Release date:
2026-10-09 09:59:06 UTC
Description:
- CVE-2025-1218: fix mysqlnd wire-protocol packet over-reads
- Also fixes a pre-existing use-after-free on the row-reader failure path: the
CVE-2024-8929 error loops free every field decoded so far without clearing
the zvals, and the result set frees them again at teardown. All 3 sites now
clear after freeing. Confirmed under AddressSanitizer with the Zend allocator
disabled - heap-use-after-free before, clean after, on the three new
short-length tests and the nine CVE-2024-8929 stmt-row tests. Upstream still
carries the same loops unguarded in php-8.2.34 through php-8.5.11
- The mysqlnd_ps.c hunk additionally releases the result's own connection
reference on the prepare-EOF path: before PHP 7.4 (upstream f365d0e00ed9)
free_result_contents() did not drop it, so that path leaked one reference
Updated packages:
-
alt-php72-7.2.34-96.el10.x86_64.rpm
sha:83b45d6afe15e42ce093357267bad94e91215cb57663b11c372a32cc262c4636
-
alt-php72-bcmath-7.2.34-96.el10.x86_64.rpm
sha:f20e1b1e61ec210919564ff515275ef8fb5dc8651c24a5f461509f8854c2f2ea
-
alt-php72-cli-7.2.34-96.el10.x86_64.rpm
sha:d0ef79f0c5654e3dff45a157688fba47bc1c6e10722e97771346284c516442f7
-
alt-php72-common-7.2.34-96.el10.x86_64.rpm
sha:40c50c243f4f45492a371b3221a7a9b3c21fc95d2daa94aaf6d68f4f225b629b
-
alt-php72-dba-7.2.34-96.el10.x86_64.rpm
sha:9665953a47dcf463589b1a328d4c4353cd3b9c8713bf0d083b3d5fc7b88a964c
-
alt-php72-devel-7.2.34-96.el10.x86_64.rpm
sha:c43f9aff0b484c8eed9937c609f5038088430aa5b408d23ff75637cae0af057c
-
alt-php72-enchant-7.2.34-96.el10.x86_64.rpm
sha:b2e3eb3406ce4c15977c0cd3d8721e4157cf1c3925e79726e749d06872084bdd
-
alt-php72-firebird-7.2.34-96.el10.x86_64.rpm
sha:8163246c35e79882f5eefea3b1f6ca9305d8c29b217f4f70eaeaabf19ff6df07
-
alt-php72-gd-7.2.34-96.el10.x86_64.rpm
sha:b343e4ae22ff1ee1cda2321e5ad46ea4e3854620278c87805ffc520068b28659
-
alt-php72-imap-7.2.34-96.el10.x86_64.rpm
sha:5df525037abeaa1195db9bc57d4b7102e2412aefe8e36465c870dfb9937f1e37
-
alt-php72-intl-7.2.34-96.el10.x86_64.rpm
sha:1b791198fe6d9a92bf49896db6f900d45a32c4e611722858912acdb66d33fe48
-
alt-php72-ldap-7.2.34-96.el10.x86_64.rpm
sha:4f9ec82fe0d8749ba0b36901bc8c57b692a009beebaafe999067c29bf603b46f
-
alt-php72-mbstring-7.2.34-96.el10.x86_64.rpm
sha:e5f8d51855a5c65942146dc6de02180a352979ba76016cec88ff3b885aff8d94
-
alt-php72-mysqlnd-7.2.34-96.el10.x86_64.rpm
sha:eb2f5628983f3efbf2b08a91a3015f51837b3cdaa7781adab66a01d6be67cd92
-
alt-php72-odbc-7.2.34-96.el10.x86_64.rpm
sha:c699880a17c8e8dd5a78cb678f1e9f267c585854cdd27e6804afb743f58a1ebb
-
alt-php72-opcache-7.2.34-96.el10.x86_64.rpm
sha:a8876444771f3ca1980f18e43fd87369a1fe4f214bd841b0e7fbce58511f5b9a
-
alt-php72-pdo-7.2.34-96.el10.x86_64.rpm
sha:7776ee8cb82cb737643d3c4e2fa078d3f5c4f8c19236e78d032b08d55e17729a
-
alt-php72-pgsql-7.2.34-96.el10.x86_64.rpm
sha:402f901275a423e7f48a7ae773bc43ab890c5502072f0b64d1d2ff4e2582d9cb
-
alt-php72-php-fpm-7.2.34-96.el10.x86_64.rpm
sha:1146b5a6928fdcf483d22cee1b1e056ad46b4aa1bbefee1f670f364a42d09e48
-
alt-php72-process-7.2.34-96.el10.x86_64.rpm
sha:f722f2bb8e6bf3b82cd96ab82e78739c52e67fd2698a8b7d9c25d86de54acb01
-
alt-php72-pspell-7.2.34-96.el10.x86_64.rpm
sha:96b4e94806950c63451facb598ce4615f9e6a4f8eccb5eeac46cace95c175fa8
-
alt-php72-recode-7.2.34-96.el10.x86_64.rpm
sha:0ad65333f33d92f222d084c15f9319c6638c59aa86dc36252ab3e85dfb474d22
-
alt-php72-snmp-7.2.34-96.el10.x86_64.rpm
sha:d869b707a6c1ef15bdcd4a8436f6b34f221ece0cf77a429ecb9371ce292607dd
-
alt-php72-soap-7.2.34-96.el10.x86_64.rpm
sha:ef1539e50222586f46b63a90906d9df511aa0c197551bd551c8be6b66d46a936
-
alt-php72-sodium-7.2.34-96.el10.x86_64.rpm
sha:27e80e9c7509272099781ebe73c84fec019c5f879761df486af2994e74450b79
-
alt-php72-tidy-7.2.34-96.el10.x86_64.rpm
sha:c6a6e1302b598cc5bcb5956f2aa21f300f1dc43c363b209af4c2db346eb719d0
-
alt-php72-xml-7.2.34-96.el10.x86_64.rpm
sha:060a4c5dd538215e06559d1ca34e941c51045da0069f5fe81f50761d755d440f
-
alt-php72-xmlrpc-7.2.34-96.el10.x86_64.rpm
sha:1bf5cf699170d79006278ceb8ac527ecc37e4fe20dfb2e5255fe489813ec401c
-
alt-php72-zts-7.2.34-96.el10.x86_64.rpm
sha:2028a2fa50939bf842c009125cc2b2eacea38447a2cd8fcf0da582895a9ede15
-
alt-php72-zts-devel-7.2.34-96.el10.x86_64.rpm
sha:dc799bdae69992fa331b58a7f3b166b249f8992afa84ccd6b065368782e8cd59
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
