[CLSA-2026:1791737248] Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-11 16:47:44 UTC
Description:
* SECURITY UPDATE: packet over-reads in the mysqlnd wire protocol parser - debian/patches/CVE-2025-1218.patch: bound every packet reader and the text and binary row decoders in ext/mysqlnd/mysqlnd_wireprotocol.c and ext/mysqlnd/mysqlnd_ps_codec.c, including the CVE-2024-8929 checks they build on. Not carried: upstream's caching_sha2 and MariaDB hunks (code absent in 7.0) and its regression tests (PHP 8 test harness). - CVE-2025-1218
CVEs fixed:
Updated packages:
  • libapache2-mod-php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:dd9c55d4af8e9dcff2e6c01f9b6bb486ade352d9
  • libphp7.0-embed_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:880f356028b405148e706cdd658ca66cf860bcfd
  • php7.0_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_all.deb
    sha:5d58f4912400b4f47fad2fc901783a8d361a5984
  • php7.0-bcmath_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:37b72d020de0ff02e8b0022566b21f2dce804128
  • php7.0-bz2_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:e0c5f2eb5a1bed8f83ce501c864d0603bbee1397
  • php7.0-cgi_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:9aee587aed46baf0d6798e4a2f64fc680ee5ebd6
  • php7.0-cli_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:ef9f4c8a077ceb987c8054997e4111ab26113090
  • php7.0-common_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:b7e32d659eb493592aeeb19e254212b363d6899b
  • php7.0-curl_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:59f3978df42d52a3fbda0b515cf7cc7b12e1b88b
  • php7.0-dba_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:db218be919b7a4307ebeccbd9ab7310041530a7c
  • php7.0-dev_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:d81ae7066c67d7fb6939bc522141d496cf0ca0c2
  • php7.0-enchant_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:f99b9b54d6194421693b12a6404d71b6a9fbeec5
  • php7.0-fpm_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:3a247231f188f4a886894a53fbf2c3bf9a988a77
  • php7.0-gd_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:70a2c1ede54ba244756f9a35e60864f1794b9f09
  • php7.0-gmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:6686a85023b66104cb54998b4dd157c345ca04a7
  • php7.0-imap_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:adb405ce5a31c6ef6e0e8d16ad01dad80bace340
  • php7.0-interbase_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:eb5e4764bdb78a215864852d01fef2de5020060c
  • php7.0-intl_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:c7335577938b1d94f2d25365713a3d5e3ef7af41
  • php7.0-json_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:ceb39382560f11b1fcd160626d673711ee9daf35
  • php7.0-ldap_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:385d68d1460e9d24327641dee32ab9454b0aabcd
  • php7.0-mbstring_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:3eea36148b182ba6e780530a1d4486fbd9723d87
  • php7.0-mcrypt_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:1c63d2b5a132f58e8430413c902c963de306448b
  • php7.0-mysql_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:7759f0ad1581b5d8d3ba0ab95b6e94ee92e79f66
  • php7.0-odbc_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:8a6713257ed29d70050694010aa3ac2fe3c5c019
  • php7.0-opcache_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:c8cecb64db36b92adef1c8ddc614e9d89bcb76a0
  • php7.0-pgsql_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:d7f2b77ab89b1d46f56cb5cbd5f9bc5c7b02966d
  • php7.0-phpdbg_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:1373f2283524ec7108b8e4afcb8d5f95660b6de9
  • php7.0-pspell_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:d9039ce2864a3c28829eb07a50021641778d6100
  • php7.0-readline_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:5b4fbad24499d870f9dbced7a5f6c2103b761556
  • php7.0-recode_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:6e5a2a501c7ca0143ff8d0c61ac5a2c5c97f9514
  • php7.0-snmp_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:9d92d9931a1becdd8f5da42d65b65e69136275b9
  • php7.0-soap_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:84bb99cdcf060d49949918841d2980d18231713b
  • php7.0-sqlite3_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:535472e79e3dd5b01b0628c7384e6e4199a5c0b6
  • php7.0-sybase_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:f8ea62bee809988372979261becfd234a28868cc
  • php7.0-tidy_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:b6213d40f441e86105a52c051fbe625f9bf753fc
  • php7.0-xml_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:728a54c6a13540a16411e789a9bc6bc0d8d1170d
  • php7.0-xmlrpc_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:07438eebfbd813010ec8c6f48ba2a95996099df1
  • php7.0-xsl_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_all.deb
    sha:be0497f7e3c231f6657518c5f75af0132d5d2fba
  • php7.0-zip_7.0.33-0ubuntu0.16.04.17+tuxcare.els28_amd64.deb
    sha:d6258796d810df4817551921d251cff9dfc5c01c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.