Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

php-common-8.0.30-21.module_php.8.0.el9.remi RPM for x86_64

From Remi's RPM Modular for RedHat EL 9 for x86_64

Name: php-common Distribution: Unknown
Version: 8.0.30 Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine #NoAI
Release: 21.module_php.8.0.el9.remi Build date: Wed Oct 21 12:54:38 2026
Group: Unspecified Build host: builder.remirepo.net
Size: 15872009 Source RPM: php-8.0.30-21.module_php.8.0.el9.remi.src.rpm
Packager: Remi Collet
Url: http://www.php.net/
Summary: Common files for PHP
The php-common package contains files used by both the php
package and the php-cli package.

Provides

Requires

License

PHP and BSD

Changelog

* Wed Oct 21 2026 Remi Collet <remi@remirepo.net> - 8.0.30-21
  - Mitigation fix Avoid state corruption via bailout
    CVE-2026-109618, CVE-2026-109619
* Fri Oct 16 2026 Remi Collet <remi@remirepo.net> - 8.0.30-20
  - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
    CVE-2026-93682
* Thu Oct 01 2026 Remi Collet <remi@remirepo.net> - 8.0.30-19
  - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
  - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
    CVE-2026-91768
  - Fix Various packet overreads in mysqlnd wire protocol
    CVE-2025-1218
  - Fix TLS hostname verification falls back to CN after SAN mismatch
    CVE-2026-91769
  - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
    CVE-2026-91767
  - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
    CVE-2026-6103
  - Fix Unbounded recursion in server-side cleanup_xml_node()
    CVE-2026-91765
  - Fix Integer overflow to buffer overflow in SOAP HTTP parsing
    CVE-2025-14181
  - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
    CVE-2026-92842
  - Fix Cross-origin credential leak in HTTP stream wrapper redirects
    CVE-2026-91766
* Thu Jul 30 2026 Remi Collet <remi@remirepo.net> - 8.0.30-18
  - Fix leak on double DatePeriod::__construct() call
  - Fixed SQL injection via E'...' backslash breakout
    CVE-2026-17543
  - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
    CVE-2026-7260
* Wed Jul 01 2026 Remi Collet <remi@remirepo.net> - 8.0.30-17
  - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
    CVE-2026-14355
* Mon May 11 2026 Remi Collet <remi@remirepo.net> - 8.0.30-16
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix SQL injection via NUL bytes in quoted strings
    CVE-2025-14179
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258
* Thu Dec 18 2025 Remi Collet <remi@remirepo.net> - 8.0.30-15
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177
* Thu Jul 03 2025 Remi Collet <remi@remirepo.net> - 8.0.30-14
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
* Thu Mar 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-13
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
  - use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-12
  - backport fix for ICU 74+
  - backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 8.0.30-11
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 8.0.30-10
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233

