[CLSA-2025:1751282406] Fix CVE(s): CVE-2025-1217, CVE-2025-1219, CVE-2025-1734, CVE-2025-1861
Type:
security
Severity:
Moderate
Release date:
2025-06-30 11:20:11 UTC
Description:
* Security fixes - CVE-2025-1861: fix http redirect location truncation - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams
Updated packages:
  • alt-php72_7.2.34-53_amd64.deb
    sha:34037f5717e5c6bac0ae4508fa91abf11dbbf832
  • alt-php72-bcmath_7.2.34-53_amd64.deb
    sha:dc597cf21b82139317696d5690c0010d68ffc418
  • alt-php72-cli_7.2.34-53_amd64.deb
    sha:003e3665406aa06bff8538e4a34a74cdf75dc7df
  • alt-php72-common_7.2.34-53_amd64.deb
    sha:fe6118ef1435bfa547d572677dc13e77f483086a
  • alt-php72-dba_7.2.34-53_amd64.deb
    sha:aaa7bd8e27d8007a857ca1c834358b431788b29a
  • alt-php72-dev_7.2.34-53_amd64.deb
    sha:5950ed3df59b6948e0abf335c489150fc263f941
  • alt-php72-enchant_7.2.34-53_amd64.deb
    sha:81ee5734a1483fed04af8b9cd215a72ae0dcc090
  • alt-php72-firebird_7.2.34-53_amd64.deb
    sha:614b64b100562f45627208891f389f9cd9b9dfce
  • alt-php72-fpm_7.2.34-53_amd64.deb
    sha:26ee7488f43a0a46b67042e27e51e2beef0f6e90
  • alt-php72-gd_7.2.34-53_amd64.deb
    sha:59a7f02953d5aa718ddf16c6c3c90c900dfda7c5
  • alt-php72-imap_7.2.34-53_amd64.deb
    sha:9ae9a1cdfd7d3fbbb4245ce573e136f56de3742e
  • alt-php72-intl_7.2.34-53_amd64.deb
    sha:257eaabd78f55c0b9c63460318a05c821c0784a6
  • alt-php72-ldap_7.2.34-53_amd64.deb
    sha:f107e47d9fb86d0dba80d6233e5bac907ef7560b
  • alt-php72-mbstring_7.2.34-53_amd64.deb
    sha:5c68cb133ba94316aaa4c9e6bf934deea9e1951a
  • alt-php72-mysqlnd_7.2.34-53_amd64.deb
    sha:162b3914d93902fea0855337e416afa2f6c5fdea
  • alt-php72-odbc_7.2.34-53_amd64.deb
    sha:2e900fb1013beb15bcca9b7e7e7f6492c68b8bc8
  • alt-php72-opcache_7.2.34-53_amd64.deb
    sha:63d556ccbd482e03cf8d25fe7aa626de5b80e46b
  • alt-php72-pdo_7.2.34-53_amd64.deb
    sha:9b43f2fc659501f3cf0c87a2961499f8b9aa32e0
  • alt-php72-pgsql_7.2.34-53_amd64.deb
    sha:32974e31c64037b02246443cbeaf59c678524faa
  • alt-php72-process_7.2.34-53_amd64.deb
    sha:56717c5caeca86e3de1d8d7d79f270885f4babba
  • alt-php72-pspell_7.2.34-53_amd64.deb
    sha:3dcd1bd589ee0b57f32604ca25ed5ac80b2b1aee
  • alt-php72-recode_7.2.34-53_amd64.deb
    sha:f91c52426e8b1420cfd0f972acb35bcb9be5bd72
  • alt-php72-snmp_7.2.34-53_amd64.deb
    sha:fbec89ac986ab65547be758b899ed54bd5de3943
  • alt-php72-soap_7.2.34-53_amd64.deb
    sha:5abe6f714b037a3ccc1ccb9fb848cccd9b7d9dc2
  • alt-php72-sodium_7.2.34-53_amd64.deb
    sha:5f697d11afcc7cc479b1f0896bae77eb613c8d1b
  • alt-php72-tidy_7.2.34-53_amd64.deb
    sha:015e466e341d4ba82bd281ceef2fbeb8bb5692ec
  • alt-php72-xml_7.2.34-53_amd64.deb
    sha:7d670f6ffcda1f8bc81c7d7aa7ca42dd47b7a9c3
  • alt-php72-xmlrpc_7.2.34-53_amd64.deb
    sha:96bd566e168a733e82284a07fdca8197d7772fec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.