf7ae2a854bd1771e773080f1295fdee2aa6f23fd8e6
  • php-pdo-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:fd18989ffc16787f9e80b1655f8b695ede3613ac3c703ebe4741a0912521aadd
  • php-pdo-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:0d29d6cf93e63301aabc6688dc3cc96c47318c07af62c93affb15f9cec4a61f1
  • php-pdo-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:ae688e935c59237a275ec4cb794c82e67db275f385b0640f733f7373a95044f9
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:7cdeed69554dadc64dd6ca69421cd66675248d18ad77881e917647ea09f2fb66
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:37e3a46492d54b11e482ae3e9808adc74fea2de58ce6ff74a731f97587487783
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e0c81c3d28b4b8a0ddc2d0068233f32874f5b80de623868f51ee70e5facc5fa4
  • php-process-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:85477606d1a47c7f231c4d43a03097c188bdbe1a72ee98c1292d17e20b50ddfa
  • php-process-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:e94ee1501cc4de288eec0263a871c0742047ed46abb59a2118edb9d633afa408
  • php-process-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:5eaf1597c07c4e7447f10028fcc1dc70f3375dce10b5397849afd55540e5f779
  • php-pspell-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:3df2b120a9ca64f138644f9d97d20f8f26ed8748e6fd7fcf288eb70347f22aae
  • php-pspell-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:b53e5f9e888df9c2a37bcc2a87a61d5cec9bc9cb063c2a0c0cc27ccefc99b79b
  • php-pspell-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:4a75579f2989abc855ae2747ca12b38bc620f77a2db0be78eb8dffe3215ac1ac
  • php-recode-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:8a3b1bffbe107ae4dee957c7febd6959ad82d5894bd108fea78d70980d48ba2c
  • php-recode-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:7a0a51cffe83631bc6b871767fad8994294967d573b777a66d6e7680647275b3
  • php-recode-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:667d462438b10afd13e3b0098e28d6ba4db939330e176da054eb380737ca1646
  • php-snmp-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:cc323eeb0b2d3a914b045f382b286194d5c3527878ab74837db7ad5c5b3d0a3a
  • php-snmp-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:1b539878ca4169fa4169787a12d8a5914db834e2ad9e010db070c851281b943d
  • php-snmp-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:74ac7df26dc859e468808e1a7ce81f5a8f2f2f3f4e85aeb503efd2e0d090e144
  • php-soap-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:62d789789db3a3d1180428aacbf7f598498bbd48520c49e87f17923f479ec5ca
  • php-soap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:b129c0ed1fc8bedc9749d4ee4a59e18d020552cdd16631a3aabb1ca26aebb335
  • php-soap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:def98533664232bb6cbfbe13b20c1292127b2a72496071d19202510e7decbac8
  • php-xml-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:f9014f7581f9532b79a4a910a5544e057a00123148cffe752bd797d1468028c0
  • php-xml-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:2b2bce3e0497194067333a0928cc4000d00c5747ce65d7032adf0852cdcc5554
  • php-xml-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:3aa2bd51a8f02fd4213b3a12990f15e99fba7f2a7c1db57b412913582e7dafaf
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.aarch64.rpm
    sha:18c82d637441b15cdf34d12e9698079fe110d583593e21855f505ce518c46dee
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:da5b4ad352bda92268df0d4a01891cf8795304773e4d70120e6c36f10f620f4e
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:d9a7a30b2ecd2e6e2ef1efcf2965d158a2ba72bf0e85b49a9bdc2164b4d15b91
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.