[CLSA-2026:1786447704] php: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-06 15:09:25 UTC
Description:
- CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals - CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state
CVEs fixed:
Updated packages:
  • php-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:d9eff6a8594355eb34f78bd426f96930c9b3a10bf031397e44ac7d82939b78e1
  • php-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:9c1224fb6a73a465b8bb099c743be01defb363512ec211d685046ef3e8b05d7c
  • php-bcmath-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:d731038474cc5cedd7a4d324a4c82f56078910234db8f151bdc055c155d081b6
  • php-bcmath-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:59db9021039fe714f595e41d43edfb879eb12ccfb49500577fa242f9a376b390
  • php-cli-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:921d8e6b44bf88b5860e4b234b668a4a5e1845c75b98addc7b59ab2c4e50a769
  • php-cli-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:14e6f27df7740915b51cefc25d237c2ee9715a2ada5d00f8ac26e31d2c47c094
  • php-common-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:a0e8a7d244723f4727f4f7d7a6f3799b5c224845b71b76dc30337621709c8638
  • php-common-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:95b8d5b5e18703b3916b236a04c517407af8e0631b2e936f9b9209b00d583a4d
  • php-dba-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:2d5cb8d80dd89f4c145fcb2eb393d0cc2ed9340c1eff02bb34ba28536130a7eb
  • php-dba-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:d8bf5a0449063f2a0b9acd75f4260e85b5abd044615f6290023a44eb20ed0d21
  • php-devel-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:e3736c8b75dd7c6e80afcd612c6d3d21aad3bf63e78e386f1dfc0a4b0d294f15
  • php-devel-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:1ab0c500c571d50918106f5ec5d3f7cbd56ed9dd4f3db5fa2ec04675b4b083bd
  • php-embedded-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:f9a7b9390560e8d09bb92003644e9e7b66a8871a719a829654cf5492be437854
  • php-embedded-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:f28500114331901361bbf26969a7f889b300a43870807360ec464c589de4d8c1
  • php-enchant-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:a9b3bb3f15870652985a52b4f2431abbfb778408d129324c0be9f09759f38226
  • php-enchant-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:d35fb8efd682aeabdc2c4414fc2c38956595c63acd51d4b520ecf08450df20ce
  • php-fpm-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:dce7283442005e4538144e6bc5f49313ced96f5ddbd86193318e9b2fae23e535
  • php-fpm-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:83969d1bd68203425ac6f9ec8ada290f477b8da97c899ea4e24275536a7ae237
  • php-gd-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:a080aa331954ec1aa3022e052ccbebd29a7fe98a8397d6b3e636b00d43e1dfc8
  • php-gd-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:02d936dda6384ecf683fd9975e8494b70b254058c8eecc2752d0334a143dac19
  • php-intl-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:a47aab8833e8df4408391378eb607290f0719bf515ae609f824fbb494104d058
  • php-intl-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:ed44addc3b99713929bbd7b2beb718ea0b64a6eb19684070836273312ae57593
  • php-ldap-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:9f9119fee68d745d08fb958310d2b8e06745101fcfae5a0a18070541c34f833c
  • php-ldap-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:e0bc08082dca956681888234c3574ba3c5c81af5762cee02eaab8ea2652876e9
  • php-mbstring-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:a79fc270b2a227ff0e3b442b32e2c6e48f64419b1a44bbf89c46412a9827dc73
  • php-mbstring-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:f903648fbfef0e5323701ab0d6d07281e9e966628614c0da4a62bf59221d2cde
  • php-mysql-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:0f27f0e4dc66b26f1f579885478471af8d5f913928852b9a91a1a9245183ea7b
  • php-mysql-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:414472836586fbe517a7a5d93e92b32271b655af9f51aea871858ff999eae1b6
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:10bf2c0108f51a2cdd4c53dc05f7b9d4fffd365d8be9052cd02133ff6cb8ccfe
  • php-mysqlnd-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:729223e9d01352d942e23db5bcad71bd5eb0008150d1f45226731b6fa512dd3e
  • php-odbc-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:2edb038e5cbee65f16c2af063ba69604ab57bcf27a1e85948d5299f65c19ca35
  • php-odbc-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:323d78a6fcda601e703f89ab023640218bce5a0d445127b1dfd8871b91e93684
  • php-pdo-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:cf34cf9d66fe65a29822070c4e1476ef52e2b519e0c146373cb9d16cd140287f
  • php-pdo-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:5a8432593b7c8cef4ea76a387709012cffbfa5367813a86cd094880ed20cc04b
  • php-pgsql-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:36b2676182830f33bfa43116e2af5d1f6792d1163782fb3d301e779b7c0ee8eb
  • php-pgsql-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:9f486c6c6971a07579bd8bad8833867ee9265cdb647627cc54474ba6a2fec959
  • php-process-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:8bca6d6b0df224a10c3b3035682e37ca0f1f2cb1baf6ed8b265a2c92985f36f9
  • php-process-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:4afbc181eb30482f7a65dd57d96705565a7379e5b126ebf621664f01b5cdebb2
  • php-pspell-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:3033d4ecc9c66ad55436cc7d0ade2b1295713d02d6a1c26068788a1626893b07
  • php-pspell-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:2672cd68875ab2b2c8335f62665dc1befb335cc41ebb2dedc3f72cf30cf1d5c0
  • php-recode-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:ffaf8acb51ef58610a515318746d4f375b7979d09310239eb792adbd37fb7b4b
  • php-recode-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:5efa13337b453c293dc3e20db9d84a90651e362b47de68dad58835b5ecca2c71
  • php-snmp-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:2f9fe67b5bb03dcfaea6ed340111ab5466c0a1acb0afce1783abad56e05b9b80
  • php-snmp-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:80f06407952548d1bc5eac30f55da093f4fd71327c61088ec662e59c91db706c
  • php-soap-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:f93ee7fa9c0be8c379599d03b003d8fe670ebf2f7c74407e05f3dd2b5cf6c30e
  • php-soap-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:6f0b19b5d2bcc75438a2912de48175f91bdb2cb722b219a6470ee8663b3306e6
  • php-xml-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:680512bd26b90e37a1837b98a4bfb234f83eda2d674324218c0907a0a3a33c41
  • php-xml-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:67c5f54dbe515b8d4b02a289e321f3f8684a43257fb6d5d1475046cfe07b5f71
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els19.i686.rpm
    sha:2d962fe2c0673fa79946641defdf174f7efbb76bda0e9fb5dbc9911771333eb3
  • php-xmlrpc-5.4.16-48.el7.tuxcare.els19.x86_64.rpm
    sha:f3011c196fbe91f81a01d96531f3cab96eb3c423f1fdb5c7bc747e6abf9f8a11
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.