| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: php-process | Distribution: AlmaLinux |
| Version: 8.0.30 | Vendor: AlmaLinux |
| Release: 5.el9_7 | Build date: Tue Feb 17 15:57:04 2026 |
| Group: Unspecified | Build host: arm-builder03-almalinux-org.novalocal |
| Size: 343980 | Source RPM: php-8.0.30-5.el9_7.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: http://www.php.net/ | |
| Summary: Modules for PHP script using system process interfaces | |
The php-process package contains dynamic shared objects which add support to PHP using system interfaces for inter-process communication.
PHP
* Fri Jan 16 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-5
- Fix Null byte termination in dns_get_record()
GHSA-www2-q4fc-65wf
- Fix Heap buffer overflow in array_merge()
CVE-2025-14178
- Fix Information Leak of Memory in getimagesize
CVE-2025-14177
* Fri Oct 03 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-4
- Fix pgsql extension does not check for errors during escaping
CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
CVE-2025-6491
- Fix Null byte termination in hostnames
CVE-2025-1220
- Fix soap memory corruption
- Fix ldap_set_option() not applied on different ldap connections
* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
CVE-2025-1217
* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
CVE-2024-8927
- Fix Logs from childrens may be altered
CVE-2024-9026
- Fix Erroneous parsing of multipart form data
CVE-2024-8925
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
CVE-2024-5458
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
CVE-2024-3096
/etc/php.d/20-posix.ini /etc/php.d/20-shmop.ini /etc/php.d/20-sysvmsg.ini /etc/php.d/20-sysvsem.ini /etc/php.d/20-sysvshm.ini /usr/lib/.build-id /usr/lib/.build-id/16/155b9ba02980ffb94fdecf5fa85ab20338fb19 /usr/lib/.build-id/2a /usr/lib/.build-id/2a/4bb1ed1e14ca5fb2f5edca49357e11379137d6 /usr/lib/.build-id/85 /usr/lib/.build-id/85/8463e967f88fe84b87e52b1beec4e4977d0946 /usr/lib/.build-id/a4 /usr/lib/.build-id/a4/a7fa60d39cfb200131682aa65bb2c3e0d0c2e2 /usr/lib/.build-id/d6 /usr/lib/.build-id/d6/f5e0fb20ac59ac312edd2abe30386b20a7b3e2 /usr/lib64/php/modules/posix.so /usr/lib64/php/modules/shmop.so /usr/lib64/php/modules/sysvmsg.so /usr/lib64/php/modules/sysvsem.so /usr/lib64/php/modules/sysvshm.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Feb 20 04:36:03 2026