ALT-PU-2026-20039

Высокий

ALT-PU-2026-20039: package php8.4-soap update to version 8.4.26-alt1

Источник

errata.altlinux.org

Дата публикации

06.10.2026

Дата обновления

29.10.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades php8.4-soap to version 8.4.26-alt1.

Устраненные уязвимости11

CVE-2025-1218

Средний 5.9

Дата публикации: 25.09.2026

CWE-122

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and can crash the process.

CVSS 3.1

Средний 5.9

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: High
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Ссылки

CVE-2025-1218 https://nvd.nist.gov/vuln/detail/CVE-2025-1218

Ссылки1

ALT-PU-2026-20039 https://errata.altlinux.org/ALT-PU-2026-20039

Связанные уязвимости

ALT-PU-2026-20042

CVSS3: 7.5

altlinux

около 1 месяца назад

ALT-PU-2026-20042: package `php8.2-soap` update to version 8.2.34-alt1

ALT-PU-2026-20041

CVSS3: 7.5

altlinux

около 1 месяца назад

ALT-PU-2026-20041: package `php8.5-soap` update to version 8.5.11-alt1

ALT-PU-2026-20040

CVSS3: 7.5

altlinux

около 1 месяца назад

ALT-PU-2026-20040: package `php8.3-soap` update to version 8.3.35-alt1

ALT-PU-2026-17471

CVSS3: 7.5

altlinux

около 1 месяца назад

ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1

ALT-PU-2026-17464

CVSS3: 7.5

altlinux

около 1 месяца назад

ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1