[CLSA-2026:1791281631] php: Fix of 9 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 10:14:10 UTC
Description:
- CVE-2026-92842: fix heap out-of-bounds read in convert.* stream filters with a NUL byte in line-break-chars (GHSA-88hq-2827-7pg6) - CVE-2026-91768: compare all 128 bits of IPv6 addresses against FastCGI listen.allowed_clients (GHSA-62xp-839h-2637) - CVE-2026-91769: do not fall back to the certificate CN when it presents a subjectAltName service identity (GHSA-vvx9-73fr-5jjx) - CVE-2026-91767: fix out-of-bounds read in php_openssl_matches_wildcard_name() (GHSA-xr7j-rvgx-xq5p) - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin redirects in the http wrapper (GHSA-fpwc-w8rq-cr92) - CVE-2026-91765: bound recursion depth in ext/soap XML parsing and decoding (GHSA-rgrp-mwpx-f6rm) - CVE-2025-14181: fix heap buffer overflow from signed overflow in the SOAP HTTP chunked response size check (GHSA-cj93-vc83-wgqv) - CVE-2026-6103: fix phar tar entry injection via overflowing TAR size field (GHSA-j3wh-g957-2m85) - CVE-2026-93682: fix out-of-bounds read on an empty Location header in the http wrapper redirect (GH-23467)
Updated packages:
  • php-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:c34e7b2ef708e6d149a6cbb8087cff00be195edba54911232123f76e8981b6fb
  • php-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:dcd1c2ceb6b6e47112ac0fc16e905d59bda0fcc81aeadc7c596677f1d400aeed
  • php-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:c68de794bdae988b3f96e3c3f100ab5aeec95732e80c92fbc15dbe04ed6622c7
  • php-bcmath-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:0b0f42af95154abded4981929ab42c22b2a70aac5f8a476c5f302d18893eba95
  • php-bcmath-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:ef977bc0e6744e968945ac75f6a39686447e0f57e6acaa1b676556baa69e40d9
  • php-bcmath-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:2eff6188a53f2dc436645063b8c07dd8056a6a51df6f9616c4e75e69285c45c2
  • php-cli-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:9c5bdf9388d2798e4ab3fdd24b14bae694e25905704da43731b4d6abd3993ccb
  • php-cli-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:50d85e1a590b7f25b3cac8e8011eb1f0e74c6b6000c21905c08cdf3d72c51840
  • php-cli-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:a7324151b73d4f6e9967c07cb49b1dedbe60ce0ccbb151e5f264346f369591ac
  • php-common-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:321d46794a5c98a43d1ce7aaba85979cb13007bfd7fccaca736ea208eec8046b
  • php-common-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:14c1aff7a819c1fd534813b66ffee6e6199c4de8180745cd2095ed9dd7dd16a7
  • php-common-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:4258e5bac28964ee9e60b0eab125d87172e4b609f637989a38fb4be3a4e9d173
  • php-dba-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:77ab21f678962270660dddc84215391ca0863581e3918c591a2e5ea7ae82f8d7
  • php-dba-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:01db59356cb227d5dbb047dbce2266e669d29692e9ef54749ebf76a4f50c999b
  • php-dba-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:97bd2061e50c45befb99541483e983c85606cda6d7acccf6e5c155a52234073c
  • php-dbg-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:0e611b6e3e00b6739f9611991f696b7d4acbeaaac24a8cb4fd8d1a86d61b1ab8
  • php-dbg-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:6891ef5052fc9a0636349cc2c607c5dc5029a53d88e5add61a58745ebf662b2c
  • php-dbg-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:254ebae6d9c311d9a610b7717e68a7b58ddcaf74853543b203a7f837eccd88ee
  • php-devel-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:9bbf1c53eeb7b8ec2cb07ebcd0d0e9947475ad492cc20e94c735e702203b8e65
  • php-devel-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:707d27ef22c55f756239e6ccb32837cbabd64353c0a0be0c8578eac87eac1c4d
  • php-devel-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:dc1e28e89393d8dc8b08ac544c9e7601df309c9e319bd81ab8b71e59c935e302
  • php-embedded-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:bcf6d1c51add127375965b0bfbdfc1c1e300d03eb6ee96aad5f191503e40d540
  • php-embedded-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:35830b86e09c216646826b5472f6bcafc29d3ff66d6089cf5e5df1946058dd5c
  • php-embedded-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:78b20e72a39531f720a89de67979107865a55cb99d3784d2ebdcf59d98894315
  • php-enchant-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:3b93bae97288aab029ace90703e293a12e73daf0040ed3d7ce2c1c6c8743fe1b
  • php-enchant-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:fa1a396126be7c81d75362df34ca2cea44ee3e6a30eb24c1026c41f15c57594e
  • php-enchant-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:6f3ccae6e284d3b028f7f4cb08505cc1301493ebff8222ee7bec80143208cceb
  • php-ffi-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:a17c7ebc0766b1cc625b6a8ea940e4cc2427a2679b3e5c6391b3dbfd3d29c7c5
  • php-ffi-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:58843ebeb14f3878fa0cda5f92d660662d06da1a80a0f6877db2025342bfe001
  • php-ffi-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:e6b67dbd34e968064fce5c246db80d2fd652c5ea35e73eaf1903912addaf9d69
  • php-fpm-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:399e90d1b4f5f4701701fa18418ee0015dc41ddc97e8db807e2793a7ff486bc0
  • php-fpm-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:797584a97762411a1ec9930eaa42614c8347748afd5ec896b56bf28846596111
  • php-fpm-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:3838e62f866d940182c46e263fe2360c92168194e0e08e9ec8e35fce30d81467
