Tuxcare Errata System 0.0.1 5.10 2026-03-18T08:16:13 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11234 CVE-2024-11233 CVE-2024-11236 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11236 CVE-2024-11234 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8929: fix various heap buffer over-reads for mysqlnd Critical TuxCare License Agreement CVE-2024-11236 CVE-2024-11233 CVE-2024-11234 Ubuntu 24.04 LTS * Security fixes - CVE-2024-11234: fix HTTP fulluri CRLF injection - CVE-2024-11233: fix single byte overread with convert.quoted-printable- decode filter - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes Critical TuxCare License Agreement CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 Ubuntu 24.04 LTS * ALTPHP-2031: write ioncube ext at the beginning of the default.ini conf Important TuxCare License Agreement CVE-2024-11235 Ubuntu 24.04 LTS * ALTPHP-2031: write ioncube ext at the beginning of the default.ini conf Important TuxCare License Agreement CVE-2024-11235 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1736: verify CR during header check to prevent some misbehavior Important TuxCare License Agreement CVE-2025-1736 CVE-2024-11235 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1736: verify CR during header check to prevent some misbehavior Important TuxCare License Agreement CVE-2024-11235 CVE-2025-1736 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1736: verify CR during header check to prevent some misbehavior Critical TuxCare License Agreement CVE-2025-1736 CVE-2017-8923 CVE-2017-9118 Ubuntu 24.04 LTS * Security fixes - CVE-2017-8923: fix integer overflow when concatenating strings - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl - CVE-2017-9119: handle memory limit error during string reallocation correctly - CVE-2017-9120: Integer overflow in mysqli_real_escape_string() Critical TuxCare License Agreement CVE-2017-9120 CVE-2017-9119 CVE-2019-19246 CVE-2019-9025 CVE-2017-9118 CVE-2017-8923 Ubuntu 24.04 LTS * ALTPHP-2068: Fixed opcache segfault on Ubuntu 22.04. Critical TuxCare License Agreement CVE-2020-7071 CVE-2019-9025 CVE-2017-9120 CVE-2017-9118 CVE-2017-8923 CVE-2017-9119 Ubuntu 24.04 LTS * Security fixes - CVE-2019-9022: fix DNS response parsing Critical TuxCare License Agreement CVE-2019-11036 CVE-2019-11035 CVE-2019-9022 CVE-2019-11034 CVE-2017-9120 CVE-2017-9118 CVE-2017-9119 CVE-2020-7071 CVE-2019-9025 Ubuntu 24.04 LTS * Security fixes - CVE-2019-9022: fix DNS response parsing Critical TuxCare License Agreement CVE-2020-7068 CVE-2019-11036 CVE-2020-7071 CVE-2019-9025 CVE-2019-11034 CVE-2019-11035 CVE-2019-9022 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1217 CVE-2025-1861 CVE-2025-1734 Ubuntu 24.04 LTS * Security fixes - CVE-2019-9023: fix issues with encoding length Critical TuxCare License Agreement CVE-2019-11045 CVE-2025-1219 CVE-2025-1217 CVE-2019-11043 CVE-2019-9023 CVE-2025-1734 CVE-2025-1861 Ubuntu 24.04 LTS * Security fixes - CVE-2019-11045: fix bug #78863 - DirectoryIterator class silently truncates after a nullbyte Moderate TuxCare License Agreement CVE-2025-1734 CVE-2019-11045 CVE-2025-1861 CVE-2025-1219 CVE-2025-1217 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1861: