Tuxcare Errata System 0.0.1 5.10 2026-03-17T06:20:30 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read() Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest - Remove generated zend_language files from tarball - Constraint max version for bison package Moderate TuxCare License Agreement CVE-2023-3247 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest Moderate TuxCare License Agreement CVE-2023-3247 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest Moderate TuxCare License Agreement CVE-2023-3247 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest Moderate TuxCare License Agreement CVE-2023-3247 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest Moderate TuxCare License Agreement CVE-2023-3247 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest Moderate TuxCare License Agreement CVE-2023-3247 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2022-4900: Prevent potential buffer overflow for php_cli_server_workers_max Moderate TuxCare License Agreement CVE-2022-4900 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-2756 CVE-2024-3096 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-3096 CVE-2024-2756 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-3096 CVE-2024-2756 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-3096 CVE-2024-2756 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-3096 CVE-2024-2756 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-2756 CVE-2024-3096 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1738: Always build with alt-sqlite - ALTPHP-1727: Build with instantclient 21 Moderate TuxCare License Agreement CVE-2024-2756 CVE-2024-3096 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1831: disable thread safe building Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1831: disable thread safe building Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1831: disable thread safe building Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1831: disable thread safe building Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1831: disable thread safe building Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Fix for hardened PHP - CVE-2024-5458: Fix early-out for ipv6 hostname validation, ensure full check is performed Moderate TuxCare License Agreement CVE-2024-5458 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1875: Fix handling of mail.add_x_header option Important TuxCare License Agreement CVE-2024-8927 CVE-2024-8925 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1875: Fix handling of mail.add_x_header option Important TuxCare License Agreement CVE-2024-8925 CVE-2024-8927 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1875: Fix handling of mail.add_x_header option Important TuxCare License Agreement CVE-2024-8925 CVE-2024-8927 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1875: Fix handling of mail.add_x_header option Important TuxCare License Agreement CVE-2024-8925 CVE-2024-8927 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1875: Fix handling of mail.add_x_header option Important TuxCare License Agreement CVE-2024-8925 CVE-2024-8927 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1875: Fix handling of mail.add_x_header option Important TuxCare License Agreement CVE-2024-9026 CVE-2024-8927 CVE-2024-8925 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer - CVE-2024-9026: Fix possible altering of children logs - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration Important TuxCare License Agreement CVE-2024-8925 CVE-2024-9026 CVE-2024-8927 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - fix libssh2 require for rhel8 Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11234 CVE-2024-11236 CVE-2024-11233 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11236 CVE-2024-11234 CVE-2024-11233 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11236 CVE-2024-11233 CVE-2024-11234 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-11234: fix HTTP fulluri CRLF injection - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-11234: fix HTTP fulluri CRLF injection - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-11234: fix HTTP fulluri CRLF injection - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes Critical TuxCare License Agreement CVE-2024-11236 CVE-2024-11234 CVE-2024-11233 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes - CVE-2024-11234: fix HTTP fulluri CRLF injection - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - pack libphp7.so to common sub-package Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1968: Fix NTS in httpd module Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-1943: do not create dat file for lve if it is not cagefs environment Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2025: Use alt-libcurl30 for CL9 Important TuxCare License Agreement CVE-2024-11235 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2025: Use alt-libcurl30 for CL9 Important TuxCare License Agreement CVE-2024-11235 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1736: verify CR during header check to prevent some misbehavior Important TuxCare License Agreement CVE-2024-11235 CVE-2025-1736 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1736: verify CR during header check to prevent some misbehavior Important TuxCare License Agreement CVE-2025-1736 CVE-2024-11235 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1736: verify CR during header check to prevent some misbehavior Critical TuxCare License Agreement CVE-2025-1736 CVE-2017-9118 CVE-2017-8923 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2025: Use alt-libcurl30 for CL9 Critical TuxCare License Agreement CVE-2017-9120 CVE-2017-9118 CVE-2017-8923 CVE-2017-9119 CVE-2019-9025 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2025: Use alt-libcurl30 for CL9 Critical TuxCare License Agreement CVE-2017-9120 CVE-2019-9025 CVE-2017-9118 CVE-2017-9119 CVE-2020-7071 CVE-2017-8923 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2025: Use alt-libcurl30 for CL9 Critical TuxCare License Agreement CVE-2017-9120 CVE-2019-11034 CVE-2019-9025 CVE-2017-9118 CVE-2017-9119 CVE-2019-11036 CVE-2020-7071 CVE-2019-11035 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2025: Use alt-libcurl30 for CL9 Critical TuxCare License Agreement CVE-2019-11034 CVE-2019-11036 CVE-2020-7071 CVE-2020-7068 CVE-2019-11035 CVE-2019-9025 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-9022: fix DNS response parsing Critical TuxCare License Agreement CVE-2019-11035 CVE-2019-9025 CVE-2019-11036 CVE-2019-9022 CVE-2018-14883 CVE-2020-7071 CVE-2019-11034 CVE-2018-19518 CVE-2018-17082 CVE-2018-19935 CVE-2018-20783 CVE-2020-7068 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-9022: fix DNS response parsing - CVE-2019-9023: complete fix heap-based buffer over-read in mbstring regular expression functions when supplied with