  • php-gd-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:84727c2363776f2f202c3b1403bc9d5ace8777a4e3f749399c3dc6083ef82bf0
  • php-gd-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:01c01633697f36be9af2f6c1b9330811afb7190991569c3bc015b68ac2eddb2b
  • php-gd-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:f753f74ea8e11f91a278f1408d5ae9f6818024e7c6bb66962c097ecbdf931ccf
  • php-gmp-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:88ab141395b6e58e3c2af1ccf01ac04ef9559987dde9894bfdfc95974eb48fd4
  • php-gmp-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:6f21609250d55ec6b5e9df6666052b1c258c602663adea5d8c3651ebf5634f77
  • php-gmp-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:835061e149060fce0d977073df29635ee6ac1db23cf8cf691cb7d922fef8feda
  • php-intl-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:37d08dc774103096c41f132d91b759b0ccc523f83fc285075b56a18bf549f790
  • php-intl-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:9034a7d421231f80cefd1f27cd2a6c74059d24e9740176046928d0778f442fdc
  • php-intl-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:7d394751b394d47e185518be3c6b71682f41f071b85404cf7f38eb3ad0161649
  • php-ldap-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:e4cc5f46960b42a75f3ae37a4e2c0acb3b6b5ea02a104a643346e6e5db94f8f7
  • php-ldap-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:0ef7ad676ac6bedcd1407c0525d94bc7376995e13d9d4ee369747b65591714f8
  • php-ldap-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:097b517af65f8611e1493eb59d2e361adc5a97f9fd110f8c5fd865675d3e3377
  • php-mbstring-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:e48a2f46eb0fb3c4ed865b785b1fc465ecfa8232e500dc4c3b6328e16a8babe9
  • php-mbstring-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:2b1656300ed5b37de93d2fafd50996773856ceae8819dbc0c03bcdadd7411c4f
  • php-mbstring-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:a731b8ff5f8058a7c0c5f20b9b36c35c44476becdcdeca9b3c9e7aa9226f4da9
  • php-mysqlnd-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:1ec5427960537fad1e17072b172214427568c1e861b07b0f8100ea3b4a502af1
  • php-mysqlnd-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:123e165661d0c367a0e417b03eccff16b141ad2bf82429988d0f6b399a4ab0a7
  • php-mysqlnd-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:1e9756958bb172c38f1ee40c6162774d82c1bffdba5657f61938d7a3691e3009
  • php-odbc-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:9eae2e0fc41f8195080d38c08cf01b365ceae7e173caebca24065b48648c4fb6
  • php-odbc-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:609b5b583470dad4ec805c251c6fd5a54cb8c4c2527bafecac28c52665f4b158
  • php-odbc-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:819bd55f99b006792ea49bdc3fc6b9fe91e8699bd72c3db574963f997a6cacb5
  • php-opcache-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:8c35d5fefe7de4fc40681c791a8a5585376e62a36df7f702bf84a23a0f7cb199
  • php-opcache-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:f1f5930c635cb249b473e4925c3e2b4c8c39851ede65d392e930a14a3696a308
  • php-opcache-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:83115bf6a314511f17b4eca5e1acf1d8f6ed8398c6594aa6a7acecfd4deeca40
  • php-pdo-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:53c52c68390a5288e3f1c1fed622464dbe84ab6ac629d6dfc1e66b41543f64fb
  • php-pdo-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:b9ad77a34a31ff3d02f36646910a1fe9ba18d32532c20cfa212ead388a73a7d6
  • php-pdo-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:3e74915c690389e5161d451d90ae629d22711f0fd8fd1d8d207fd04c7ef3ccbe
  • php-pgsql-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:74268a3cebb8e4e68d5f7c86a89a3dec4fed2b944047ee60f173936a7e502f41
  • php-pgsql-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:1faa670873050350462ffee6e4f68ba2398be37993bbee081f978ae11a770ae1
  • php-pgsql-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:d50b82ffbe1ca18d11a72628804debb98c083c29163c09891fa26af5b2724073
  • php-process-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:e879480b0c123a4cffa4ecb60e16ed629d9aff9f73262e52cb597c78a13f4401
  • php-process-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:a8796f3c7387e93273d48bc264088bb12e0d81ca0a209620d63047998dc9f33f
  • php-process-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:6b71171659d0e523f3071341180fecadf1c9f853223761d55acc63a62b252ad9
  • php-snmp-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:d32e45b6723fd92ab56031510a011932d64a39931372c7abe45f56057ab6b379
  • php-snmp-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:e0b27162addba106aa55d65689759a63c03eb52e5ac20936f36b154e77982512
  • php-snmp-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:d6de118fa086cbf0fdbc179edc4e57af37e03d7af94872f8b8a8606d82155341
  • php-soap-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:5640b9d4fbe4d089efaba8a020074848da1d94a07a3153bec25ff5949b7e4617
  • php-soap-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:f3ad8001e40c79ce66ad87449f5404e45015a48ecdc4bd0e519349e6778324b9
  • php-soap-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:ffa146139e3fcd15ec4ffca45f91057989b5c7fb4dc76b1ad06a2506f582b058
  • php-xml-8.0.30-3.el9_6.tuxcare.els8.aarch64.rpm
    sha:ee145b4a4348535e2b31e536e52afe11de1b9f01690ca933eb7ac22d5bc1611d
  • php-xml-8.0.30-3.el9_6.tuxcare.els8.i686.rpm
    sha:ad4cc896398a2093dfe6f7694adeca0583c751ae6e483e6e5c4a6218b3b754e3
  • php-xml-8.0.30-3.el9_6.tuxcare.els8.x86_64.rpm
    sha:82ec662652b375d1d2f727585499c4739f822e82c5a48cd7dcf8a203fec7574b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.