[CLSA-2026:1787558803] php: Fix of 7 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-24 08:06:57 UTC
Description:
- CVE-2019-11034: reject a MAKERNOTE IFD whose directory start lies beyond the value buffer to prevent an out-of-bounds read in php_ifd_get32s - CVE-2019-11035: thread the value buffer length into exif_iif_add_value and exif_iif_add_tag and bound every element read against it - CVE-2019-11036: ignore an IFD entry that is not above the offset base to prevent an out-of-bounds read in exif_process_IFD_TAG
Updated packages:
  • php-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:a69259c51a661ab7e16bc4163e8b83ae64c30d7640c3300a82693452e0bb864b
  • php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:dd83b61c77f61b2fbaa5817a27c32cdd7c977cf930d942ef8681aa5bcb390c75
  • php-cli-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:2e4d47dcd8b8e171cd1bf3df92f634b5c611ea8f0274cc9c06e5d441314df7c9
  • php-common-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:34b43195fc29df39e83c21a9696dfde83b14f75b50ab14882828efb5d193118e
  • php-dba-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:d5e3f80df2d4cec436887a4e22907da52baa7bcb5cb30d7ba4b82dca0f0d077a
  • php-devel-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:298317760e5553cb0d23e684692fdd6e81f9f25cf0e64a71fc36c88247047df7
  • php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:b9bf8b57401d556d4137ae34e07df2752c346635070141ba235a02e8d476071e
  • php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:4642940c95d84d818641dfd264f264da9e56dde68e01c4ced7f180a5785caf80
  • php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:b9169d394092c92b32df29afcaf61abcd289b3f6dbff690e18e9f246612a5886
  • php-gd-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:1447c2c0d11499a83b20be0eb8e53e438a416d7528301e3a49a7c7ddc6780e47
  • php-intl-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:1eaeccc6a61051bca43df316e2339368b293b5428cd7ae570e041e53d9a2bdcd
  • php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:b365dd80e6960ff24710c5ec1da6f611c79403c0de477849178abe946d7cbba7
  • php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:f742b1ce3d36031454800bc5a63bb8bd714674ec19f210bd3415874a346cca7e
  • php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:c3cdffff4e63025cb70c720cfa131b9c1d3999760ef90a7857fcd67d977401ea
  • php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:64bcf52e487cc076780b5414dbc50338fc10320c28dd8f577052f33519a7d0bd
  • php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:07ef453e08ba5c6e085ee40d6ecf53c8db0964926103f70520681d30352a8aa4
  • php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:656062e5006af2a841e580a40be86f172f50097a1ff72b46dbeda82189a0da27
  • php-process-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:310bdf5cf1fa68e92631ba32bcc5ed3ad48321bb2a7a7ede5c962e8d45a391a0
  • php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:0103c1cb264990bd749b9e3c94c62d2ed339fbb60e4aa6886c81ffc09e4cdb30
  • php-recode-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:cf41061f7758c4b70498b5dee59d10bdfe0f207e925d96f017403810586f1103
  • php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:a02dbe1d17cd60824d164940950fad86b9f7ca968deab9ffbbd6c315dfd42968
  • php-soap-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:982265ec9197a4452d8179a3f9b0e64c139395ae0b05e7d62e6e3059de9fb744
  • php-xml-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:e0b8075731d21dbb1b4054fa93b487b2cb4c286a8e0e09baedce712bd598e23d
  • php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm
    sha:dd257784236ffed6910bebc1de34b83ab13296e458721c724d7e2812295344ae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.