| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search | 
| Name: php-xml | Distribution: Unknown | 
| Version: 8.0.30 | Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine | 
| Release: 13.el9.remi | Build date: Thu Mar 13 11:10:15 2025 | 
| Group: Unspecified | Build host: builder2.remirepo.net | 
| Size: 550598 | Source RPM: php-8.0.30-13.el9.remi.src.rpm | 
| Packager: Remi Collet | |
| Url: http://www.php.net/ | |
| Summary: A module for PHP applications which use XML | |
The php-xml package contains dynamic shared objects which add support to PHP for manipulating XML documents using the DOM tree, and performing XSL transformations on XML documents.
PHP
* Thu Mar 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-13
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
  - use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-12
  - backport fix for ICU 74+
  - backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 8.0.30-11
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 8.0.30-10
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
* Thu Sep 26 2024 Remi Collet <remi@remirepo.net> - 8.0.30-9
  - Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
    CVE-2024-4577
  - Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
    CVE-2024-8926
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - use ICU 74.2
* Mon Aug 26 2024 Remi Collet <remi@remirepo.net> - 8.0.30-8
  - add backport for https://bugs.php.net/79589
    error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
* Wed Jul 31 2024 Remi Collet <remi@remirepo.net> - 8.0.30-7
  - use oracle client library version 23.5 on x86_64
* Tue Jun 04 2024 Remi Collet <remi@remirepo.net> - 8.0.30-6
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
* Wed Apr 10 2024 Remi Collet <remi@remirepo.net> - 8.0.30-5
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
* Wed Mar 06 2024 Remi Collet <remi@remirepo.net> - 8.0.30-4
  - use oracle client library version 21.13 on x86_64
  - patch test suite for zlib-ng
  - add EOL message
* Tue Dec 12 2023 Remi Collet <remi@remirepo.net> - 8.0.30-3
  - use ICU 73.2
  - use oracle client library version 21.12 on x86_64, 19.19 on aarch64
  - add fixes for libxml 2.11 and 2.12 from 8.1
* Thu Sep 21 2023 Remi Collet <remi@remirepo.net> - 8.0.30-2
  - use oracle client library version 21.11 on x86_64, 19.19 on aarch64
  - use official Oracle Instant Client RPM
* Thu Aug 03 2023 Remi Collet <remi@remirepo.net> - 8.0.30-1
  - Update to 8.0.30 - http://www.php.net/releases/8_0_30.php
  - move httpd/nginx wants directive to config files in /etc
* Thu Jun 08 2023 Remi Collet <remi@remirepo.net> - 8.0.29-1
  - Update to 8.0.29 - http://www.php.net/releases/8_0_29.php
* Thu May 11 2023 Remi Collet <remi@remirepo.net> - 8.0.28-4
  - define %__phpize and %__phpconfig
* Fri Apr 21 2023 Remi Collet <remi@remirepo.net> - 8.0.28-3
  - use ICU 72.1
  - use oracle client library version 21.10
  - fix missing TZData version in intl phpinfo
  - fix possible buffer overflow in date
/etc/php.d/20-dom.ini /etc/php.d/20-simplexml.ini /etc/php.d/20-xml.ini /etc/php.d/20-xmlwriter.ini /etc/php.d/20-xsl.ini /etc/php.d/30-xmlreader.ini /usr/lib/.build-id /usr/lib/.build-id/01/458e4528e85dc5c3b67a527a83b13b5cf72ce1 /usr/lib/.build-id/01/de0306842cbb4a3a708ba67a7a4abe8df8cdac /usr/lib/.build-id/21 /usr/lib/.build-id/21/e760531e30418330f48746a2e1356e5de29ec4 /usr/lib/.build-id/89 /usr/lib/.build-id/89/ec58e9e15f19abb4e2ee4105561bb3e3b4ed3c /usr/lib/.build-id/c7 /usr/lib/.build-id/c7/cea481da798d1f44d9ef286015381c622d9d45 /usr/lib/.build-id/df /usr/lib/.build-id/df/12fa67fcd2a12631adf5b2d3cf660853f18740 /usr/lib64/php/modules/dom.so /usr/lib64/php/modules/simplexml.so /usr/lib64/php/modules/xml.so /usr/lib64/php/modules/xmlreader.so /usr/lib64/php/modules/xmlwriter.so /usr/lib64/php/modules/xsl.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Oct 28 09:10:23 2025