Skip to content
OpenAdvisories
Medium ALSA-2025:23309 3 CVEs

Moderate: php:8.3 security update

Published Dec 16, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: pgsql extension does not check for errors during escaping (CVE-2025-1735)
* php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)
* php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 32

ReleasePackageFixed in
AlmaLinux · 9 apcu-panel 5.1.23-1.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-bcmath 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-cli 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-common 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-dba 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-dbg 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-devel 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-embedded 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-enchant 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-ffi 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-fpm 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-gd 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-gmp 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-intl 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-ldap 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-mbstring 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-mysqlnd 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-odbc 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-opcache 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-pdo 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-pecl-apcu 5.1.23-1.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php-pecl-apcu-devel 5.1.23-1.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php-pecl-redis6 6.1.0-2.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php-pecl-rrd 2.0.3-4.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php-pecl-xdebug3 3.3.1-1.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php-pecl-zip 1.22.3-1.module_el9.6.0+151+5f31e576
AlmaLinux · 9 php-pgsql 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-process 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-snmp 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-soap 8.3.26-1.module_el9.7.0+197+324afee8
AlmaLinux · 9 php-xml 8.3.26-1.module_el9.7.0+197+324afee8

Vulnerabilities 3

  • Medium 5.9
    CVE-2025-1735

    pgsql extension does not check for errors during escaping

    In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as inv…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2025-6491

    NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

    In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine
  • Low 3.7
    CVE-2025-1220

    Null byte termination in hostnames

    In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like fsockopen() lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parse_url() t…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-1220
  • report
    https://access.redhat.com/security/cve/CVE-2025-1735
  • report
    https://access.redhat.com/security/cve/CVE-2025-6491
  • report
    https://bugzilla.redhat.com/2378689
  • report
    https://bugzilla.redhat.com/2378690
  • report
    https://bugzilla.redhat.com/2379792
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-23309.html