| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: php-common | Distribution: Unknown |
| Version: 8.0.30 | Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine #NoAI |
| Release: 19.module_php.8.0.el9.remi | Build date: Fri Oct 2 10:53:52 2026 |
| Group: Unspecified | Build host: builder.remirepo.net |
| Size: 15872003 | Source RPM: php-8.0.30-19.module_php.8.0.el9.remi.src.rpm |
| Packager: Remi Collet | |
| Url: http://www.php.net/ | |
| Summary: Common files for PHP | |
The php-common package contains files used by both the php package and the php-cli package.
PHP and BSD
* Thu Oct 01 2026 Remi Collet <remi@remirepo.net> - 8.0.30-19
- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
CVE-2026-93682
* Thu Jul 30 2026 Remi Collet <remi@remirepo.net> - 8.0.30-18
- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
CVE-2026-7260
* Wed Jul 01 2026 Remi Collet <remi@remirepo.net> - 8.0.30-17
- Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
CVE-2026-14355
* Mon May 11 2026 Remi Collet <remi@remirepo.net> - 8.0.30-16
- Fix XSS within status endpoint
CVE-2026-6735
- Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
CVE-2026-7259
- Fix SQL injection via NUL bytes in quoted strings
CVE-2025-14179
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
CVE-2026-7261
- Fix Broken Apache map value NULL check
CVE-2026-7262
- Fix Signed integer overflow of char array offset
CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
CVE-2026-7258
* Thu Dec 18 2025 Remi Collet <remi@remirepo.net> - 8.0.30-15
- Fix Null byte termination in dns_get_record()
GHSA-www2-q4fc-65wf
- Fix Heap buffer overflow in array_merge()
CVE-2025-14178
- Fix Information Leak of Memory in getimagesize
CVE-2025-14177
* Thu Jul 03 2025 Remi Collet <remi@remirepo.net> - 8.0.30-14
- Fix pgsql extension does not check for errors during escaping
CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
CVE-2025-6491
- Fix Null byte termination in hostnames
CVE-2025-1220
* Thu Mar 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-13
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
CVE-2025-1217
- use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-12
- backport fix for ICU 74+
- backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 8.0.30-11
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 8.0.30-10
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
/etc/php-zts.d /etc/php-zts.d/20-bz2.ini /etc/php-zts.d/20-calendar.ini /etc/php-zts.d/20-ctype.ini /etc/php-zts.d/20-curl.ini /etc/php-zts.d/20-exif.ini /etc/php-zts.d/20-fileinfo.ini /etc/php-zts.d/20-ftp.ini /etc/php-zts.d/20-gettext.ini /etc/php-zts.d/20-iconv.ini /etc/php-zts.d/20-phar.ini /etc/php-zts.d/20-sockets.ini /etc/php-zts.d/20-tokenizer.ini /etc/php.d /etc/php.d/20-bz2.ini /etc/php.d/20-calendar.ini /etc/php.d/20-ctype.ini /etc/php.d/20-curl.ini /etc/php.d/20-exif.ini /etc/php.d/20-fileinfo.ini /etc/php.d/20-ftp.ini /etc/php.d/20-gettext.ini /etc/php.d/20-iconv.ini /etc/php.d/20-phar.ini /etc/php.d/20-sockets.ini /etc/php.d/20-tokenizer.ini /etc/php.ini /usr/lib/.build-id /usr/lib/.build-id/23 /usr/lib/.build-id/23/16f67ce8ed8df9fb5dd380ed5d7b7dcb4ae8b3 /usr/lib/.build-id/26 /usr/lib/.build-id/26/e0ea5dd44ebe8afe54753176c0d4fd736b4da0 /usr/lib/.build-id/27 /usr/lib/.build-id/27/a8f08175a122e6d3e11c7eea69a2b1adb96c2b /usr/lib/.build-id/41 /usr/lib/.build-id/41/9f5f5f86caacfbc8c7ff557d3bcfd6995c45e0 /usr/lib/.build-id/4d /usr/lib/.build-id/4d/d8b9910ed375d0d8eaa78e974f075ab72ed88c /usr/lib/.build-id/59 /usr/lib/.build-id/59/23129b6129ea89f4f70cde41b790bf45b84a42 /usr/lib/.build-id/61 /usr/lib/.build-id/61/f8e10a1270198f069fd8bde01c7bb32aa4ed33 /usr/lib/.build-id/67 /usr/lib/.build-id/67/2f189e3511dfb57b9cd4dc7a02e222da564520 /usr/lib/.build-id/6d /usr/lib/.build-id/6d/143f762ef6ba7886d3c652fa31e1a03528c95b /usr/lib/.build-id/85 /usr/lib/.build-id/85/91e5845ebef3f7968dc273604e36480e858396 /usr/lib/.build-id/88 /usr/lib/.build-id/88/9b85a9fd0e1256230088ea0fd554fd8379d41a /usr/lib/.build-id/8a /usr/lib/.build-id/8a/01fbdc7e94447aa232429b8fb8acb9d3f4d1b4 /usr/lib/.build-id/91 /usr/lib/.build-id/91/ee266844dee3331b2ba85c7141368fb1edfec8 /usr/lib/.build-id/93 /usr/lib/.build-id/93/58e45997ff71096b45d844d4cf3bdd28007dd0 /usr/lib/.build-id/b8 /usr/lib/.build-id/b8/da6962ebb78d20422bf0aa64c7751c9ef6e5bc /usr/lib/.build-id/bd /usr/lib/.build-id/bd/f42f60112b19f2931fffe7fe42ff207046d06c /usr/lib/.build-id/c2 /usr/lib/.build-id/c2/e9d43c5f2d470ba77d61f307ac6559fdfe7190 /usr/lib/.build-id/cd/8e806f9f7ade0890b1f40449612560cb4496f4 /usr/lib/.build-id/dc /usr/lib/.build-id/dc/2cdfd94b767818cee04efa1eae93e7a328d8a2 /usr/lib/.build-id/e2 /usr/lib/.build-id/e2/7e9106ece78aa005d167f80e92673b30c7ac6a /usr/lib/.build-id/e5 /usr/lib/.build-id/e5/569eca97b3037ece81e61c52be7c7fbe76e3d8 /usr/lib/.build-id/e5/e1e330f3920738776cbeafc4c03c6713844861 /usr/lib/.build-id/f3 /usr/lib/.build-id/f3/e29eadf59c6fc777eb4a4d1f71ef7d00b206df /usr/lib/.build-id/ff /usr/lib/.build-id/ff/a7506dc414bfe02f78d0c036de9d34443bc3ed /usr/lib64/php /usr/lib64/php-zts /usr/lib64/php-zts/modules /usr/lib64/php-zts/modules/bz2.so /usr/lib64/php-zts/modules/calendar.so /usr/lib64/php-zts/modules/ctype.so /usr/lib64/php-zts/modules/curl.so /usr/lib64/php-zts/modules/exif.so /usr/lib64/php-zts/modules/fileinfo.so /usr/lib64/php-zts/modules/ftp.so /usr/lib64/php-zts/modules/gettext.so /usr/lib64/php-zts/modules/iconv.so /usr/lib64/php-zts/modules/phar.so /usr/lib64/php-zts/modules/sockets.so /usr/lib64/php-zts/modules/tokenizer.so /usr/lib64/php/modules /usr/lib64/php/modules/bz2.so /usr/lib64/php/modules/calendar.so /usr/lib64/php/modules/ctype.so /usr/lib64/php/modules/curl.so /usr/lib64/php/modules/exif.so /usr/lib64/php/modules/fileinfo.so /usr/lib64/php/modules/ftp.so /usr/lib64/php/modules/gettext.so /usr/lib64/php/modules/iconv.so /usr/lib64/php/modules/phar.so /usr/lib64/php/modules/sockets.so /usr/lib64/php/modules/tokenizer.so /usr/share/doc/pecl /usr/share/doc/php-common /usr/share/doc/php-common/CODING_STANDARDS.md /usr/share/doc/php-common/CONTRIBUTING.md /usr/share/doc/php-common/EXTENSIONS /usr/share/doc/php-common/NEWS /usr/share/doc/php-common/README.REDIST.BINS /usr/share/doc/php-common/README.md /usr/share/doc/php-common/UPGRADING /usr/share/doc/php-common/UPGRADING.INTERNALS /usr/share/doc/php-common/docs /usr/share/doc/php-common/docs/input-filter.md /usr/share/doc/php-common/docs/mailinglist-rules.md /usr/share/doc/php-common/docs/output-api.md /usr/share/doc/php-common/docs/parameter-parsing-api.md /usr/share/doc/php-common/docs/release-process.md /usr/share/doc/php-common/docs/self-contained-extensions.md /usr/share/doc/php-common/docs/streams.md /usr/share/doc/php-common/docs/unix-build-system.md /usr/share/doc/php-common/php.ini-development /usr/share/doc/php-common/php.ini-production /usr/share/licenses/php-common /usr/share/licenses/php-common/LICENSE /usr/share/licenses/php-common/TSRM_LICENSE /usr/share/licenses/php-common/ZEND_LICENSE /usr/share/licenses/php-common/libmagic_LICENSE /usr/share/licenses/php-common/timelib_LICENSE /usr/share/php /usr/share/tests /usr/share/tests/pecl /var/lib/php /var/lib/php/peclxml
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Oct 2 14:45:11 2026