[CLSA-2026:1792743944] php: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-23 23:34:57 UTC
Description:
- CVE-2026-93682: fix out-of-bounds read on empty Location header in the http stream wrapper redirect - CVE-2026-92842: fix heap out-of-bounds read in convert stream filters with NUL in line-break-chars - CVE-2025-14181: fix SOAP HTTP client response buffer overflow check relying on signed integer overflow - CVE-2026-6103: fix phar tar entry injection via unchecked entry size and data-carrying entry types - CVE-2026-91765: fix unbounded recursion in SOAP XML parsing, decoding and WSDL node search - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin http redirects
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:77d97bc9d831c0d04db08497a2a249a1a1863972a40899fb8e396bdb62749eea
  • php-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:618678cdd7156648e7d8b3e9a33bacd3147ff94712b8fbe09ef86447561c44a2
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:275f4d30eb5401950ea7b49a128092defcedd0201ad732359996bfd692032417
  • php-bcmath-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:d6916f6b0fccdae21191e4ede86395e6c820e75fcd697d4ad632a27158b43ecd
  • php-cli-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:2d2f756308f3ebfda5dabb7828c982bfdb1f0f2e0f3c2194161dbf77eb046fe3
  • php-cli-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:543ee4b6137cf52eb459cfd47a0c69b78ef51d1af999c3e54c23a40987e40795
  • php-common-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:58f706c9eaad196679172fb18301fff17770470aff06e8b9f093145ddf2d1b00
  • php-common-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e85bc5f57c5c870cfd5b43e42ba2fe011e2ee6e69dab00da0824e95d512f3a3e
  • php-dba-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:802a650b3ff3329127eea265e6dcdcefb4934737e386e03025e9ab3b64411ab2
  • php-dba-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:990cca9701bb3621f3f256f8369343af33a96a5cf6f1c1f23f53b02c7ef5135e
  • php-devel-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:d74cb5435084a9c2568f685daca0d5a81f38c7cfa6563699631cc88a0b9a5d46
  • php-devel-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:fe23e9c4d42a7dc32909b0806fdcd9a64b8c2dbef1bb0594e4c7a5ffaf3078de
  • php-embedded-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:7e56c1abc221c1ee74abe257fc55dda3e47b31da5aaa06136109a460e433c16b
  • php-embedded-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:575fdc1fa4a4fbc0768836c1467e322e1f02c4ccb086d161b159835db391d692
  • php-enchant-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:e4b01d49d65971c0a0d63216e20440aaa60f3856f9a071a57247df7701a3df3f
  • php-enchant-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:8968ae1b7e6544f8b04fa8b56e3a58b954cdb869b64e9ff73c981492579a3c76
  • php-fpm-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:2fd08cd7120f574fcdc41afdf07f4ae505e36085b3178cd9a3c754e8e6dd1adf
  • php-fpm-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:6d9883c324284f203950807d8a370a7d845eac24ef58424b8ec8443076bdfeee
  • php-gd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:c9b29e66c23158ce65174e7a35f81ba77ee0044c43d34e574549e71393c40aca
  • php-gd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:6da0b96a27a007a3f37c7e9fd9f3b5f3f8a28920b70d0bddb9c542f0935c8c61
  • php-intl-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:c1300d94f5d9adfc1331487163d5653791d82bb1d234970043fc730e580790d5
  • php-intl-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:26f3d4a9b80436a83b4a63fcce074b3562eb374f71619beec8a83eb354386eb5
  • php-ldap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:2a53e26a40a85414f9b56ae91e869a57cfec0fadd4b5d955d70e2fcfbb20d4b0
  • php-ldap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:102ce3916d8b94e40921469376825d65eeb2433c34151a9891ff41e0f636a4d8
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:8ab7713d6c15dc8d60599c5f0f5db87af5df3e841346c6dc3c4b018d2d8a7874
  • php-mbstring-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:ad332281f9bdf1d0c8e492728e3b4ac297a37c60290d5f16a570cf999160bffd
  • php-mysql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:d0b97ccb1ea9df54f8455617040578f75f60ad5b54df5e7cf454a1d48c6dd7cf
  • php-mysql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:347e5f3b689c5fae25814fe60ec38188e85f94eef6e5dc9d2106face8ebe28c9
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:d36b0d229d220d0ede0b148aaf8e9dfea55136b222ee8ab12042e361477c4555
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:05a22058c25c6caf9cea844b6dbec710a4004871acaa595aa77e4a431dfdb77c
  • php-odbc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:35855756ca05ecbf25077d1d4f568b99cd4bdfe7cdd6dc6df46408b30ecc4640
  • php-odbc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:989400b64e260cec077b4fe2bc000a1978ebaf46ae5a10e473fffd7026a3238d
  • php-pdo-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:a487ccc835ff2c9926acbc5f141704ab3f5202ef76d4d52371e5748e130c57f0
  • php-pdo-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e0a77471e6c1170dc6bc6aa1ab20f2edb13dd07897f6031f079355b77968a0ab
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:4e0cee38b051973d5de784b94c58004ef5c1e7533a77ad09e8f227efb3d97184
  • php-pgsql-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:9c0304b44a6c47f1e0d4642a7d29f33e24eac8c8267f7c0ec39b11b7f37cdc7e
  • php-process-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:14dbb19c64c7413c5dfc9e3379deae7876522575fd858a649027ca098cfee63e
  • php-process-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:84e4f471508d8c9e96587e9024642ecfe2ca27ad37cf199f80512ea74bd56bf4
  • php-pspell-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:f1ab8e7a99fe70f7085d2c9f1e03646c1317453aeaa7f5278b44458a2154c5a9
  • php-pspell-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:2e4acfa6cac1045c168ab30c1d803eef5bee74c636eaf7073797bddb1f5a3c3a
  • php-recode-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:5234532e3417a818440e1db65581eb2a9cadc8e32a478cd6dda1d8ca33e19b7f
  • php-recode-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:5006565f0ef0eaef21eaba046a1bf8666b8d944cf9d1503ec84d5ec2515dc64d
  • php-snmp-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:d435e0f6ea63a56f1fe108ca1104eb268d4e497de5acd0c8336d68b0aa93f9e2
  • php-snmp-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:e2235c13532e007eb4259eb846e624a4cdee8f388ce6722c77c8d8cd2cc83ac3
  • php-soap-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:01eccc732095a3f5146a6bd1bbe6a6e94d071e4ff0e38ced7edda059084be389
  • php-soap-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:3bc82ca28b3bc041458f597cf0152e705feae7311c76f75ea8f484020fca4c44
  • php-xml-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:c191e894e3cecc017b34e01049faaeb5c0429931e4e4de6f1e0d4fa457bf45ae
  • php-xml-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:5036208d66d1347a54f13325c0e8680d9c484a44669cf402c0c3962cde730a4b
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.i686.rpm
    sha:693af4b6b4a1e2c07c0dc8f9f556d411b153d2627bcd6949478be8681f3316c3
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els22.x86_64.rpm
    sha:73ac6716166016e775426e8c30bb30542f1bac34b8c00ec04625f048170c2161
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.