invalid multibyte data Critical TuxCare License Agreement CVE-2018-19935 CVE-2018-20783 CVE-2019-11035 CVE-2019-11034 CVE-2019-9022 CVE-2019-11036 CVE-2020-7071 CVE-2019-9025 CVE-2018-19518 CVE-2020-7068 CVE-2019-9023 CVE-2018-14883 CVE-2018-17082 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-9022: fix DNS response parsing - CVE-2019-9023: complete fix heap-based buffer over-read in mbstring regular expression functions when supplied with invalid multibyte data Critical TuxCare License Agreement CVE-2019-11035 CVE-2019-11036 CVE-2020-7071 CVE-2019-9025 CVE-2019-9023 CVE-2019-11034 CVE-2018-20783 CVE-2018-19935 CVE-2018-19518 CVE-2020-7068 CVE-2019-9022 CVE-2018-14883 CVE-2018-17082 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-9022: fix DNS response parsing - CVE-2019-9023: complete fix heap-based buffer over-read in mbstring regular expression functions when supplied with invalid multibyte data Critical TuxCare License Agreement CVE-2018-19935 CVE-2019-11034 CVE-2019-9022 CVE-2019-11036 CVE-2019-9025 CVE-2018-19518 CVE-2020-7068 CVE-2019-11035 CVE-2019-9023 CVE-2018-20783 CVE-2018-14883 CVE-2018-17082 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1861 CVE-2025-1734 CVE-2025-1217 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams Moderate TuxCare License Agreement CVE-2025-1734 CVE-2025-1219 CVE-2025-1861 CVE-2025-1217 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams Moderate TuxCare License Agreement CVE-2025-1219 CVE-2025-1217 CVE-2025-1861 CVE-2025-1734 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1734 CVE-2025-1219 CVE-2025-1861 CVE-2025-1217 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1734 CVE-2025-1217 CVE-2025-1219 CVE-2025-1861 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams - fix regression in CVE-2024-11234 patch Moderate TuxCare License Agreement CVE-2025-1734 CVE-2025-1217 CVE-2025-1219 CVE-2025-1861 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-9023: fix issues with encoding length Critical TuxCare License Agreement CVE-2025-1219 CVE-2025-1217 CVE-2025-1734 CVE-2025-1861 CVE-2019-9023 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation - CVE-2020-7071: avoid parse_url() returning a wrong host to user Moderate TuxCare License Agreement CVE-2020-7071 CVE-2025-1217 CVE-2025-1861 CVE-2025-1734 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1217 CVE-2025-1861 CVE-2025-1734 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1861 CVE-2025-1217 CVE-2025-1734 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1217 CVE-2025-1734 CVE-2025-1861 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-1220 CVE-2025-6491 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-1220 CVE-2025-6491 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix - CVE-2025-1220: fix null byte termination in hostnames Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2263: update to 8.2.30. Important TuxCare License Agreement CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2262: update to 8.1.34. Important TuxCare License Agreement CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2103: Fixed pre/post scripts on hosts without CageFS Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2103: Fixed pre/post scripts on hosts without CageFS Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2103: Fixed pre/post scripts on hosts without CageFS - ALTPHP-2111: Build with opcache Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 