[CLSA-2026:1787671383] php: Fix of 13 CVEs
Type:
security
Severity:
Critical
Release date:
2026-08-26 08:29:56 UTC
Description:
- CVE-2025-1861: allocate the HTTP redirect target path on the heap so a long Location value combined with the request URL is no longer silently truncated into a redirect to a wrong location
CVEs fixed:
Updated packages:
  • php-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:9b14b8eeff62350497bdd55abdf86dd71931394d54f6078efd6ccca5fdc8f6ab
  • php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:3986ad0c96a766474e2d8c7ddbcd692872601a5af15a55cefe528dff8109366b
  • php-cli-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:5a8919397527e7e0ab2ae163167e5cac0beecbf4cf021219741d0438addb42dd
  • php-common-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:3b13125655b95b65d719cb6ad62820d90643af8e3c859180185f772389e53fdb
  • php-dba-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:7511fc8e82f4a71193ce414295d3572c168bb6695c4a17f39711e09925d5a540
  • php-devel-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:2f41a00efc389f0c55531ad6575b7ae3a48dba43e475d3a768e1c5be5f5cee51
  • php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:beb625195ab49a46f868ba5e6b1fd4eef5b4d87b417c79eec59330c031ca656a
  • php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:9fd807aa52ea95345b4950794d8d4fd33d6151b40eb38bd7149e20de711f05b1
  • php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:2b659c93307fb4323ff50ad6ba42fcceb017c0c448e6577b029c7c2ee17d5519
  • php-gd-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:5e878adf53939bb41aaefcd01d02e5949cb43ba7e00789fdcea77907b3022704
  • php-intl-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:9bede7693a2af996c82e6d59865f6823a25592fe98b29aa7def4ed0037589a75
  • php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:f6be644bf38ae8008ab7abe7e43e64749062fc2bc3f24846e882ba7b35d104ff
  • php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:18641e9dc9b1799da5dfe01739a92c43e0b279701e9ed079bffa05ff26acbba4
  • php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:fb5fdb70d1d3320b73e5ace664e28de213ed5c63e6ebcf3a258959078076577b
  • php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:c4c6971e2dce12751dac5b1109659a5ec2a92bb48cbe9972151bd80d0b2895a6
  • php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:432cbabec6087bebd057ad87b7b8633fbfffb0cd5ae2d20b68497480855937c9
  • php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:3ac16482703eb1d961df7ea3222dc1bf974a6abbf78a748b15a80160b9c7ca79
  • php-process-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:ee2f4ac4879af27ae12c0cb803d3533fbf1e154d6ee1568a243bc062e2a9b856
  • php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:012f9e797f4172efc03f4cb1547d9a8144bb0186c28b54a42a3ab8cf2ccdf6f1
  • php-recode-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:c926702ebcd523ef8085ab97763490fce94c96c98a6b22b275233c14b9f2a776
  • php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:d53701f17c43bae4fe1adbdc0a0f13d87cb385ca24544bac4421efd435b2b660
  • php-soap-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:f9f92094a00f0bf606f522afe43975cbfd9fe847091c00b71d1dead1e7a5a954
  • php-xml-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:6a73b6bc2c36a6a8548e3a4d00c76593823ed0b55f6b6e7579082c63be106981
  • php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm
    sha:fb46ca39b8297991316954edaa7f129185f85e8e73f883050f47d80adbc8eaa5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.