elsa-2026-87080

{
  "cves": [
    "CVE-2025-1218",
    "CVE-2025-14181",
    "CVE-2026-109618",
    "CVE-2026-109619",
    "CVE-2026-6103",
    "CVE-2026-91765",
    "CVE-2026-91766",
    "CVE-2026-91767",
    "CVE-2026-91768",
    "CVE-2026-91769",
    "CVE-2026-92842",
    "CVE-2026-93682"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "libzip\n[1.6.1-1]\n- update to 1.6.1\n- enable lzma support\n\n[1.5.2-1]\n- update to 1.5.2\n- add all explicit cmake options to ensure openssl is used\n  even in local build with other lilbraries available\n\n[1.5.1-1]\n- update to 1.5.1\n- drop dependency on zlib-devel and bzip2-devel no more\n  referenced in libzip.pc\n- drop rpath patch merged upstream\n\n[1.5.0-2]\n- add dependency on zlib-devel and bzip2-devel #1556068\n\n[1.5.0-1]\n- update to 1.5.0\n- use openssl for cryptography instead of bundled custom AES implementation\n\n[1.4.0-5]\n- missing BR on C compiler\n- use ldconfig_scriptlets\n\n[1.4.0-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.4.0-3]\n- add upstream patch and drop multilib hack\n\n[1.4.0-2]\n- re-add multilib hack #1529886\n\n[1.4.0-1]\n- update to 1.4.0\n- switch to cmake\n- add upstream patch for lib64\n\nphp\n[7.4.33-8]\n- Avoid state corruption via bailout\n  CVE-2026-109618, CVE-2026-109619\n\n[7.4.33-7]\n- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF\n- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison\n  CVE-2026-91768\n- Fixed Various packet overreads in mysqlnd wire protocol\n  CVE-2025-1218\n- Fix TLS hostname verification falls back to CN after SAN mismatch\n  CVE-2026-91769\n- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN\n  CVE-2026-91767\n- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection\n  CVE-2026-6103\n- Fix Unbounded recursion in server-side cleanup_xml_node()\n  CVE-2026-91765\n- Fix Integer overflow to buffer overflow in SOAP HTTP parsing\n  CVE-2025-14181\n- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL\n  CVE-2026-92842\n- Fix Cross-origin credential leak in HTTP stream wrapper redirects\n  CVE-2026-91766\n- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header\n  CVE-2026-93682\n\n[7.4.33-6]\n- Fix leak on double DatePeriod::__construct() call\n- Fixed SQL injection via E'...' backslash breakout\n  CVE-2026-17543\n- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks\n  CVE-2026-7260\n\n[7.4.33-5]\n- Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD\n  CVE-2026-14355\n\n[7.4.33-4]\n- Fix XSS within status endpoint\n  CVE-2026-6735\n- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map\n  CVE-2026-6722\n- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION\n  CVE-2026-7261\n- Fix Broken Apache map value NULL check\n  CVE-2026-7262\n- Fix Signed integer overflow of char array offset\n  CVE-2026-7568\n- Fix Consistently pass unsigned char to ctype.h functions\n  CVE-2026-7258\n\n[7.4.33-3]\n- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface\n  GHSA-4w77-75f9-2c8w\n- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs\n  CVE-2024-11234\n- Fix Single byte overread with convert.quoted-printable-decode filter\n  CVE-2024-11233\n- Fix Leak partial content of the heap through heap buffer over-read\n  CVE-2024-8929\n- Fix libxml streams use wrong content-type header when requesting a redirected resource\n  CVE-2025-1219\n- Fix Stream HTTP wrapper header check might omit basic auth header\n  CVE-2025-1736\n- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes\n  CVE-2025-1861\n- Fix Streams HTTP wrapper does not fail for headers without colon\n  CVE-2025-1734\n- Fix Header parser of http stream wrapper does not handle folded headers\n  CVE-2025-1217\n- Fix pgsql extension does not check for errors during escaping\n  CVE-2025-1735\n- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix\n  CVE-2025-6491\n- Fix Null byte termination in hostnames\n  CVE-2025-1220\n- Fix Null byte termination in dns_get_record()\n  GHSA-www2-q4fc-65wf\n- Fix Heap buffer overflow in array_merge()\n  CVE-2025-14178\n- Fix Information Leak of Memory in getimagesize\n  CVE-2025-14177\n\n[7.4.33-2]\n- fix low/moderate CVEs\n  RHEL-66589\n- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision\n  CVE-2024-8927\n- Fix