Threats Tagged 'cve-2025-1217'

Multiple security vulnerabilities affecting PHP 8.3 have been addressed in a Red Hat Enterprise Linux 9 update. These include issues in the HTTP stream wrapper such as improper handling of folded headers, omission of basic auth headers, acceptance of invalid headers, incorrect content-type headers on redirects, and truncation of redirect locations. Additionally, a use-after-free vulnerability in php_request_shutdown was fixed. The update is rated as Important by Red Hat Product Security.

Multiple vulnerabilities affecting the PHP HTTP stream wrapper and libxml streams were addressed in a Red Hat Enterprise Linux 9 update. These include issues with header parsing, omission of basic authentication headers, improper handling of invalid headers, incorrect content-type headers on redirected resources, and truncation of redirect locations. The update is rated as having moderate security impact.

Multiple security vulnerabilities have been identified and addressed in PHP as packaged by Red Hat Enterprise Linux 10. These include issues in the HTTP stream wrapper related to header parsing, authentication header omission, invalid header handling, content-type header misuse on redirects, and redirect location truncation. Additionally, a use-after-free vulnerability exists in the PHP request shutdown process. Red Hat has released updates to fix these issues in their PHP packages for various architectures and support levels.

A security update for PHP 7.4 on Red Hat Enterprise Linux 8 addresses multiple vulnerabilities including heap buffer over-reads, CRLF injection, header parsing issues, NULL pointer dereference, buffer overflow, and information disclosure. These issues affect various PHP components such as mysqlnd, stream wrappers, pgsql extension, SOAP extension, and image processing functions. The update is rated as having a moderate security impact. Detailed CVE references are provided for each vulnerability. The update is available through Red Hat advisories and includes fixes for all listed issues.