CVE-2024-3096 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - ALTPHP-2103: Fixed pre/post scripts on hosts without CageFS Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - EA4D-782: Ensure /opt/cpanel/alt-php56/root/usr/var/run/php-fpm path is traversable by all users (post-install chmod o+X on path components when dirs were created before package install) Moderate TuxCare License Agreement CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - EA4D-782: Ensure /opt/cpanel/alt-php70/root/usr/var/run/php-fpm path is traversable by all users (post-install chmod o+X on path components when dirs were created before package install) Moderate TuxCare License Agreement CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - EA4D-782: Ensure /opt/cpanel/alt-php71/root/usr/var/run/php-fpm path is traversable by all users (post-install chmod o+X on path components when dirs were created before package install) Moderate TuxCare License Agreement CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - EA4D-782: Ensure /opt/cpanel/alt-php72/root/usr/var/run/php-fpm path is traversable by all users (post-install chmod o+X on path components when dirs were created before package install) Moderate TuxCare License Agreement CVE-2022-31631 cpe:/o:centos:centos:9 Community Enterprise Operating System 9 - EA4D-782: Ensure /opt/cpanel/alt-php74/root/usr/var/run/php-fpm path is traversable by all users (post-install chmod o+X on path components when dirs were created before package install) Moderate TuxCare License Agreement CVE-2022-31631 cpe:/o:centos:centos:9 alt-php56 alt-php56-bcmath alt-php56-cli alt-php56-common alt-php56-dba alt-php56-dbx alt-php56-devel alt-php56-enchant alt-php56-firebird alt-php56-gd alt-php56-imap alt-php56-intl alt-php56-ldap alt-php56-mbstring alt-php56-mcrypt alt-php56-mssql alt-php56-mysqlnd alt-php56-odbc alt-php56-pdo alt-php56-pgsql alt-php56-process alt-php56-pspell alt-php56-recode alt-php56-snmp alt-php56-soap alt-php56-sybase alt-php56-tidy alt-php56-xml alt-php56-xmlrpc alt-php70 alt-php70-bcmath alt-php70-cli alt-php70-common alt-php70-dba alt-php70-devel alt-php70-enchant alt-php70-firebird alt-php70-gd alt-php70-imap alt-php70-intl alt-php70-ldap alt-php70-mbstring alt-php70-mcrypt alt-php70-mysqlnd alt-php70-odbc alt-php70-opcache alt-php70-pdo alt-php70-pgsql alt-php70-process alt-php70-pspell alt-php70-recode alt-php70-snmp alt-php70-soap alt-php70-tidy alt-php70-xml alt-php70-xmlrpc alt-php71 alt-php71-bcmath alt-php71-cli alt-php71-common alt-php71-dba alt-php71-devel alt-php71-enchant alt-php71-firebird alt-php71-gd alt-php71-imap alt-php71-intl alt-php71-ldap alt-php71-mbstring alt-php71-mcrypt alt-php71-mysqlnd alt-php71-odbc alt-php71-opcache alt-php71-pdo alt-php71-pgsql alt-php71-process alt-php71-pspell alt-php71-recode alt-php71-snmp alt-php71-soap alt-php71-tidy alt-php71-xml alt-php71-xmlrpc alt-php72 alt-php72-bcmath alt-php72-cli alt-php72-common alt-php72-dba alt-php72-devel alt-php72-enchant alt-php72-firebird alt-php72-gd alt-php72-imap alt-php72-intl alt-php72-ldap alt-php72-mbstring alt-php72-mysqlnd alt-php72-odbc alt-php72-opcache alt-php72-pdo alt-php72-pgsql alt-php72-process alt-php72-pspell alt-php72-recode alt-php72-snmp alt-php72-soap alt-php72-sodium alt-php72-tidy alt-php72-xml alt-php72-xmlrpc alt-php72-zts alt-php72-zts-devel alt-php73 alt-php73-bcmath alt-php73-cli alt-php73-common alt-php73-dba