Packages
- php5 - HTML-embedded scripting language interpreter
- php7.0 - HTML-embedded scripting language interpreter
- php7.2 - HTML-embedded scripting language interpreter
- php7.4 - HTML-embedded scripting language interpreter
- php8.1 - HTML-embedded scripting language interpreter
- php8.3 - HTML-embedded scripting language interpreter
- php8.5 - HTML-embedded scripting language interpreter
Details
It was discovered that PHP did not properly validate the size of MySQL
server packets in the mysqlnd driver. A malicious server could possibly use
this issue to cause PHP to crash, resulting in a denial of service. This
issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu
24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2025-1218)
It was discovered that PHP incorrectly handled response buffer sizes in the
SOAP HTTP client. A malicious server could possibly use this issue to cause
PHP to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2025-14181)
It was discovered that PHP incorrectly handled certain TAR archive headers
in the Phar extension. An attacker could possibly use this issue to inject
arbitrary files into a crafted archive. (CVE-2026-6103)
It was discovered...
It was discovered that PHP did not properly validate the size of MySQL
server packets in the mysqlnd driver. A malicious server could possibly use
this issue to cause PHP to crash, resulting in a denial of service. This
issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu
24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. (CVE-2025-1218)
It was discovered that PHP incorrectly handled response buffer sizes in the
SOAP HTTP client. A malicious server could possibly use this issue to cause
PHP to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2025-14181)
It was discovered that PHP incorrectly handled certain TAR archive headers
in the Phar extension. An attacker could possibly use this issue to inject
arbitrary files into a crafted archive. (CVE-2026-6103)
It was discovered that PHP did not limit recursion depth when parsing
certain SOAP requests. A remote attacker could possibly use this issue to
cause PHP to crash, resulting in a denial of service. (CVE-2026-91765)
It was discovered that PHP incorrectly handled authentication headers when
following HTTP redirects. A remote attacker could possibly use this issue
to obtain sensitive information. (CVE-2026-91766)
It was discovered that PHP incorrectly handled wildcard names in TLS server
certificates. A malicious server could possibly use this issue to cause PHP
to crash, resulting in a denial of service. This issue did not affect
Ubuntu 14.04 LTS. (CVE-2026-91767)
It was discovered that PHP incorrectly validated IPv6 client addresses in
the FastCGI client access check. A remote attacker could possibly use this
issue to bypass access restrictions. This issue did not affect Ubuntu 14.04
LTS. (CVE-2026-91768)
It was discovered that PHP incorrectly performed TLS peer name
verification. A remote attacker could possibly use this issue to
impersonate a trusted server. (CVE-2026-91769)
It was discovered that PHP incorrectly handled certain stream filter
options. An attacker could possibly use this issue to obtain sensitive
information. (CVE-2026-92842)
It was discovered that PHP incorrectly handled empty Location headers when
following HTTP redirects. A malicious server could possibly use this issue
to redirect the client to an unintended location. This issue did not affect
Ubuntu 14.04 LTS. (CVE-2026-93682)
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.