p PatchFirst

ALSA-2025:4263

ALSA-2025:4263 · Moderate: php:8.1 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: Leak partial content of the heap through heap buffer over-read in mysqlnd (CVE-2024-8929) * php: Single byte overread with convert.quoted-printable-decode filter (CVE-2024-11233) * php: Configuring a proxy in a stream context might allow for CRLF injection in URIs (CVE-2024-11234) * php: Header parser of http stream wrapper does not handle folded headers (CVE-2025-1217) * php: Stream HTTP wrapper header check might omit basic auth header (CVE-2025-1736) * php: Streams HTTP wrapper does not fail for headers with invalid name and no colon (CVE-2025-1734) * php: libxml streams use wrong content-type header when requesting a redirected resource (CVE-2025-1219) * php: Stream HTTP wrapper truncates redirect location to 1024 bytes (CVE-2025-1861) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • apcu-panel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.21-1.module_el9.1.0+15+94ba28e4

    Update to 5.1.21-1.module_el9.1.0+15+94ba28e4

  • php AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-bcmath AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-cli AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-common AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-dba AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-dbg AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-embedded AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-enchant AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-ffi AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-fpm AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-gd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-gmp AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-intl AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-ldap AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-mbstring AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-mysqlnd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-odbc AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-opcache AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-pdo AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 8.1.32-1.module_el9.5.0+156+9f1cd3fd

    Update to 8.1.32-1.module_el9.5.0+156+9f1cd3fd

  • php-pecl-apcu AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.21-1.module_el9.1.0+15+94ba28e4

    Update to 5.1.21-1.module_el9.1.0+15+94ba28e4

  • php-pecl-apcu-devel AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 5.1.21-1.module_el9.1.0+15+94ba28e4

    Update to 5.1.21-1.module_el9.1.0+15+94ba28e4

  • php-pecl-rrd AlmaLinux:9

    Affected ranges
    • ECOSYSTEM: < 2.0.3-4.module_el9.1.0+15+94ba28e4

    Update to 2.0.3-4.module_el9.1.0+15+94ba28e4

Original sources

Check your server →