Release date:
2026-10-09 07:07:08 UTC
Description:
- CVE-2025-1218: fix mysqlnd wire-protocol packet over-reads
- Also fixes a pre-existing use-after-free on the row-reader failure path: the
CVE-2024-8929 error loops free every field decoded so far without clearing
the zvals, and the result set frees them again at teardown. All 3 sites now
clear after freeing. Confirmed under AddressSanitizer with the Zend allocator
disabled - heap-use-after-free before, clean after, on the three new
short-length tests and the nine CVE-2024-8929 stmt-row tests. Upstream still
carries the same loops unguarded in php-8.2.34 through php-8.5.11
- The mysqlnd_ps.c hunk additionally releases the result's own connection
reference on the prepare-EOF path: before PHP 7.4 (upstream f365d0e00ed9)
free_result_contents() did not drop it, so that path leaked one reference
Updated packages:
-
alt-php72-7.2.34-96.el8.x86_64.rpm
sha:1ae7b97d52733bbf83dd8cfde341ce9f4dfba4769aaf9890283dc03245eade6b
-
alt-php72-bcmath-7.2.34-96.el8.x86_64.rpm
sha:3482e44d19afb790ffc5ef557cc5e4abbdad6017316ed232f5e08cbe5f80cecc
-
alt-php72-cli-7.2.34-96.el8.x86_64.rpm
sha:1136272355a4113865e8469efe482c233c2813cd459e8dabfdf0eae7b23757ec
-
alt-php72-common-7.2.34-96.el8.x86_64.rpm
sha:6f38573cbdeb769f63158c8d7d3ac8df8219a3101eb3fc04011b5fd6863f9397
-
alt-php72-dba-7.2.34-96.el8.x86_64.rpm
sha:4d11ec9a0bfb683efac27a1d595d1069db0838283ba1e51848269d175a480d16
-
alt-php72-devel-7.2.34-96.el8.x86_64.rpm
sha:41911f75b35a96abf81adc384e8d7b4576d63a2b37cbd0586b20c14bcd84e507
-
alt-php72-enchant-7.2.34-96.el8.x86_64.rpm
sha:84e3c2e919f9eef69097300b1d0914f235b56c387be7e51523f4d81b07302066
-
alt-php72-firebird-7.2.34-96.el8.x86_64.rpm
sha:e080398bdceaf2c4d4b312358bd508157aa4be0d515af4ed112f5e2b74f4a13f
-
alt-php72-gd-7.2.34-96.el8.x86_64.rpm
sha:11cf9cafb38fa60691f6d135ad9c9a38bb77e3dec70eeeae3dbdd741e8dd75f3
-
alt-php72-imap-7.2.34-96.el8.x86_64.rpm
sha:5bf4a37eaecf1a49363a1824b9d34e0ee942d55d2bcf936cd35da78aea4d9e96
-
alt-php72-intl-7.2.34-96.el8.x86_64.rpm
sha:59aa73940d6d36a0f75e56b32f2e1acffb48476f1d8f7fd1b0c6ceec3408e3ee
-
alt-php72-ldap-7.2.34-96.el8.x86_64.rpm
sha:9c225dcbaf6a3009b88001eaebb30447b26dfb186943b2984b8e982aefadd5a6
-
alt-php72-mbstring-7.2.34-96.el8.x86_64.rpm
sha:eb13d07c616a176d993b4398e0971ca5d7da436bd5b7165be0a1fc2661139587
-
alt-php72-mysqlnd-7.2.34-96.el8.x86_64.rpm
sha:563b6afce0b0d44412e61dc7abc9cc0a8d65e11597d90b598da1823e31085c93
-
alt-php72-odbc-7.2.34-96.el8.x86_64.rpm
sha:bcc86605e22bef058dd66998532070861a3380c250716e449c7bdd6949c26f3f
-
alt-php72-opcache-7.2.34-96.el8.x86_64.rpm
sha:6ade3ddb2fdced52fa08551eb839005336d386fbd5f8c204b5d64ac1b9d762c9
-
alt-php72-pdo-7.2.34-96.el8.x86_64.rpm
sha:c6906ab1f75a3ee31d70f9b9f7eb945697f1fd56c163a11aaf013df73c835965
-
alt-php72-pgsql-7.2.34-96.el8.x86_64.rpm
sha:d58d55289aaf3463d353e03b44ffc17c60c1cb7b7c7600387475ec317fcdabd7
-
alt-php72-php-fpm-7.2.34-96.el8.x86_64.rpm
sha:2de943971d22e27f0a5fcf95fa89d28d7748de0e524a150b7bc6057582c331ae
-
alt-php72-process-7.2.34-96.el8.x86_64.rpm
sha:a043192a07637d4876bdeafb7c729101ec54a95e2a6c56d898ecda68d51d7c3e
-
alt-php72-pspell-7.2.34-96.el8.x86_64.rpm
sha:8848757bacc5768b22874424f3b8dc81e6a2692a6ab0f83eb5d27d0d0dbb5ba7
-
alt-php72-recode-7.2.34-96.el8.x86_64.rpm
sha:9d8f0b1975e9a3864ccf899dfd86fa09eb7425caac4c2fd3e914ac7136692878
-
alt-php72-snmp-7.2.34-96.el8.x86_64.rpm
sha:c7fdb1716c92aea59d5d331f6a7f41db8f5134715d4fbc67932f61e0dfaa9147
-
alt-php72-soap-7.2.34-96.el8.x86_64.rpm
sha:20199418aa811bf2895ba30cc66e9d6fa043fdc64c840c18204f7268335c2382
-
alt-php72-sodium-7.2.34-96.el8.x86_64.rpm
sha:7f35823ed93a295b395e5907a21f516281bd3f49420366d5ef3b4ce985ecfaa6
-
alt-php72-tidy-7.2.34-96.el8.x86_64.rpm
sha:aceb8b096e3c86539833c82d550eae5244fbecb9e6a9e0c748fb1163de98f622
-
alt-php72-xml-7.2.34-96.el8.x86_64.rpm
sha:62464f65a9431e99aca44b2ffe171afa4977fafa48768b8fb5f581eeec7a5993
-
alt-php72-xmlrpc-7.2.34-96.el8.x86_64.rpm
sha:ad75f87efaee899d43da6401756a134708e82b8c227185f7c3d6e893a412be9a
-
alt-php72-zts-7.2.34-96.el8.x86_64.rpm
sha:0cdc41ff8bb6c08c5aa7950855a1d4e2e8ab6ad089ab43f7100ff9f7c744d94c
-
alt-php72-zts-devel-7.2.34-96.el8.x86_64.rpm
sha:996aa159f033446fcc3f0462cb1dd487a10d73ce5ab10634b26f477d01be6fdc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