fix http redirect location truncation - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams Moderate TuxCare License Agreement CVE-2025-1734 CVE-2025-1219 CVE-2025-1217 CVE-2025-1861 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1861 CVE-2025-1734 CVE-2025-1219 CVE-2025-1217 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation Moderate TuxCare License Agreement CVE-2025-1861 CVE-2025-1217 CVE-2025-1219 CVE-2025-1734 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams - fix regression in CVE-2024-11234 patch Moderate TuxCare License Agreement CVE-2025-1861 CVE-2025-1219 CVE-2025-1734 CVE-2025-1217 Ubuntu 24.04 LTS * Security fixes - CVE-2019-11045: fix bug #78863 - DirectoryIterator class silently truncates after a nullbyte - CVE-2019-11043: fix bug #78599 - env_path_info underflow can lead to RCE - CVE-2019-9675: fix bug #77586 - phar_tar_writeheaders_int() buffer overflow - CVE-2019-9638, CVE-2019-9639: fix bug #77563 - uninitialized read in exif_process_IFD_in_MAKERNOTE - CVE-2019-9637: fix bug #77630 - safer rename() procedure Critical TuxCare License Agreement CVE-2019-11045 CVE-2019-11043 CVE-2019-9675 CVE-2019-9639 CVE-2019-9637 CVE-2019-9638 Ubuntu 24.04 LTS * Security fixes - CVE-2019-11041: fix bug #78222 -heap-buffer-overflow on exif_scan_thumbnail Important TuxCare License Agreement CVE-2019-11041 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2025-1220: fix null byte termination in hostnames - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large XML namespace prefix - CVE-2025-1220: fix null byte termination in hostnames Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 Ubuntu 24.04 LTS * Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 Ubuntu 24.04 LTS * Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 Ubuntu 24.04 LTS * Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 Ubuntu 24.04 LTS * Security fixes - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in regexec.c Important TuxCare License Agreement CVE-2019-19246 Ubuntu 24.04 LTS * Security fixes - CVE-2019-11042: heap-buffer-overflow on exif_process_user_comment Important TuxCare License Agreement CVE-2019-11042 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8927: fix bypass of cgi.force_redirect configuration Important TuxCare License Agreement CVE-2024-8927 Ubuntu 24.04 LTS * Security fixes - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer Moderate TuxCare License Agreement CVE-2024-8925 Ubuntu 24.04 LTS * ALTPHP-2263: update to 8.2.30. Important TuxCare License Agreement CVE-2025-14180 CVE-2025-14177 CVE-2025-14178 Ubuntu 24.04 LTS * ALTPHP-2262: update to 8.1.34. Important TuxCare License Agreement CVE-2025-14178 CVE-2025-14180 CVE-2025-14177 Ubuntu 24.04 LTS * Security fixes - CVE-2015-9253: fix PHP-FPM exhaustion CPU and memory issue causing denial of service Moderate TuxCare License Agreement CVE-2015-9253 Ubuntu 24.04 LTS * Security fixes - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 Ubuntu 24.04 LTS * Security fixes - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 Ubuntu 24.04 LTS * Security fixes - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 Ubuntu 24.04 