[CLSA-2026:1791824382] php: Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-12 17:00:00 UTC
Description:
- CVE-2025-1218: fix packet over-reads in the mysqlnd wire protocol parser (GHSA-r6x9-5r99-36j7); reset row zvals released on a row decode error to avoid a use-after-free (downstream correction) - CVE-2025-14181: fix heap buffer overflow from signed overflow in the SOAP HTTP chunked response size check (GHSA-cj93-vc83-wgqv) - CVE-2026-91765: bound recursion depth in ext/soap XML parsing and decoding (GHSA-rgrp-mwpx-f6rm) - CVE-2026-6103: fix phar tar entry injection via overflowing TAR size field (GHSA-j3wh-g957-2m85) - CVE-2026-92842: fix heap out-of-bounds read in convert.* stream filters with a NUL byte in line-break-chars (GHSA-88hq-2827-7pg6) - CVE-2026-91769: do not fall back to the certificate CN when it presents a subjectAltName service identity (GHSA-vvx9-73fr-5jjx) - CVE-2026-91767: fix out-of-bounds read in php_openssl_matches_wildcard_name() (GHSA-xr7j-rvgx-xq5p) - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin redirects in the http wrapper (GHSA-fpwc-w8rq-cr92) - CVE-2026-93682: fix out-of-bounds read on an empty Location header in the http wrapper redirect (GH-23467) - CVE-2026-91768: compare all 128 bits of IPv6 addresses against FastCGI listen.allowed_clients (GHSA-62xp-839h-2637)
Updated packages:
  • php-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:ac42d9caa4ba4676fbd3315c1c13887f01cb1ce58f7732a7f3112c3da1a0e43f
  • php-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:25648c38fff01699dd57374f131a7a51a87501767c1cd0f260fa8a306de4161b
  • php-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:edb24c8f25823f12f3ee97223a703c2ca8cda7ad7bb0e8ebb2539793b8401c50
  • php-bcmath-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:a9bd43be3f15504b528727f5e14ea1f9971c1b07fdcdea99c82cb88ffb48d30b
  • php-bcmath-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:b4012e16d4ec400115a50548db80ece57ca25ead4ec22fa59f104c35a4c352d4
  • php-bcmath-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:c6b0466719b2787663bdb1ed66986528a58b4696fafa5e320657103cba1a113d
  • php-cli-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:9882acab5420d6a65023899efaa3fefc2b1bf551c7ae83f65a11a2b083304b44
  • php-cli-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:c17723a9da95eb1a80accc8bf633969a194b98723f096549db4dd3db19db9669
  • php-cli-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:6b19c2b5911237c80a1ed0a7c0c56d0dff3fa83cb2af913db67f11f1409f473b
  • php-common-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:2e02d3255790ffc1f12e823800444eef0a5d2ddb90f001708c76d931a561331f
  • php-common-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:4a5824e8e77a20982e53a176eee150a5f8c3ee468f5a17e738db154eea77e645
  • php-common-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:1948eb0d3dd21bc5f82ed2a3cebf7719037774b439442590c59481c66b5670c8
  • php-dba-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:9f19d5bbc4e0a587bc66a47c9dea5ac6ebcb2b91faf38e583391ceebdccd3a99
  • php-dba-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:fc56bec5b1538aa6ac392a82cb9294ba56dbdfe345047f92602b31732be72823
  • php-dba-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:9142e52979813f17c5bd00d74671e416bec4769b78e26edb5fa3fcbe532bc581
  • php-dbg-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:8f3c9d9e738fc0f30ef271838005ece12859238dbf773ef93201cfb35f1158d3
  • php-dbg-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:1a05e3abce123d796506ea709cd6d2c3797e0fcf7ffd07b4ad4a89471fbf4dff
  • php-dbg-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:65bac1d205129b0a701d11e0adc622ddeaefef74013b1fbee8c85e4b8f6967f5
