[CLSA-2025:1757016160] Fix CVE(s): CVE-2025-1217, CVE-2025-1734, CVE-2025-1736, CVE-2025-1861
Type:
security
Severity:
Critical
Release date:
2025-09-04 20:02:44 UTC
Description:
* SECURITY UPDATE: misinterpretation of HTTP response headers - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support for HTTP wrapper response headers in ext/standard/http_fopen_wrapper.c - CVE-2025-1217 * SECURITY UPDATE: insufficient HTTP header validation - debian/patches/CVE-2025-1734.patch: adds logic to fail invalid HTTP headers in ext/standard/http_fopen_wrapper.c - CVE-2025-1734 * SECURITY UPDATE: http redirect location truncation - debian/patches/CVE-2025-1861.patch: converts the allocation of location to be on heap instead of stack and errors if the location length is greater than 8086 bytes in ext/standard/http_fopen_wrapper.c - CVE-2025-1861 * SECURITY UPDATE: insufficient HTTP header validation - debian/patches/CVE-2025-1736.patch: updates the http user header check for crlf in ext/standard/http_fopen_wrapper.c - CVE-2025-1736
Updated packages:
  • libapache2-mod-php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:6810920649bece2375ff1eb70a4b68ab356d3dd1
  • libphp7.0-embed_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:9ea24733052d530a1f014395fd57ecf4fc581e14
  • php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_all.deb
    sha:22fc44f0138ab044e0d542704eca54867e7d0b0a
  • php7.0-bcmath_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:1f15e1cd36b4cf3b35d5fbb71b4f418a4f0d4373
  • php7.0-bz2_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:7d4c44263ceb3993971c567ce0e79a39974bce73
  • php7.0-cgi_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:fda11f921411ea46bd158792f37f1dfef4b2edc2
  • php7.0-cli_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:83ca23562634b950ede63d2bc4e0d9bf27499df1
  • php7.0-common_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:a4c2e5889abf857f3e3fb0dafb0ac748b43710f0
  • php7.0-curl_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:168a1fc9b95e659caae8856174c2c371f65a6165
  • php7.0-dba_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:a8b1a5b14c115e9d4cfba30de1492eb9dff8c5be
  • php7.0-dev_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:f22b18df6661d727ebdeddf8fc59d6b584b616e4
  • php7.0-enchant_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:31d3ef71471f80e42b0f01c67c31e1916a8c4109
  • php7.0-fpm_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:12b1dac6efdb37a02c9397ea00bbe317381849a4
  • php7.0-gd_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:39c2bd85cdfd3a0454a5d356059561af4cb80616
  • php7.0-gmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:783b2e74de5e2d9c31569a92423cc615c1d5fd01
  • php7.0-imap_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:809a6009562babbaeadfe2b2374bd77e13adf81d
  • php7.0-interbase_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:1995f3729e03ae0da403e35d45307b3b1606c42e
  • php7.0-intl_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:2e55c023e74d8b056d6e386ddd5908649f2cb6ad
  • php7.0-json_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:a8ff1cad561ef30dd24dbdf547437f21cbfc03ce
  • php7.0-ldap_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:ff6e9fb4106b54f6aedf21d59938d153916324d9
  • php7.0-mbstring_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:00a036f61764378d2335667956b5268111c36f36
  • php7.0-mcrypt_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:2bb5bdf9655f090e3ad9feb0d233c6926a2ca4f9
  • php7.0-mysql_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:4344165717688c09d615de7cb665a811f70614e9
  • php7.0-odbc_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:4bf52be2e8cc05a6b09389d7980ed19432af799a
  • php7.0-opcache_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:76f5ee78bb173db69dfb08fce3708761ceed412f
  • php7.0-pgsql_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:0de19f090891cea2169ebc3711d9c23f7223ed06
  • php7.0-phpdbg_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:46130e65b0b01a854612c1aa843f6bb61ff62e52
  • php7.0-pspell_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:b0f4d086193a6e539ac952348d05a7ab1da2371c
  • php7.0-readline_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:7aadd30187091b40eef821500f8ee72bbc969b0d
  • php7.0-recode_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:80219c2db6b2659847763c16ec33d2195b82a347
  • php7.0-snmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:80dbf4b506f41754680134201344b7a46da9ed17
  • php7.0-soap_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:5e2aca1c749487c0dbe13193b2be7d069afc2567
  • php7.0-sqlite3_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:92609af37ad8a6348931114f7bd0c9a2f6b6bde8
  • php7.0-sybase_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:531049605b1ff69620b5debad1ca6c40bce0f3f3
  • php7.0-tidy_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:54246e59bfe253c81d41f410930f9c35bd3647ea
  • php7.0-xml_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:337ed012be39f49f031bd12c6469e3077bd58b94
  • php7.0-xmlrpc_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:767c7b7e94652751033ffec871b14fa11419bb10
  • php7.0-xsl_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_all.deb
    sha:047beb1722204b7541a008572004b690dc3f5dad
  • php7.0-zip_7.0.33-0ubuntu0.16.04.17+tuxcare.els15_amd64.deb
    sha:d961420062c507a382e59ccee22c9aed699372bd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.