[CLSA-2026:1791337488] php: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-07 01:45:03 UTC
Description:
- CVE-2025-14181: fix heap buffer overflow in the SOAP HTTP client chunked response handling (GHSA-cj93-vc83-wgqv) - CVE-2026-92842: fix heap over-read in convert stream filters with NUL in line-break-chars (GHSA-88hq-2827-7pg6) - CVE-2026-93682: fix out-of-bounds read on an empty Location header in the http wrapper (GHSA-7875-c8px-7q5f) - CVE-2026-6103: fix phar tar entry injection via unparsable entry sizes and unskipped entry data (GHSA-j3wh-g957-2m85) - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin http redirects (GHSA-fpwc-w8rq-cr92) - CVE-2026-91765: fix stack exhaustion from unbounded recursion in SOAP XML parsing and decoding (GHSA-rgrp-mwpx-f6rm)
CVEs fixed:
Updated packages:
  • php-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:13bc907f13a3425641dded1e508a2d64ace88e664f696286e26e4ef73f8ab883
  • php-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:39b2d4895196d49bd29bef5e1c791745dce37872bbde573cc19b00e8e4288117
  • php-bcmath-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:9904b68414a10513d1c81a9fefb25524402f665932e7074b2e19633a71fb5435
  • php-bcmath-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:4924265ea3786d648cdd858be9dd3972088e10f8943d4d4c1363fe79772f34cb
  • php-cli-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:a8502083a4d7096aae26e6a94655419aa308986399c0104998a7085f80e196cd
  • php-cli-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:1c6d7b1a5cfbf486a5862869805fb5867c76bf389a53dc559b6538412165981b
  • php-common-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:8e948c41a35d5a4087e3ef351d5aaaf780fd92b4b9fc7bbda140ccfde283b57d
  • php-common-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:28ff2fb0da257d64b2775580af308611a33ebb1cdce840405365e05092ebfeb0
  • php-dba-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:ddddbad3aed9d116c21dd4d7bc9e351cd814d01df0ab97842327891dc12a29b3
  • php-dba-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:d148444c781ce08a338967684e5c2abc28a7d8e4133bfc984d51d19989e240ca
  • php-devel-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:5cb4df99aa585ce9170baa1a381577e364f48ebab2e9e8566befc245b7cabe43
  • php-devel-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:1fbbc82187ab69ea5d791b5ddf38686f54393b89635a720a4cc94e5e0b3e1939
  • php-embedded-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:acf0456cb56322e42cbf2a71da3f13fc3774e2d974cb7332449adb4cf74b6806
  • php-embedded-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:9458bb16d3b3b78536a6e8a0bc8db7f7dbff2b5ede1ccf4b626b025f2b433637
  • php-enchant-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:074a93bbb5b84df6627306c11cb1ee26833bbb39f74a2bc63ec4ef5ceb70929c
  • php-enchant-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:9a47453fbebac05ab8be95d91f5af78435f9bb67fc61cf4d7cb05578b14fc6ee
  • php-fpm-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:9ac8d77422c8335f959626fde94d44c31d9b1408bd0b3ee76577dfd1c62c8c0e
  • php-fpm-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:0bd4774a96d60871418f74e2dff912c647f6e54cfca853b40dc284e382c2dd8e
  • php-gd-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:c60afc3e1f1002652e972dd152772e7938cf03d8611028b798de7322f26dcebf
  • php-gd-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:d7f6e03ec5dc5a8aae6cb0731fb33aa2c737e9a71060766a90d4c777c11bec09
  • php-imap-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:600407619929308831514766c047b7e284dd90ef36af7451f3913ae9d9d70f47
  • php-imap-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:a6feacb268a5c771586f4755a586e83527581779cb1d4e486311e7850ecbaf01
  • php-intl-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:d90398c7587fd48f9aa89274c8ed65af0157268e6d971a0e047ec06dcabecc6e
  • php-intl-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:eaeddb5bbbbf1e58b8cc8f6f3b8856899b7e9666a5d4e0a0f4fa4e7c027a4af0
