Amazon Linux 2023 — php8.4 — multiple vulnerabilities (6 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1352 Related CVEs: CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1220 CVE-2025-1735 CVE-2025-6491 Upstream summary: NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7 NOTE: https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfc DEBIANBUG: [1123574] (CVE-2025-14177) NOTE: https://github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2 NOTE: Fixed by: https://github.com/php/php-src/commit/e6d7d34c1ae46281993036189e3bcb6528911ce8 (php-8.4.16) DEBIANBUG: [1123574] (CVE-2025-14178) NOTE: https://github.com/php/php-src/security/advisories/ […]