Logs from childrens may be altered\n  CVE-2024-9026\n- Fix Erroneous parsing of multipart form data\n  CVE-2024-8925\n- Fix filter bypass in filter_var FILTER_VALIDATE_URL\n  CVE-2024-5458\n- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix\n  CVE-2024-2756\n- Fix password_verify can erroneously return true opening ATO risk\n  CVE-2024-3096\n- Fix Security issue with external entity loading in XML without enabling it\n  CVE-2023-3823\n- Fix Buffer mismanagement in phar_dir_read()\n  CVE-2023-3824\n- Fix Missing error check and insufficient random bytes in HTTP Digest\n  authentication for SOAP\n  CVE-2023-3247\n- fix #81744: Password_verify() always return true with some hash\n  CVE-2023-0567\n- fix #81746: 1-byte array overrun in common path resolve code\n  CVE-2023-0568\n- fix DOS vulnerability when parsing multipart request body\n  CVE-2023-0662\n\n[7.4.33-1]\n- rebase to 7.4.33\n- fix: due to an integer overflow PDO::quote() may return unquoted string\n  CVE-2022-31631\n\n[7.4.30-1]\n- rebase to 7.4.30 #2099615\n\n[7.4.19-3]\n- fix password of excessive length triggers buffer overflow leading to RCE\n  CVE-2022-31626\n\nphp-pear\n[1:1.10.13-1]\n- update PEAR to 1.10.13\n- update Archive_Tar to 1.4.14\n\n[1:1.10.12-1]\n- update PEAR to 1.10.12\n- update Archive_Tar to 1.4.9\n- update Console_Getopt to 1.4.3\n- update XML_Util to 1.4.5\n\n[1:1.10.9-1]\n- update PEAR to 1.10.9\n- update Archive_Tar to 1.4.7\n- update Console_Getopt to 1.4.2\n\n[1:1.10.5-8]\n- require /usr/bin/gpg instead of gnupg\n\n[1:1.10.5-7]\n- enable autoloader only in Fedora\n\n[1:1.10.5-6]\n- add patch for PHP 7.2 from\n  https://github.com/pear/pear-core/pull/71\n\n[1:1.10.5-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1:1.10.5-4]\n- add autoloader for each package\n\n[1:1.10.5-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1:1.10.5-2]\n- update XML_Util to 1.4.3 (no change)\n\nphp-pecl-apcu\n[5.1.18-1]\n- update to 5.1.18\n\n[5.1.17-1]\n- update to 5.1.17\n\n[5.1.12-1]\n- update to 5.1.12 (stable)\n\n[5.1.11-1]\n- update to 5.1.11 (stable)\n\n[5.1.10-1]\n- update to 5.1.10 (stable)\n\n[5.1.9-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[5.1.9-2]\n- undefine _strict_symbol_defs_build\n\n[5.1.9-1]\n- Update to 5.1.9 (php 7, stable)\n\n[5.1.8-5]\n- rebuild for https://fedoraproject.org/wiki/Changes/php72\n\n[5.1.8-4]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild\n\nphp-pecl-rrd\n[2.0.1-1]\n- build for RHEL 8\n\n[2.0.1-13]\n- rebuild for https://fedoraproject.org/wiki/Changes/php74\n\n[2.0.1-12]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\n[2.0.1-11]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild\n\n[2.0.1-10]\n- Rebuild for https://fedoraproject.org/wiki/Changes/php73\n\n[2.0.1-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[2.0.1-8]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[2.0.1-7]\n- undefine _strict_symbol_defs_build\n\n[2.0.1-6]\n- rebuild for https://fedoraproject.org/wiki/Changes/php72\n\n[2.0.1-5]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild\n\nphp-pecl-xdebug\n[2.9.5-1]\n- update to 2.9.5\n\n[2.8.0-1]\n- build for RHEL 8 #1769857\n\n[2.8.0-1]\n- update to 2.8.0\n\n[2.7.2-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild\n\n[2.7.2-1]\n- update to 2.7.2\n\n[2.7.1-1]\n- update to 2.7.1\n\n[2.7.0-1]\n- update to 2.7.0 (stable)\n\n[2.7.0-0.3.RC2]\n- update to 2.7.0RC2\n\n[2.7.0-0.2.rc1]\n- update to 2.7.0RC1\n\n[2.7.0-0.1.beta1.1]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild\n\nphp-pecl-zip\n[1.18.2-1]\n- update to 1.18.2\n\n[1.15.4-1]\n- Update to 1.15.4\n\n[1.15.3-1]\n- Update to 1.15.3\n\n[1.15.2-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[1.15.2-2]\n- undefine _strict_symbol_defs_build\n\n[1.15.2-1]\n- Update to 1.15.2\n\n[1.15.1-4]\n- rebuild for https://fedoraproject.org/wiki/Changes/php72\n\n[1.15.1-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild\n\n[1.15.1-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[1.15.1-1]\n- Update to 1.15.1",
  "id": "ELSA-2026-87080",
  "ovalId": "oval:com.oracle.elsa:def:202687080",
  "source": "oracle_linux",
  "title": "ELSA-2026-87080:  php:7.4 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-87080.html"
}