LTS * Security fixes - CVE-2025-14178: fix integer overflow in array_merge Important TuxCare License Agreement CVE-2025-14178 Ubuntu 24.04 LTS * ALTPHP-2341: Update php-fpm lve patch to extract doc_root from php_admin_values for CageFS per-domain isolation Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 CVE-2024-3096 Ubuntu 24.04 LTS * ALTPHP-2341: Update php-fpm lve patch to extract doc_root from php_admin_values for CageFS per-domain isolation Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 CVE-2024-3096 Ubuntu 24.04 LTS * ALTPHP-2341: Update php-fpm lve patch to extract doc_root from php_admin_values for CageFS per-domain isolation Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 CVE-2024-3096 Ubuntu 24.04 LTS * ALTPHP-2341: Update php-fpm lve patch to extract doc_root from php_admin_values for CageFS per-domain isolation Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 CVE-2024-3096 Ubuntu 24.04 LTS * ALTPHP-2341: Update php-fpm lve patch to extract doc_root from php_admin_values for CageFS per-domain isolation Moderate TuxCare License Agreement CVE-2024-2756 CVE-2022-31631 CVE-2024-3096 alt-php80 alt-php80-bcmath alt-php80-cli alt-php80-common alt-php80-dba alt-php80-dev alt-php80-enchant alt-php80-firebird alt-php80-fpm alt-php80-gd alt-php80-imap alt-php80-intl alt-php80-ldap alt-php80-mbstring alt-php80-mysqlnd alt-php80-odbc alt-php80-opcache alt-php80-pdo alt-php80-pgsql alt-php80-process alt-php80-pspell alt-php80-snmp alt-php80-soap alt-php80-sodium alt-php80-tidy alt-php80-xml alt-php74 alt-php74-bcmath alt-php74-cli alt-php74-common alt-php74-dba alt-php74-dev alt-php74-enchant alt-php74-firebird alt-php74-fpm alt-php74-gd alt-php74-imap alt-php74-intl alt-php74-ldap alt-php74-mbstring alt-php74-mysqlnd alt-php74-odbc alt-php74-opcache alt-php74-pdo alt-php74-pgsql alt-php74-process alt-php74-pspell alt-php74-snmp alt-php74-soap alt-php74-sodium alt-php74-tidy alt-php74-xml alt-php74-xmlrpc alt-php73 alt-php73-bcmath alt-php73-cli alt-php73-common alt-php73-dba alt-php73-dev alt-php73-enchant alt-php73-firebird alt-php73-fpm alt-php73-gd alt-php73-imap alt-php73-intl alt-php73-ldap alt-php73-mbstring alt-php73-mysqlnd alt-php73-odbc alt-php73-opcache alt-php73-pdo alt-php73-pgsql alt-php73-process alt-php73-pspell alt-php73-recode alt-php73-snmp alt-php73-soap alt-php73-sodium alt-php73-tidy alt-php73-xml alt-php73-xmlrpc alt-php72 alt-php72-bcmath alt-php72-cli alt-php72-common alt-php72-dba alt-php72-dev alt-php72-enchant alt-php72-firebird alt-php72-fpm alt-php72-gd alt-php72-imap alt-php72-intl alt-php72-ldap alt-php72-mbstring alt-php72-mysqlnd alt-php72-odbc alt-php72-opcache alt-php72-pdo alt-php72-pgsql alt-php72-process alt-php72-pspell alt-php72-recode alt-php72-snmp alt-php72-soap alt-php72-sodium alt-php72-tidy alt-php72-xml alt-php72-xmlrpc alt-php71 alt-php71-bcmath alt-php71-cli alt-php71-common alt-php71-dba alt-php71-dev alt-php71-enchant alt-php71-firebird alt-php71-fpm alt-php71-gd alt-php71-imap alt-php71-intl alt-php71-ldap alt-php71-mbstring alt-php71-mcrypt alt-php71-mysqlnd alt-php71-odbc alt-php71-opcache alt-php71-pdo alt-php71-pgsql alt-php71-process alt-php71-pspell alt-php71-recode