[CLSA-2026:1786634317] php: Fix of CVE-2024-8932
Type:
security
Severity:
Moderate
Release date:
2026-08-13 15:18:46 UTC
Description:
- CVE-2024-8932: fix out-of-bounds write in ldap_escape() by bounding the escaped-length accumulation in php_ldap_do_escape() against ZSTR_MAX_LEN and raising a ValueError instead of overflowing size_t in ext/ldap/ldap.c (GHSA-g665-fm4p-vhff); add regression tests ext/ldap/tests/GHSA-g665-fm4p-vhff-1.phpt and ext/ldap/tests/GHSA-g665-fm4p-vhff-2.phpt
CVEs fixed:
Updated packages:
  • php-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:29c4f4a4b96d962ecf60359e96c0b2d85a52593ccf28b0611161241b2de9bbaa
  • php-bcmath-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:c83848e6c04db91bbbf89ea2129e93a740eecf497fa85e4c85bea42611f93f0c
  • php-cli-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:c967c77a36fe9200bbedfadd81ac138014d240b34f76eba808219e1eee8c0f0a
  • php-common-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:22216868a65327330c019ed8109302f3715773b18024b9c6f397ff9309f73f57
  • php-dba-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:c640cfadf66353a6446b66938c9ce3fd1d4ea369bbb54e90c30efcb8cc8650e4
  • php-dbg-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:bdb60d38a6ea336b3e2a09356bd593806f2acc76ca625d7f5313851d18358f52
  • php-devel-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:643355bc85c89d0a83cc17cd641babbc21c83ae626acbc61609b3919a204365d
  • php-embedded-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:81a70ea517fac5fc42dd80700a697933067e1592c6cffe17196bfa043ae4a371
  • php-enchant-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:4e0427c5328dcb02e23d8bff43ce48d890e587cb67a380f2437f0131ee494970
  • php-ffi-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:7d92efc94249a7030e699f8b8a8713fd5da70a9dc4931fc57f14bd00738e2abc
  • php-fpm-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:88a5228e2d0d71f7a437cc76456b3319fcf3b043ecf054663fe78f6bf2d0b9d5
  • php-gd-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:1fd56208b65e57d960e916f7a8a0e368ec89433993ed51d9b580180f3a63d95e
  • php-gmp-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:1bc30d3207f2998a2a05433f7008d9ada2b8a83d58c7ecee8d565104b7576301
  • php-intl-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:b7e2fcdbd209447ae660e6a7a7fd9291ed8ef543e783d91ea73b5b17dd6edc12
  • php-ldap-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:b5d34a087b39649100ac2c2400393ea048237acb3a28244edc21d7b1907a3bff
  • php-mbstring-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:9368a5708f3ec721316f2110d144b4894fe707042aeb7c93502cb06f4f770a22
  • php-mysqlnd-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:131b7c3f1f13c50cf01db26dc2d8f151bfff48c52c18968d4210a9a9547c597f
  • php-odbc-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:7da0f5e4c2fd50e86af882e5aa8e456cbc1daea6a78d1c7afeed2b52ea8e10d9
  • php-opcache-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:2fd83ade85e49a6ef23124a9886135977063693b7851b96d6e33f1be8824a987
  • php-pdo-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:af9462e3c6c79610dc63d0cbb9daedfccbdaadc9be61d960a930157b9cb7f264
  • php-pgsql-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:3703050e0a92f6e4d6e227eba03d191b8bdcaaf2d18b14794002f2e05185812e
  • php-process-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:8ee6ee8e1de7ca9984942cad3f4b5540b19368e2c28c86a769f364a7dfe3ab61
  • php-snmp-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:85bfb8cdfde92a21738485bbe90ddc246ca88da0b47100d0af3512ee0469b623
  • php-soap-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:65d94ab6d256d44bf144959de7baf6f2f983064ca848a00476118010a25e5961
  • php-xml-8.0.30-1.el9_2.tuxcare.els17.x86_64.rpm
    sha:e90417109db20f7cfde1f1352bd184d41f93aad316ee00ef081ca3bc37d7b4b3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.