[CLSA-2025:1757944902] php: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2025-09-15 14:01:46 UTC
Description:
- CVE-2017-9224: fix out-of-bounds read of a stack in match_at function - CVE-2017-9226: fix out-of-bounds write or read of a heap in next_state_val function - CVE-2017-9227: fix out-of-bounds read of a stack in mbc_enc_len function
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:6067553cc1e57bf6be3553062956c460aea0f32ff6672c054627446ba8e80848
  • php-bcmath-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:98be1aa7a4e77b5839814ef07538361054f1106dd7ad169d2737a61c6eb62459
  • php-cli-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:51a9a553c717eeb3bd0c40e3cebb8662b30dc82779febac759831a75229a22c1
  • php-common-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:1ebf04fe4dc1ce5bf96d52d5489ad94a39bdf9cd0ac5488504cc96c19c380191
  • php-dba-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ffcb018c690612aa67c33a4661d4ea4f5941daed93f02f76fdf886e26ffcca5b
  • php-devel-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:b97bd32b1354938e8e68967a17e7930d57defdf50426ae74c7a0e9a2e5414734
  • php-embedded-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:869e2a20b4390d24aaf1b09e53bde16cc6c5f9cddec95a4a18197901426b06e4
  • php-enchant-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:34c3e7f644677923fc679e39e447c6979e7c8d2a14642168810b0134523d2c0e
  • php-fpm-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:253cac18628f1297b82b854459db018b1c15c86271f4dc8c1ea742383f6d7418
  • php-gd-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:452a758113508bdf8d58aeb4b250b35c57132372c64fcb51f3bb540a12d47926
  • php-intl-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:8638733abeb1882a9cf3636ec4e7a51713d74cad5555e9085d169fc92816a1da
  • php-ldap-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:f2640cea11491d986a65004ab63f2a0fac409636ee4c99dba5a28c0b0be1fd51
  • php-mbstring-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:4b6fca22eb5ffa42219876a2bc352b3b625795b62c5ce13137752c89dffa8fed
  • php-mysql-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:e91dfd9c44e33ed67a4725a4786e4e94d490db98dc861805c6ebcb4fae716f2e
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:98c35bb09787bba8f01b3514f33c1d3ecd21656ff70de7e1f034cf35ebcb2260
  • php-odbc-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:85cc139db12c4fdb303378c79da7c8d6ed9fe51d2d43fabb8b320f2c7be2563b
  • php-pdo-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:bcc189de202ad281def8225181a542d11e3c2b64cd1b35712f388efccef36a5a
  • php-pgsql-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ecb4e71054c6f54ce63f79aad4d5a3ff9a017e1a2ce5b6d38958335d1a4dd6a1
  • php-process-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:21d90533fb29590fe6b4aad9196c96fd1be0aaf875444c3b7945cd68e46a792b
  • php-pspell-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ea5c49d38fc647bc636115b95a6ab93defdfecd6a45f21aa0b2fa338296757cb
  • php-recode-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:a78ec6dccbdbaf9dc42118450d5ebd2e77fe8184c2ee10295704ac6530bbe807
  • php-snmp-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:7e7510ff807e5457f016b0a4c011777e059be9293476f616795dc2afa8868f3a
  • php-soap-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:7e163c6d276df6744298ef0d1f76f9a40b5eab5848e297b4ef3c3c13d4c46d25
  • php-xml-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:8295436f11bd6167c1e52fde97768b5284eedabecf4fec78e6335205bbc65575
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els14.x86_64.rpm
    sha:ef8711c07d789deea5cea460e220f0b8c057bb5f52dfb4231aad8aeb5fc63302
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.