[CLSA-2026:1779212665] php: Fix of 14 CVEs
Type:
security
Severity:
Important
Release date:
2026-05-19 17:44:29 UTC
Description:
- CVE-2018-5711: fix infinite loop in gdImageCreateFromGifCtx - CVE-2018-5712: remove file name from phar stub error output (XSS) - CVE-2018-10545: do not set PR_SET_DUMPABLE in php-fpm workers by default - CVE-2018-10546: fail iconv_mime_decode on invalid multibyte sequences - CVE-2018-10547: escape file name in phar fallback paths (XSS) - CVE-2018-10548: validate LDAP value list pointer to avoid crash - CVE-2018-14851: use MAKERNOTE length as data size in exif IFD walk - CVE-2018-17082: reset Apache brigade after flush failure to avoid XSS - CVE-2019-11041: reject thumbnails smaller than 4 bytes in exif scan - CVE-2019-11045: reject NUL bytes in DirectoryIterator path argument - CVE-2019-11046: use ASCII range check instead of locale isdigit in bcmath - CVE-2019-11047: bound MakerNote id_string compare by value_len - CVE-2019-11048: widen length types in rfc1867 multipart upload handler - CVE-2019-11050: subtract loop offset from data_len in exif IFD walk
Updated packages:
  • php-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:9ab081f8fc308942713b1749e803e89ed6b533c6b49497fc91a04f062c0d6acf
  • php-bcmath-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:7e2581a548311ac7b99012ee4ce275f315a02d8810b30d364d292294898e94a6
  • php-cli-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:ae1d77f96f4dc0a589a2a74c01dbf54bbb5d0000906884a35065e955ec933f9d
  • php-common-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:7ed7fa71d6ab4f77bb49795a8974b57c90a6289a81436ea0a51c399a0afaae93
  • php-dba-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:b4f70486f0317c3bf190737898f7c99084383904ae33275e76648d87854028e1
  • php-devel-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:b3bd40c5315c1999b9a5c2991429b263421186a4ffdd5f9a5cba9424ae635ed0
  • php-embedded-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:bed5caf41387fda276c966ea1ae8f4a7b841c7e94063a7e3ab156c6d5a5041c5
  • php-enchant-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:c516c52c4b814b08aa9593ce76c512ef1371998a46b8ab898231b105f5b61071
  • php-fpm-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:b0c0ffe8c0c79d5ef6ac98e0bcf63c78c9ce4fb2ffc5d9d6ab0835c500c19028
  • php-gd-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:b9864a9827d7248f4af01ae4bca69406d85eb092ef7901ddfef57567525d64be
  • php-imap-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:c774385ff10c579ba9bee600f96009860944efa44b6c630f9dcd81a68b617af6
  • php-intl-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:27e9661f402c78f33307391f1f805513d838c97f311fcb81299b47fad1594cda
  • php-ldap-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:e4683456a7dbde712099cf593a7c86b2e89350d7696639a16f67518c46d631d5
  • php-mbstring-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:57f622393f86027329c8fc3155636d4627b2d18f9f74ddff2abd65cab24c7e70
  • php-mysql-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:cfaeb1b14c8ca0d6ebbac37851eb165ed7688b71b7039e4b2abd8b42cecbf097
  • php-odbc-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:5285c65fbfb9d33c4e8adf49d4dd40b47d9d7ab05a627e413a0c263a0e44f692
  • php-pdo-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:fc4077f261950d88c3bf5e22d607271b4f2195d4b47aeed9008beddd030960a3
  • php-pgsql-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:7a6411de47012c1cf2cab77085ae6adabd1ce506c018c46348d9b4b66208d96f
  • php-process-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:3fb46b10b5d4b65c27e02ec03b9af1de0576df328a0e1db67791c03200bb271e
  • php-pspell-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:953f5e36527f8376e7fd561c9b722dec4dcd683f637dca0e105acb7939821b25
  • php-recode-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:47a5f4214afbaace69717eb94550d1924cacec229e328ef0793c6fbb89a2de0a
  • php-snmp-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:7fc40143f92c99a2d1b1d580f5fe14531f13a9c590981d36e110574048ee2622
  • php-soap-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:8f7a9019901cb4dbe3768a1f5b78298d5f17dc6138200dc2deec4a1ca91127b8
  • php-tidy-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:a7dbe77f66e03d2118d89cf5985619e8ccf614566ea00271b92e0858eabf085f
  • php-xml-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:7cf47eedba59683de8e3d02f19ff88f3943296799cec7d451570c215ef202441
  • php-xmlrpc-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:e93d590e61d5d968045adeb12052e18dd826be23a5378dd1935376e2b8f650eb
  • php-zts-5.3.3-50.el6_10.tuxcare.ol.els21.x86_64.rpm
    sha:f49f47107e625f18e1acc94b34cebdd069c8e2d3a31cf13ef17c33854d9e96c2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.