elsa-2026-87151

oracle_linux
Description

[8.0.30-8.1] - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-109618",
    "CVE-2026-109619",
    "CVE-2026-91765"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[8.0.30-8.1]\n- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF\n- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison\n  CVE-2026-91768\n- Fix Various packet overreads in mysqlnd wire protocol\n  CVE-2025-1218\n- Fix TLS hostname verification falls back to CN after SAN mismatch\n  CVE-2026-91769\n- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN\n  CVE-2026-91767\n- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection\n  CVE-2026-6103\n- Fix Unbounded recursion in server-side cleanup_xml_node()\n  CVE-2026-91765\n- Fix Integer overflow to buffer overflow in SOAP HTTP parsing\n  CVE-2025-14181\n- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL\n  CVE-2026-92842\n- Fix Cross-origin credential leak in HTTP stream wrapper redirects\n  CVE-2026-91766\n- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header\n  CVE-2026-93682\n- Avoid state corruption via bailout\n  CVE-2026-109618, CVE-2026-109619",
  "id": "ELSA-2026-87151",
  "ovalId": "oval:com.oracle.elsa:def:202687151",
  "source": "oracle_linux",
  "title": "ELSA-2026-87151:  php security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-87151.html"
}
View JSON API Download JSON