  • php-devel-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:eec1843993e8336feaf7bb9f0ddfb0d583384d9037f819e3a4c9102a26a09e21
  • php-devel-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:0b0ea7dacd70e9bc847e19ec22fdc994bc696c142bc44eed675218fd46b9c115
  • php-devel-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:172744287f8ea735bc115eabe5d7982c4615c9713f36d2c004b624691d787d0a
  • php-embedded-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:13ea22974a7f619b1c379fb363aa78411fdb4ba334619df999935f3c554b6328
  • php-embedded-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:ed7a415db342bb0d05775e4b278d466a9e1601765b86ec3a24bddca081ff4934
  • php-embedded-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:c4fe18be12786bfc094f02f3e7bc46df18805d19ce1304947e12ffbdc70df3be
  • php-enchant-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:f4a63042c708bcbdeed190f319e9a35ed6c6e68e6990d13e1ffb5b7c688fcbc1
  • php-enchant-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:7b76fc170e0d33081bbf8011e8ff86161f21d1c5273c256c246d2289c06c90c8
  • php-enchant-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:4ccab6be25869c776f9bc1e3755bf3ce176fcd5a28913fa009ea584923570cf9
  • php-ffi-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:0cc2ad68e9f776657adcbb865b45c85f9a6681cf5c14a4146b5bf3a1179fa6b5
  • php-ffi-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:79aa6c4dae8c59b3e55b6b4f4bcc61d462aa53fee911106c779e170311927003
  • php-ffi-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:2240fc5918820caf003df1488009d235287df54c92ffeb9e9fc13ae3fc95e3ca
  • php-fpm-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:84b75b1b886d598f1fcc59673b125648b6bf7e1af579522b24bc285db0fc5c42
  • php-fpm-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:b960912a2b6a2a07fc429838b020b954fc10b171069297f766f0eb7e89a0d567
  • php-fpm-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:a7b17e88afc4a77448e9a41aa743529164e9e664242659ce033ce6023ce3e084
  • php-gd-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:630ce3c5920e625067d07777117f7b9350531aa70ecd8f132cd17f17763d7ff0
  • php-gd-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:a67f65413447c467a041618cb70f45944cdb191641f296df8cacdabf9c383ad9
  • php-gd-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:e4deab38b1d1f53707f48dea3ad6b04a62f7137c6a3ec4cfa97b794334e14ff8
  • php-gmp-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:b7854b5b6604fcb43244dfbd6572d2c87cfa73d6d89b45fa6e13e96699eed743
  • php-gmp-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:395e06e85fa19c008005b7be058b9073365f7e3043eb685ca02bef9cd41cc802
  • php-gmp-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:4097cec04c0c67a50037dd71a639eb3f03bbe49c7deaf7b55bc926efa7545642
  • php-intl-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:6e40b545a292e8a66854bed3d2ce5f38bdb03d4f40566a8a483f7d21e5a70fb1
  • php-intl-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:a2999f8942e6d482a83537795b0124df0508368ae23ac1c8b0e625888a8765b3
  • php-intl-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:e24c6e991ed217faa692ac6abf2c6dff5eb45634618e69050860d11bd9a1f7f3
  • php-ldap-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:7ee61ef6a2eab2ad523ce58fcef96b1059946da5f5af4a06ad0cc1bec7beac79
  • php-ldap-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:88f24b1f572888f993bfb261653d1bd4f59c6d9647e493e0a74c24d4d46dc910
  • php-ldap-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:5e3c49ab36f31e1aa1fe8967fcd0285934bd2ebb6d4137034e472253973e9dcd
  • php-mbstring-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:54918a1944c2d682868aa350f7540e65823c9ef0bdd6716a994dee886c28838b
  • php-mbstring-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:ce4ff916a34f165cf593e65126522674aecb87171785ff20a99f6f680d3bfa74