alt-php73-devel alt-php73-enchant alt-php73-firebird alt-php73-gd alt-php73-imap alt-php73-intl alt-php73-ldap alt-php73-mbstring alt-php73-mysqlnd alt-php73-odbc alt-php73-opcache alt-php73-pdo alt-php73-pgsql alt-php73-process alt-php73-pspell alt-php73-recode alt-php73-snmp alt-php73-soap alt-php73-sodium alt-php73-tidy alt-php73-xml alt-php73-xmlrpc alt-php74 alt-php74-bcmath alt-php74-cli alt-php74-common alt-php74-dba alt-php74-devel alt-php74-enchant alt-php74-firebird alt-php74-gd alt-php74-imap alt-php74-intl alt-php74-ldap alt-php74-mbstring alt-php74-mysqlnd alt-php74-odbc alt-php74-opcache alt-php74-pdo alt-php74-pgsql alt-php74-process alt-php74-pspell alt-php74-snmp alt-php74-soap alt-php74-sodium alt-php74-tidy alt-php74-xml alt-php74-xmlrpc alt-php56-fpm alt-php70-fpm alt-php71-fpm alt-php72-fpm alt-php73-fpm alt-php74-fpm alt-php80 alt-php80-bcmath alt-php80-cli alt-php80-common alt-php80-dba alt-php80-devel alt-php80-enchant alt-php80-firebird alt-php80-fpm alt-php80-gd alt-php80-imap alt-php80-intl alt-php80-ldap alt-php80-mbstring alt-php80-mysqlnd alt-php80-odbc alt-php80-opcache alt-php80-pdo alt-php80-pgsql alt-php80-process alt-php80-pspell alt-php80-snmp alt-php80-soap alt-php80-sodium alt-php80-tidy alt-php80-xml alt-php71-php-fpm alt-php55 alt-php55-bcmath alt-php55-cli alt-php55-common alt-php55-dba alt-php55-dbx alt-php55-devel alt-php55-enchant alt-php55-firebird alt-php55-fpm alt-php55-gd alt-php55-imap alt-php55-intl alt-php55-ldap alt-php55-mbstring alt-php55-mcrypt alt-php55-mssql alt-php55-mysqlnd alt-php55-odbc alt-php55-pdo alt-php55-pgsql alt-php55-process alt-php55-pspell alt-php55-recode alt-php55-snmp alt-php55-soap alt-php55-sybase alt-php55-tidy alt-php55-xml alt-php55-xmlrpc alt-php54 alt-php54-bcmath alt-php54-cli alt-php54-common alt-php54-dba alt-php54-dbx alt-php54-devel alt-php54-enchant alt-php54-firebird alt-php54-fpm alt-php54-gd alt-php54-imap alt-php54-intl alt-php54-ldap alt-php54-mbstring alt-php54-mcrypt alt-php54-mssql alt-php54-mysqlnd alt-php54-odbc alt-php54-pdo alt-php54-pgsql alt-php54-process alt-php54-pspell alt-php54-recode alt-php54-snmp alt-php54-soap alt-php54-sybase alt-php54-tidy alt-php54-xml alt-php54-xmlrpc alt-php53 alt-php53-bcmath alt-php53-cli alt-php53-common alt-php53-dba alt-php53-dbx alt-php53-devel alt-php53-enchant alt-php53-firebird alt-php53-fpm alt-php53-gd alt-php53-imap alt-php53-intl alt-php53-ldap alt-php53-mbstring alt-php53-mcrypt alt-php53-mssql alt-php53-mysqlnd alt-php53-odbc alt-php53-pdo alt-php53-pgsql alt-php53-process alt-php53-pspell alt-php53-recode alt-php53-snmp alt-php53-soap alt-php53-sqlite alt-php53-sybase alt-php53-tidy alt-php53-xml alt-php53-xmlrpc alt-php52 alt-php52-bcmath alt-php52-cli alt-php52-common alt-php52-dba alt-php52-dbx alt-php52-devel alt-php52-enchant alt-php52-firebird alt-php52-gd alt-php52-imap alt-php52-intl alt-php52-ldap alt-php52-mbstring alt-php52-mcrypt alt-php52-mssql alt-php52-ncurses alt-php52-odbc alt-php52-pdo alt-php52-pgsql alt-php52-process alt-php52-pspell alt-php52-recode alt-php52-snmp alt-php52-soap alt-php52-sqlite alt-php52-sybase alt-php52-tidy alt-php52-xml alt-php52-xmlrpc alt-php82 alt-php82-bcmath alt-php82-cli alt-php82-common alt-php82-dba alt-php82-devel alt-php82-enchant alt-php82-firebird alt-php82-fpm alt-php82-gd alt-php82-gmp alt-php82-imap alt-php82-intl alt-php82-ldap alt-php82-mbstring alt-php82-mysqlnd alt-php82-odbc