[El-errata] ELSA-2025-7418 Important: Oracle Linux 9 php:8.3 security update

Tue May 27 17:26:25 UTC 2025

Oracle Linux Security Advisory ELSA-2025-7418

http://linux.oracle.com/errata/ELSA-2025-7418.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
apcu-panel-5.1.23-1.module+el9.6.0+90525+5083e899.noarch.rpm
php-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-bcmath-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-cli-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-common-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-dba-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-dbg-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-devel-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-embedded-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-enchant-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-ffi-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-fpm-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-gd-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-gmp-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-intl-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-ldap-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-mbstring-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-mysqlnd-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-odbc-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-opcache-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-pdo-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-pecl-apcu-5.1.23-1.module+el9.6.0+90525+5083e899.x86_64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el9.6.0+90525+5083e899.x86_64.rpm
php-pecl-redis6-6.1.0-2.module+el9.6.0+90525+5083e899.x86_64.rpm
php-pecl-rrd-2.0.3-4.module+el9.6.0+90525+5083e899.x86_64.rpm
php-pecl-xdebug3-3.3.1-1.module+el9.6.0+90525+5083e899.x86_64.rpm
php-pecl-zip-1.22.3-1.module+el9.6.0+90525+5083e899.x86_64.rpm
php-pgsql-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-process-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-snmp-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-soap-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm
php-xml-8.3.19-1.module+el9.6.0+90584+da8065b7.x86_64.rpm

aarch64:
apcu-panel-5.1.23-1.module+el9.6.0+90525+5083e899.noarch.rpm
php-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-bcmath-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-cli-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-common-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-dba-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-dbg-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-devel-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-embedded-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-enchant-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-ffi-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-fpm-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-gd-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-gmp-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-intl-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-ldap-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-mbstring-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-mysqlnd-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-odbc-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-opcache-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-pdo-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-pecl-apcu-5.1.23-1.module+el9.6.0+90525+5083e899.aarch64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el9.6.0+90525+5083e899.aarch64.rpm
php-pecl-redis6-6.1.0-2.module+el9.6.0+90525+5083e899.aarch64.rpm
php-pecl-rrd-2.0.3-4.module+el9.6.0+90525+5083e899.aarch64.rpm
php-pecl-xdebug3-3.3.1-1.module+el9.6.0+90525+5083e899.aarch64.rpm
php-pecl-zip-1.22.3-1.module+el9.6.0+90525+5083e899.aarch64.rpm
php-pgsql-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-process-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-snmp-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-soap-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm
php-xml-8.3.19-1.module+el9.6.0+90584+da8065b7.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//php-8.3.19-1.module+el9.6.0+90584+da8065b7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//php-pecl-apcu-5.1.23-1.module+el9.6.0+90525+5083e899.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//php-pecl-redis6-6.1.0-2.module+el9.6.0+90525+5083e899.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//php-pecl-rrd-2.0.3-4.module+el9.6.0+90525+5083e899.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//php-pecl-xdebug3-3.3.1-1.module+el9.6.0+90525+5083e899.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates//php-pecl-zip-1.22.3-1.module+el9.6.0+90525+5083e899.src.rpm

Related CVEs:

CVE-2024-11235
CVE-2025-1217
CVE-2025-1219
CVE-2025-1734
CVE-2025-1736
CVE-2025-1861

Description of changes:

php
[8.3.19-1]
- rebase to 8.3.19

[8.3.15-1]
- rebase to 8.3.15

[8.3.12-1]
- rebase to 8.3.12 RHEL-62189
- enable command history in phpdbg
- backport Argon2 password hashing in OpenSSL ext
- build sockets extension statically
- switch to nikic/php-parser version 5
- openssl: always warn about missing curve_name

[8.2.13-1]
- rebase to 8.2.13 RHEL-14699
- add %__phpize and %__phpconfig macros
- move httpd/nginx wants directives to config files in /etc
- php-fpm.conf: move include directive after [global] section
  following upstream example, allowing overriding
- use SPDX license IDs

php-pecl-apcu
php-pecl-redis6
[6.1.0-2]
- ignore 1 ONLINE test

[6.1.0-1]
- RHEL build

[6.1.0-1]
- update to 6.1.0
- drop patch merged upstream

[6.1.0~RC2-1]
- update to 6.1.0RC2
- fix test suite with redis 6.2 using patch from
  https://github.com/phpredis/phpredis/pull/2555

[6.0.2-3]
- cleanup and modernize spec file

[6.0.2-2]
- use valkey on Fedora 41
- add upstream patch for PHP 8.4

[6.0.2-1]
- update to 6.0.2

[6.0.1-1]
- update to 6.0.1

[6.0.0-1]
- cleanup SCL stuff for Fedora review

[6.0.0-1]
php-pecl-rrd
php-pecl-xdebug3
[3.3.1-1]
- update to 3.3.1 for PHP 8.3

php-pecl-zip