Release date:
2026-10-09 08:49:44 UTC
Description:
- CVE-2025-1218: fix mysqlnd wire-protocol packet over-reads
- Also fixes a pre-existing use-after-free on the row-reader failure path: the
CVE-2024-8929 error loops free every field decoded so far without clearing
the zvals, and the result set frees them again at teardown. All 3 sites now
clear after freeing. Confirmed under AddressSanitizer with the Zend allocator
disabled - heap-use-after-free before, clean after, on the three new
short-length tests and the nine CVE-2024-8929 stmt-row tests. Upstream still
carries the same loops unguarded in php-8.2.34 through php-8.5.11
- The mysqlnd_ps.c hunk additionally releases the result's own connection
reference on the prepare-EOF path: before PHP 7.4 (upstream f365d0e00ed9)
free_result_contents() did not drop it, so that path leaked one reference
Updated packages:
-
alt-php72-7.2.34-96.el6.x86_64.rpm
sha:6701e8729d12263ea329fc5e4d865ac01420bc32d121d4486ad17bbda553fbdb
-
alt-php72-bcmath-7.2.34-96.el6.x86_64.rpm
sha:258487d5e4ae4c33066ffc7a9caa20a9b5cb368ec31377d5df43ef0d748bf1a2
-
alt-php72-cli-7.2.34-96.el6.x86_64.rpm
sha:9f2b8e7ca2425f6487a783f7bcb93e3ed3a47272373381a5afa34666b65f9e2a
-
alt-php72-common-7.2.34-96.el6.x86_64.rpm
sha:b527f8dde77d95aa98bdb12f912ea9d4834254172a6b203b0903587a93401358
-
alt-php72-dba-7.2.34-96.el6.x86_64.rpm
sha:b8052e22dba5be8845478803afcae30ee7d0149a18e46972a324eb27e143a5da
-
alt-php72-devel-7.2.34-96.el6.x86_64.rpm
sha:d9cd0dd431bb6664018b1a886d5ca7cfd0ae11c752f9b7fd3cb0588a55fabbaa
-
alt-php72-enchant-7.2.34-96.el6.x86_64.rpm
sha:c09c59c6a67f1d664dae61a3e340eac2782f021f26ad8594e10aec145b22c0dc
-
alt-php72-firebird-7.2.34-96.el6.x86_64.rpm
sha:b7a3190dd69ccb0eb0e0b4cca42822986384d38d0f27f63c485a57d19e01846d
-
alt-php72-gd-7.2.34-96.el6.x86_64.rpm
sha:c029595cc1d2a62c74439a4e1083fd61ae1649ab60716eeebf0dd3452af31196
-
alt-php72-imap-7.2.34-96.el6.x86_64.rpm
sha:c4cfd88b5bf357eab2735a3ea35f95c7e6382da1729bd5a7b18c273e01c13fab
-
alt-php72-intl-7.2.34-96.el6.x86_64.rpm
sha:4f904195e221653f56d40bb29c72a041410e9f9a2bf2a351041303bbff0c488f
-
alt-php72-ldap-7.2.34-96.el6.x86_64.rpm
sha:5e500aac16ff28e0ecf4c38152500d8a50eccc4ec40899bd8e345f3539975a17
-
alt-php72-mbstring-7.2.34-96.el6.x86_64.rpm
sha:ca8645edeed8965f2ed9798e8f45ed7123e17796d5e6020f8854523591562a90
-
alt-php72-mysqlnd-7.2.34-96.el6.x86_64.rpm
sha:249dcc0782b0787c6bd3b7a6589a677b5512511e96b40650ce7a02c2828cc157
-
alt-php72-odbc-7.2.34-96.el6.x86_64.rpm
sha:7644e04e69458849476a6e3c73427c26ce59e9a4c4d2fbef4327c97d3e6e9a5b
-
alt-php72-opcache-7.2.34-96.el6.x86_64.rpm
sha:a6b3049c61bcdbd9dc838a01b553592143ffcd53343bc1f80a672fb11001828f
-
alt-php72-pdo-7.2.34-96.el6.x86_64.rpm
sha:22f0ddb087114e37114ffc2ed04e7e84373f3bcf38d89a7acb17e4fc47a05165
-
alt-php72-pgsql-7.2.34-96.el6.x86_64.rpm
sha:fbf9c9209515961a01819ac1796c7096822aec4ec6fca93c954386559d8a89c5
-
alt-php72-php-fpm-7.2.34-96.el6.x86_64.rpm
sha:d3a988d17a6da02d3ae721e22e23d5178f7016730a69bf598cbb48eb6c3b65d9
-
alt-php72-process-7.2.34-96.el6.x86_64.rpm
sha:5cd4836686f1447206a639cc1af8c71342297b2c2936d5af34fd5efdd2def318
-
alt-php72-pspell-7.2.34-96.el6.x86_64.rpm
sha:c8a144a07419cb901d8b0c4283d29af7038e7505bc0d2602cfb81d55a7ef8dc8
-
alt-php72-recode-7.2.34-96.el6.x86_64.rpm
sha:43fc3eed7d5a9eed0f6e830ca07a38e1e93d29365fb93fde69d1709e100af7f0
-
alt-php72-snmp-7.2.34-96.el6.x86_64.rpm
sha:53c805f5e50957cb4e49e2c9d7d45140a32ec78c1a6dd0bff12714f0f0e64d99
-
alt-php72-soap-7.2.34-96.el6.x86_64.rpm
sha:9966db32e7d9274e5dcf688aebbed28ce510a47f28b48509a8c2b36f68b27294
-
alt-php72-sodium-7.2.34-96.el6.x86_64.rpm
sha:f656a40855d4dcdc09ad7cc5ab4a0d112845527ebca568906c5b3153f4bb392c
-
alt-php72-tidy-7.2.34-96.el6.x86_64.rpm
sha:8199aede7e8cf45fd7fe5a04984e4200e514ce8933f563ee5b1dad2c9cfaa7a1
-
alt-php72-xml-7.2.34-96.el6.x86_64.rpm
sha:bb07622e594151abbefddc6e09f266fb64d3f69f030ffeaef006cbf9c6866266
-
alt-php72-xmlrpc-7.2.34-96.el6.x86_64.rpm
sha:c3debccad0eec7f08aae1414eadfed079457454a0b8122af407b135bbb747de5
-
alt-php72-zts-7.2.34-96.el6.x86_64.rpm
sha:75a4c527845eed3380197167fba8fdc7d57bd2fa79770df5327bda37b898ca11
-
alt-php72-zts-devel-7.2.34-96.el6.x86_64.rpm
sha:61849e8b82b881c957720b36462c0485104d6abc327804d159bfaf87e7f7a1a9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