alt-php82-opcache alt-php82-pdo alt-php82-pgsql alt-php82-process alt-php82-pspell alt-php82-snmp alt-php82-soap alt-php82-sodium alt-php82-tidy alt-php82-xml alt-php81 alt-php81-bcmath alt-php81-cli alt-php81-common alt-php81-dba alt-php81-devel alt-php81-enchant alt-php81-firebird alt-php81-fpm alt-php81-gd alt-php81-gmp alt-php81-imap alt-php81-intl alt-php81-ldap alt-php81-mbstring alt-php81-mysqlnd alt-php81-odbc alt-php81-opcache alt-php81-pdo alt-php81-pgsql alt-php81-process alt-php81-pspell alt-php81-snmp alt-php81-soap alt-php81-sodium alt-php81-tidy alt-php81-xml alt-php53-php-fpm alt-php54-php-fpm alt-php56-php-fpm alt-php55-php-fpm alt-php70-php-fpm alt-php73-php-fpm alt-php74-php-fpm alt-php72-php-fpm alt-php80-php-fpm alt-php56-opcache alt-php82-php-fpm alt-php81-php-fpm alt-php55-opcache x86_64 0:5.6.40-79.el9 8c55a6628608cb71 x86_64 0:7.0.33-77.el9 x86_64 0:7.1.33-47.el9 x86_64 0:7.2.34-32.el9 x86_64 1:7.3.33-17.el9 x86_64 0:7.4.33-12.el9 x86_64 0:5.6.40-80.el9 x86_64 0:7.0.33-78.el9 x86_64 0:7.1.33-48.el9 x86_64 1:7.3.33-18.el9 x86_64 0:7.4.33-13.el9 x86_64 0:7.2.34-33.el9 x86_64 0:7.4.33-15.el9 x86_64 0:5.6.40-86.el9 x86_64 0:7.0.33-83.el9 x86_64 0:7.1.33-53.el9 x86_64 0:7.2.34-38.el9 x86_64 1:7.3.33-24.el9 x86_64 0:7.4.33-21.el9 x86_64 0:8.0.30-9.el9 x86_64 0:7.0.33-87.el9 x86_64 0:7.1.33-57.el9 x86_64 0:7.2.34-42.el9 x86_64 1:7.3.33-28.el9 x86_64 0:7.4.33-25.el9 x86_64 0:8.0.30-13.el9 x86_64 0:5.6.40-92.el9 x86_64 0:7.0.33-91.el9 x86_64 0:7.1.33-61.el9 x86_64 0:7.2.34-46.el9 x86_64 1:7.3.33-32.el9 x86_64 0:7.4.33-29.el9 x86_64 0:8.0.30-15.el9 x86_64 0:5.6.40-94.el9 x86_64 0:7.0.33-93.el9 x86_64 0:7.1.33-63.el9 x86_64 0:7.2.34-48.el9 x86_64 1:7.3.33-34.el9 x86_64 0:7.4.33-31.el9 x86_64 0:8.0.30-17.el9 x86_64 1:5.5.38-138.el9 x86_64 0:5.4.45-158.el9 x86_64 0:5.3.29-175.el9 x86_64 0:5.2.17-203.el9 x86_64 0:7.2.34-49.1.el9 x86_64 0:5.6.40-97.el9 x86_64 0:7.0.33-95.el9 x86_64 0:7.1.33-64.el9 x86_64 1:7.3.33-35.el9 x86_64 0:7.4.33-32.el9 x86_64 0:8.0.30-18.el9 x86_64 0:5.4.45-160.el9 x86_64 1:5.5.38-140.el9 x86_64 0:5.3.29-177.el9 x86_64 0:8.2.28-4.el9 x86_64 0:8.1.32-3.el9 x86_64 0:8.0.30-21.el9 x86_64 0:7.4.33-35.el9 x86_64 1:7.3.33-39.el9 x86_64 0:7.2.34-53.el9 x86_64 0:7.1.33-69.el9 x86_64 0:7.0.33-102.el9 x86_64 0:5.6.40-103.el9 x86_64 1:5.5.38-147.el9 x86_64 0:5.4.45-167.el9 x86_64 0:5.3.29-184.el9 x86_64 0:5.2.17-211.el9 x86_64 0:5.6.40-104.el9 d07bf2a08d50eb66 x86_64 0:7.1.33-70.el9 x86_64 0:7.2.34-54.el9 x86_64 1:7.3.33-40.el9 x86_64 0:7.4.33-37.el9 x86_64 0:8.0.30-23.el9 x86_64 0:7.0.33-104.el9 x86_64 0:5.2.17-212.el9 x86_64 0:5.3.29-185.el9 x86_64 0:5.4.45-168.el9 x86_64 1:5.5.38-148.el9 x86_64 0:5.2.17-214.el9 x86_64 0:5.3.29-187.el9 x86_64 0:5.4.45-170.el9 x86_64 0:5.6.40-106.el9 x86_64 1:5.5.38-150.el9 x86_64 0:7.0.33-106.el9 x86_64 0:7.1.33-73.el9 x86_64 1:7.3.33-42.el9 x86_64 0:7.4.33-39.el9 x86_64 0:7.2.34-56.el9 x86_64 0:8.0.30-25.el9 x86_64 0:5.6.40-109.el9 x86_64 0:7.0.33-109.el9 x86_64 0:7.1.33-76.el9 x86_64 0:5.2.17-215.el9 x86_64 0:5.3.29-188.el9 x86_64 0:5.4.45-171.el9 x86_64 1:5.5.38-151.el9 x86_64 0:8.2.30-1.el9 x86_64 0:8.1.34-1.el9 x86_64 0:8.0.30-32.2.el9 x86_64 0:7.4.33-44.2.el9 x86_64 1:7.3.33-47.2.el9 x86_64 0:7.2.34-61.2.el9 x86_64 0:5.2.17-215.1.el9 x86_64 0:5.4.45-171.1.el9 x86_64 1:5.5.38-151.1.el9 x86_64 0:5.3.29-188.1.el9 x86_64 0:5.6.40-117.el9 x86_64 0:7.0.33-118.el9 x86_64 0:7.1.33-84.el9 x86_64 0:7.2.34-66.el9 x86_64 0:7.4.33-49.el9