Integer overflow to buffer overflow in soap HTTP parsing

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.

Integer overflow to buffer overflow in soap HTTP parsing

The SOAP HTTP client guards its response buffer growth with a check th ...

Security update for php8

Security update for php8

Security update for php8

Security update for php8

ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1

ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1

ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1

ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1

Security update for php7

Important: php:7.4 security update

ELSA-2026-87080: php:7.4 security update (IMPORTANT)