alt-php71-snmp alt-php71-soap alt-php71-tidy alt-php71-xml alt-php71-xmlrpc alt-php70 alt-php70-bcmath alt-php70-cli alt-php70-common alt-php70-dba alt-php70-dev alt-php70-enchant alt-php70-firebird alt-php70-fpm alt-php70-gd alt-php70-imap alt-php70-intl alt-php70-ldap alt-php70-mbstring alt-php70-mcrypt alt-php70-mysqlnd alt-php70-odbc alt-php70-opcache alt-php70-pdo alt-php70-pgsql alt-php70-process alt-php70-pspell alt-php70-recode alt-php70-snmp alt-php70-soap alt-php70-tidy alt-php70-xml alt-php70-xmlrpc alt-php56 alt-php56-bcmath alt-php56-cli alt-php56-common alt-php56-dba alt-php56-dbx alt-php56-dev alt-php56-enchant alt-php56-firebird alt-php56-fpm alt-php56-gd alt-php56-imap alt-php56-intl alt-php56-ldap alt-php56-mbstring alt-php56-mcrypt alt-php56-mysqlnd alt-php56-odbc alt-php56-opcache alt-php56-pdo alt-php56-pgsql alt-php56-process alt-php56-pspell alt-php56-recode alt-php56-snmp alt-php56-soap alt-php56-sybase alt-php56-tidy alt-php56-xml alt-php56-xmlrpc alt-php82 alt-php82-bcmath alt-php82-cli alt-php82-common alt-php82-dba alt-php82-dev alt-php82-enchant alt-php82-firebird alt-php82-fpm alt-php82-gd alt-php82-imap alt-php82-intl alt-php82-ldap alt-php82-mbstring alt-php82-mysqlnd alt-php82-odbc alt-php82-opcache alt-php82-pdo alt-php82-pgsql alt-php82-process alt-php82-pspell alt-php82-snmp alt-php82-soap alt-php82-sodium alt-php82-tidy alt-php82-xml alt-php81 alt-php81-bcmath alt-php81-cli alt-php81-common alt-php81-dba alt-php81-dev alt-php81-enchant alt-php81-firebird alt-php81-fpm alt-php81-gd alt-php81-imap alt-php81-intl alt-php81-ldap alt-php81-mbstring alt-php81-mysqlnd alt-php81-odbc alt-php81-opcache alt-php81-pdo alt-php81-pgsql alt-php81-process alt-php81-pspell alt-php81-snmp alt-php81-soap alt-php81-sodium alt-php81-tidy alt-php81-xml alt-php52 alt-php52-bcmath alt-php52-cli alt-php52-common alt-php52-dba alt-php52-dbx alt-php52-dev alt-php52-enchant alt-php52-firebird alt-php52-gd alt-php52-imap alt-php52-intl alt-php52-ldap alt-php52-mbstring alt-php52-mcrypt alt-php52-mysqlnd alt-php52-odbc alt-php52-pdo alt-php52-pgsql alt-php52-process alt-php52-pspell alt-php52-recode alt-php52-snmp alt-php52-soap alt-php52-sqlite alt-php52-sybase alt-php52-tidy alt-php52-xml alt-php52-xmlrpc amd64 0:8.0.30-18 amd64 0:7.4.33-31 amd64 0:7.3.33-34 amd64 0:7.2.34-48 amd64 0:7.1.33-63 amd64 0:7.0.33-93 amd64 0:5.6.40-93 amd64 0:8.2.28-2 amd64 0:8.1.32-2 amd64 0:8.0.30-21 amd64 0:7.4.33-34 amd64 0:7.3.33-38 amd64 0:7.2.34-52 amd64 0:7.1.33-69 amd64 0:7.0.33-101 amd64 0:5.6.40-101 amd64 0:5.6.40-102 amd64 0:7.0.33-104 amd64 0:7.1.33-71 amd64 0:7.2.34-53 amd64 0:7.3.33-39 amd64 0:7.4.33-36 amd64 0:8.0.30-23 amd64 0:5.6.40-103 amd64 0:5.6.40-104 amd64 0:5.6.40-106 amd64 0:7.0.33-106 amd64 0:7.1.33-73 amd64 0:7.3.33-42 amd64 0:7.4.33-39 amd64 0:7.2.34-56 amd64 0:8.0.30-25 amd64 0:5.6.40-107 amd64 0:7.0.33-108 amd64 0:7.1.33-75 amd64 0:5.2.17-215 amd64 0:5.6.40-112 amd64 0:5.2.17-216 amd64 0:5.2.17-217 amd64 0:8.2.30-1 amd64 0:8.1.34-1 amd64 0:7.0.33-112.5 amd64 0:8.0.30-32.2 amd64 0:7.4.33-44.2 amd64 0:7.3.33-47.2 amd64 0:7.2.34-61.2 amd64 0:5.6.40-116 amd64 0:7.0.33-117 amd64 0:7.1.33-83 amd64 0:7.2.34-65 amd64 0:7.4.33-48