[CLSA-2026:1777479584] php: Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2026-04-29 16:19:48 UTC
Description:
- CVE-2018-10546: fail on invalid multibyte sequences in iconv stream filter - CVE-2018-10548: fix NULL pointer dereference in ldap_get_dn return handling - CVE-2018-14883: fix integer overflow in exif_thumbnail_extract bounds check - CVE-2018-20783: add bounds checks to phar manifest header reads - CVE-2019-6977: fix out of bounds write in gdImageColorMatch palette buffer - CVE-2019-9637: harden cross-device rename umask, chown and chmod ordering - CVE-2019-9638: fix uninitialized read in exif_process_IFD_in_MAKERNOTE
Updated packages:
  • php-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:568ac3f3a85b0ccc3ce91bdc3fc3df8eed087d48cd73fcfd1a9efdd793827bcd
  • php-bcmath-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:c49a864344e86907feba5e86f0bcabc32ef8588974a35b5de8bf5c58c66b2798
  • php-cli-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:128cec5090aa3be6121618fe5de1efcf0d1d95cccd62ecab696e3537519cb948
  • php-common-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:c059eda0fe0b6412a3619a4a80897ffe57770ac6b06900886fd5ede621dc033a
  • php-dba-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:161dfe110f57a197e4b62b9bc5293bb42e0b0fe7b83fcd0d04c6ad7777aeae43
  • php-devel-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:bd91080d759f52046dc6b52c9244f666465eefe204f621f350a0169920c940cf
  • php-embedded-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:a2dfef90662682b2998b45a7198d42d8da8187d3e3f307baf12bb5ddf030cd1d
  • php-enchant-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:a6cef389b21e7e21e0cdbf7b3a3fcf5bdb8b0721bcb1da17398917e77118eaf6
  • php-fpm-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:ea1b1ac40f53f2efeb91893ae4fb372466f756ab7651a3691bc8a6754c15c2a8
  • php-gd-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:15e56920d9ba294f15b43543772d83b9df4f15424d55e03961eac31905f8a4b3
  • php-intl-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:dc04b3ba40fdf2c2c433a116447eb5a61dbdbbc7564802341991589b2342c8dc
  • php-ldap-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:848c067307a53557f07e0a81bc5ae12e769bed768074ab49c91ef347fede202e
  • php-mbstring-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:9fbbfd98708a241c2fad2db7aad146f2bdb7ebaa1db5fb688b8d355dfd66b463
  • php-mysqlnd-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:13a49356e8bc6db549342d6d2af06f63d04b2b500764c0216de7c1709da4665a
  • php-odbc-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:d4956f1ba4d75ffbfc7693fdcea05115944785c3398d72048d41b6978923ac43
  • php-pdo-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:9d8382b7084b5f7dd50e60808cb2259238ee84d4b7bda570bb43d2b86b7fc5e3
  • php-pgsql-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:91e5ca80d29aa31b29384363747ad21e4f8ebf08c41468fb417c6e47dcc4b648
  • php-process-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:ec41f835cf965061b9f7ba7d66b6dc2c31495803c117f5ff7ad0ebd3cdff6263
  • php-pspell-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:4d5e9eec503d2f090708fc7ecb2c44319ebacd55dcc1711d33bc70e1c0e67c4e
  • php-recode-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:17c7c26fcb187c5e1fcdb407398df4d18e143f897403d061f4e484e6555aae5d
  • php-snmp-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:8aaed86890ac1244714adcf6b980ff161165bdcc02b0174df5bf88f659d66785
  • php-soap-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:52ca371d5cdeebed9e2925b173535e3273ffca23c49c5c931f5757ebaf6aaaa5
  • php-xml-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:1615e0819caa8cb844ee1b47232301604d3f5418ce8fbb5527723d3a7dbf0c67
  • php-xmlrpc-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm
    sha:e283d24e9b4dc66f7ba8d17e11071748be3d65723c3827816fa6d94501f72f21
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.