  • php-mbstring-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:e47eac50e6bb9bc0efe039caae07a8cd6aafd90f5884ddd77f8126e146316fdf
  • php-mysqlnd-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:a6a06269ef3a59a885da7bf34a07f513fd83aec6ec8a0e00571a064e94d007ce
  • php-mysqlnd-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:e10e97b9b48b1091dc3606b6944fe3980ea664ab90a55bf69012d5e34ce3484d
  • php-mysqlnd-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:becd2f0e3f45e50f8003012f928f2148c9315ac31b20acb27e9d7f4c601eb23d
  • php-odbc-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:fec6abc933382682942b7c9674391f588ec4662f8f1f52790f1041b3f5fc3cb1
  • php-odbc-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:728673105e292959e598f3f2fd2d1e300797ee9337bd856d2066017bbc8b8e1d
  • php-odbc-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:2ac5c3ffeea4f4f503da42f9efb184137f8f36b615eeeab23fbfdad26b2661e1
  • php-opcache-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:393f61441a87897aeb966d6418ee2757929012704468a33fe16e8a9cb701ad8a
  • php-opcache-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:4598477ca69d967ffaaee0302468204f66ee3a8a5b96206709f1699527ae3229
  • php-opcache-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:0ad6e30ce89c8e14bfd7964ee90ddcc93300aebc964496d4cedb63e1680dcbdf
  • php-pdo-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:d1f21d7ca5efdcb451c7658a807859b2633a554c7b7114dff10082beafc8c7ef
  • php-pdo-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:989137f2130f0b89f599ca766cd91aba5db228b5473ab95a6926785914295d48
  • php-pdo-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:c447ae8d866b7ed73404726107fa018b54a7facb4fe958d82d7688db194c41e5
  • php-pgsql-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:f97052c60b13800070b2bd9597f6bc79c6c3c475adce9bdc11d235b5c4508b87
  • php-pgsql-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:4257b9dbca6f6ce2bb059a6b104c20a6be48b1ca1342b083c16489e6260be23b
  • php-pgsql-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:4504db468cbb46194e3161ffd1cc248880a5ed459aad00126aa952be5af9a2d0
  • php-process-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:5701ca2c610c4d8a254c6e8aeb1d35499bf1b7fedaacdac095dfa61bd4cbef91
  • php-process-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:b1b91ca752c3f459d87a23c780c130fc262c0b92e8ff283fbeb52e253339a002
  • php-process-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:99134f333fbeb0e561c63f9fa4863c04ac12c936056340bfd4881b55ecb930cc
  • php-snmp-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:40fe7a445dd8c2e3c00ac3eaee974c8588162fb11eabe8c58e47f170751e82a3
  • php-snmp-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:9f715138570cbcd163fb1ddd28dd6f1a755deef3a5c93b0f67f3248b76793781
  • php-snmp-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:6c3d44295054c6f0c1924884898443fd5e237f14c43d9dc353ec1bc3fbd4e486
  • php-soap-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:80f544189009bb59011571c7dd266296a37359472fa53017b1c283fb97d0256e
  • php-soap-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:beae9d0eccc0f7bd12d2ef8676830cdafe6a8547634fc3ea95fea45214c4e499
  • php-soap-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:e9899433b85a0900c6c5d0e4b22b52001d173ad3b662e39a73640b6c7c43c92a
  • php-xml-8.0.30-8.el9_8.tuxcare.els3.aarch64.rpm
    sha:884832716e62d01e02696d17526098f46f1499fd2e1b2239f09230e0611724d5
  • php-xml-8.0.30-8.el9_8.tuxcare.els3.i686.rpm
    sha:42ed69534ea2ed0dceea38818f3cbc826d0b198f3f2727442ed8408da700025a
  • php-xml-8.0.30-8.el9_8.tuxcare.els3.x86_64.rpm
    sha:2fe5b2c953019c25fb3698fb27fdd72ffc1970bfe5e336ab3a02cb4d7d3792dc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.