[CLSA-2025:1757947823] php: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2025-09-15 14:50:27 UTC
Description:
- CVE-2017-9224: fix out-of-bounds read of a stack in match_at function - CVE-2017-9226: fix out-of-bounds write or read of a heap in next_state_val function - CVE-2017-9227: fix out-of-bounds read of a stack in mbc_enc_len function
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:1c6af7da7581097de925f3c74f3ed43b20af420b6b4c928b78a01a89b85e124e
  • php-bcmath-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:e2d5fe66102bf2f5f2a91d71fa920a6f0e1d5807b6d409db3fd04c0b33de7875
  • php-cli-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:844042e519f8451e67a52d36f6a1dcb74e03ce2e211b1482c7805fc427183f5e
  • php-common-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:f2cdbe9c0229bbab7bdd7159af7e8800d1e266a33758af035da8a11ff65f8010
  • php-dba-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ef7287bd68598984cf1fc66d726e869de4eebb3ca78fc40cd9562e71895b373e
  • php-devel-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:6cec4b96456d84fb1dd931cb8b06951fd180d329189b3b0a4e9dafe61f93a788
  • php-embedded-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:8d9b2c253616f8031483b56e47ca51019411e206229f079975e8749a585556f7
  • php-enchant-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ba622b94c7b5247ae8338b1a9ae6a36e8b716a576263d24bd74778f2a8a64c56
  • php-fpm-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:bc825058cb7558ac22afbe98d8db5c7b61ac670305bfc9d66e7b7111a4eb3e3a
  • php-gd-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:1e1e2433000439afb50aa4182497a7a8217bef9f6e79517a9f6ffe4a5e31c5ab
  • php-intl-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:3e4c7e72c21c20337da74e8196583c63a64dc29bd9df0284b1ae6b887e1d31e0
  • php-ldap-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:a6f630ab4b769493ab048dd4553cccfa17ae9d6e28186188cc4a913d8aad9704
  • php-mbstring-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:95f9f5fb8b25541fef053c304aa9afa1c2d115ee9c5de835cb0d125d9fd049e7
  • php-mysql-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:1866cd1edd90b89338a88857d03d6878ff4f16675036c1e222dce33c6e413913
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:bd85714a808e05ecfae48453354dacb8da0297643a2e6b28bab1757dfc8c5312
  • php-odbc-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:5504fbc8d4dcb49af86eefd99a1d73c2956aaaba1b4ab8f4acac5a7d9a944caf
  • php-pdo-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:6ddb482913679f640b6f46317cd74730f1fecaac5a45c69094274363aec00b41
  • php-pgsql-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:dc4236a175c897b216ad0c7b9246b928fd012ce37e45694745ef5e55fe0de0b8
  • php-process-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:7aef115ada6c5a507dad20217f6319f715089c395f6761596ac20ce4648b0cfa
  • php-pspell-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:4ea0d06dec67fe2dd4228f6efcdcaef734dedfc0547e9e08cbc200437c1e986c
  • php-recode-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:535c7701cf03d35ca9a60fb0ec7d6cc22ea79d4562f8de6db9b03c87a85eeef5
  • php-snmp-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ee2df09d79a452d6269721a69a93db2fc6e887316f7986672e833c5bdfdf30f6
  • php-soap-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:1c5d3afd0b209237551914780ed7943ceb6f415497fea107b9acfad7c19d77c3
  • php-xml-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:e5270f7b5d9170a8a99419f6c18fc82dcd4ee5c15ed65198d84cc29d0d707b98
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:5a5a5c256e2d4310c79a37a143f14996df18854bdd0a883391ef14b93ecb851c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.