  • php-ldap-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:eab6ebbcedef67fe360a22f139b6b8c597cc520e104d348423fe9cbc0847044e
  • php-ldap-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:a1b56a8221e113500daec4bbf1fe32454ac851d1bd76f1f7124078721a41bcbf
  • php-mbstring-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:71387e5be096a71c628adb3e88889660c831b04c38a2b8b95663315a53acdeef
  • php-mbstring-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:6bc23042022262b12d416c9e63e5918c42089f470f4b40a09c411eed1fea2b29
  • php-mysql-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:783a7857c7dc6e96cba7911951259ef97057ff02763b0dd91dba1c9a742856f3
  • php-mysql-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:39b863c761638a172fccf6edcc1a8d1e67ccd961c8abe9a7c3222b1006f19984
  • php-odbc-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:9c1c2ab5bf059991e3441a1bdbc1692ce616745f1ab23a8d3121f01fa56830bf
  • php-odbc-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:b56eea6d8c7afe61fa7880b5c41e199e5942c7ea8c7ca5cb34432a4a65c521fb
  • php-pdo-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:0ac8efab869026f8714303a44191eca67f2a3dfef16e94bdfa52ef23db989251
  • php-pdo-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:b3cb4585a3291ee470d48402030b3575241c4a21c1825dc90db6ed7527cf36ea
  • php-pgsql-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:52c9ca54fc4df847a9a5ec709e95d7bd797ed7e36cfb3a1f59b5bfff4e60459f
  • php-pgsql-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:cca2a46a2d698b38bdac9bacdaef7a6aa5250de244e92e163dc71b4856a56bdc
  • php-process-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:7a6fbe413b843b8ec9ee9cc9527bd6898e3efd9983470fdcaf9874ae006a391d
  • php-process-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:88a06a51648f7110a48b0c85a1ffd8c46e0b254f4f705e44f6b981114b02dcef
  • php-pspell-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:0636a12493afe901f92f41def28923deca9cedc398a538382ee2f10610a1d910
  • php-pspell-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:cd1621387ee8ebe672c093a2828fdd8b53f8ccd3e5de23e1f0acb42722a4e6ad
  • php-recode-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:700fb4a9c1b2a43e48dcb8c027ca89cbd45662c51ca29fa6ba347f943e192765
  • php-recode-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:adc49dd66d229ac2778f6be00e0f53181ef0a9f823192138a035a41d48f80c03
  • php-snmp-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:c3156932dc3907ad3289c165b35f63ead8a20fa1fdc7042ffaf83404d6681308
  • php-snmp-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:3cc9fcd4d5634d5526c2d40da3b5a4025653e5333a551020a23943d5e1ef6cea
  • php-soap-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:955040893448c0f898f4af25374a92c169973026f25f48f5f83a2ad6b3a17754
  • php-soap-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:c5714cfde6d71f6f18fb73d227bd6577294428ee18898bc676eb1c8a69b1ac30
  • php-tidy-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:1797464e8fe4585e61c9b27b240e3ab2576aae12389ed3a427bb2baa5f65312f
  • php-tidy-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:a828512cd942a7015cd506e7933709c23e5344a77ed94b9a8d944abe13adeaee
  • php-xml-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:d0d87cc1c5cd659bd1f1540f1f3a5883f8f90837934bfaa28da068550c56854b
  • php-xml-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:8eb97ffa9c5a3c5918443aeba0566c87fe5b97433c934e44e2d28e3c75fa3c4a
  • php-xmlrpc-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:324280d1836bafab74319faf0c5f533d502ff9d972fd52f482c686791aca97db
  • php-xmlrpc-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:afae4c013a541e554bba7509d866884178b52ccd12850f6fa80a91842ecad5b1
  • php-zts-5.3.3-50.el6_10.tuxcare.ol.els26.i686.rpm
    sha:75364019ba71c211e9360c27d00e022d3eb7ffa76dd29e0ee988352c729ce76a
  • php-zts-5.3.3-50.el6_10.tuxcare.ol.els26.x86_64.rpm
    sha:3b2752511566fd3e4801b24ee96116276fd31207993d10a766f913a847622ed0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.