Files

/etc/php-zts.d
/etc/php-zts.d/20-bz2.ini
/etc/php-zts.d/20-calendar.ini
/etc/php-zts.d/20-ctype.ini
/etc/php-zts.d/20-curl.ini
/etc/php-zts.d/20-exif.ini
/etc/php-zts.d/20-fileinfo.ini
/etc/php-zts.d/20-ftp.ini
/etc/php-zts.d/20-gettext.ini
/etc/php-zts.d/20-iconv.ini
/etc/php-zts.d/20-phar.ini
/etc/php-zts.d/20-sockets.ini
/etc/php-zts.d/20-tokenizer.ini
/etc/php.d
/etc/php.d/20-bz2.ini
/etc/php.d/20-calendar.ini
/etc/php.d/20-ctype.ini
/etc/php.d/20-curl.ini
/etc/php.d/20-exif.ini
/etc/php.d/20-fileinfo.ini
/etc/php.d/20-ftp.ini
/etc/php.d/20-gettext.ini
/etc/php.d/20-iconv.ini
/etc/php.d/20-phar.ini
/etc/php.d/20-sockets.ini
/etc/php.d/20-tokenizer.ini
/etc/php.ini
/usr/lib/.build-id
/usr/lib/.build-id/03
/usr/lib/.build-id/03/6ea1cc7fa6c659aabc5cd18431869a5ef1d5bf
/usr/lib/.build-id/07/93558648f4a23527ebd08b85161517d33ff56f
/usr/lib/.build-id/11
/usr/lib/.build-id/11/207ad7e60ff1946c7555f262c72c70f42b040f
/usr/lib/.build-id/17
/usr/lib/.build-id/17/5d6c5fdad6091c7bd21f4418bb47dbfc9d280f
/usr/lib/.build-id/23
/usr/lib/.build-id/23/0bc623711fb55c4f5b7608936fcdf729b60c82
/usr/lib/.build-id/28
/usr/lib/.build-id/28/1e90257be55c5e8b72a3e78581795fc491aa3d
/usr/lib/.build-id/39
/usr/lib/.build-id/39/b68d8740b30fa4a7d86204d717a8c44cf2a364
/usr/lib/.build-id/3c
/usr/lib/.build-id/3c/3a30af2141a0744f5a5bde0793b189ef0d22af
/usr/lib/.build-id/42
/usr/lib/.build-id/42/a137ae76f995bba5346265d065d9f5017e1732
/usr/lib/.build-id/4f
/usr/lib/.build-id/4f/9c90dee97ed614ec7608ebf69b5fd6f99997db
/usr/lib/.build-id/52
/usr/lib/.build-id/52/7282a6063448cc86beec43f312ca169a4b98db
/usr/lib/.build-id/54
/usr/lib/.build-id/54/7f396b3d95f3871c3de6a40c392eb0d4a96e1e
/usr/lib/.build-id/69
/usr/lib/.build-id/69/2b9ddb7d02dabaffb1c9b9877e64a2c047268c
/usr/lib/.build-id/6b
/usr/lib/.build-id/6b/c8b9c93c029d4e9978d6e0b7e747d882759a83
/usr/lib/.build-id/72
/usr/lib/.build-id/72/09d35db84a50fc74dcf0044105413806d385e7
/usr/lib/.build-id/75
/usr/lib/.build-id/75/9e08945c02043f3c7957d5a34d655f1db51b88
/usr/lib/.build-id/80
/usr/lib/.build-id/80/6b040f7da03f7f43ef61dfe01f5b979a3b52cf
/usr/lib/.build-id/92
/usr/lib/.build-id/92/f158959cbae8987fad1da31d6a4a1c3ed065c1
/usr/lib/.build-id/a1
/usr/lib/.build-id/a1/59c87669a014b0a0ebec0fda4f3559dd3bde36
/usr/lib/.build-id/aa
/usr/lib/.build-id/aa/34f68b052fe19b1faaef8bb8eb284b8496ad8e
/usr/lib/.build-id/b1
/usr/lib/.build-id/b1/d54508bf625ba1349ad3cfdc205c7146dcb96d
/usr/lib/.build-id/dd
/usr/lib/.build-id/dd/e8d611f2fb4278e76b650661477017b6fc95b9
/usr/lib/.build-id/e3
/usr/lib/.build-id/e3/7ed3722689f3f840672d0972d596c179453564
/usr/lib/.build-id/fe
/usr/lib/.build-id/fe/284f636a1510249a02772a571639391bbb317e
/usr/lib64/php
/usr/lib64/php-zts
/usr/lib64/php-zts/modules
/usr/lib64/php-zts/modules/bz2.so
/usr/lib64/php-zts/modules/calendar.so
/usr/lib64/php-zts/modules/ctype.so
/usr/lib64/php-zts/modules/curl.so
/usr/lib64/php-zts/modules/exif.so
/usr/lib64/php-zts/modules/fileinfo.so
/usr/lib64/php-zts/modules/ftp.so
/usr/lib64/php-zts/modules/gettext.so
/usr/lib64/php-zts/modules/iconv.so
/usr/lib64/php-zts/modules/phar.so
/usr/lib64/php-zts/modules/sockets.so
/usr/lib64/php-zts/modules/tokenizer.so
/usr/lib64/php/modules
/usr/lib64/php/modules/bz2.so
/usr/lib64/php/modules/calendar.so
/usr/lib64/php/modules/ctype.so
/usr/lib64/php/modules/curl.so
/usr/lib64/php/modules/exif.so
/usr/lib64/php/modules/fileinfo.so
/usr/lib64/php/modules/ftp.so
/usr/lib64/php/modules/gettext.so
/usr/lib64/php/modules/iconv.so
/usr/lib64/php/modules/phar.so
/usr/lib64/php/modules/sockets.so
/usr/lib64/php/modules/tokenizer.so
/usr/share/doc/pecl
/usr/share/doc/php-common
/usr/share/doc/php-common/CODING_STANDARDS.md
/usr/share/doc/php-common/CONTRIBUTING.md
/usr/share/doc/php-common/EXTENSIONS
/usr/share/doc/php-common/NEWS
/usr/share/doc/php-common/README.REDIST.BINS
/usr/share/doc/php-common/README.md
/usr/share/doc/php-common/UPGRADING
/usr/share/doc/php-common/UPGRADING.INTERNALS
/usr/share/doc/php-common/docs
/usr/share/doc/php-common/docs/input-filter.md
/usr/share/doc/php-common/docs/mailinglist-rules.md
/usr/share/doc/php-common/docs/output-api.md
/usr/share/doc/php-common/docs/parameter-parsing-api.md
/usr/share/doc/php-common/docs/release-process.md
/usr/share/doc/php-common/docs/self-contained-extensions.md
/usr/share/doc/php-common/docs/streams.md
/usr/share/doc/php-common/docs/unix-build-system.md
/usr/share/doc/php-common/php.ini-development
/usr/share/doc/php-common/php.ini-production
/usr/share/licenses/php-common
/usr/share/licenses/php-common/LICENSE
/usr/share/licenses/php-common/TSRM_LICENSE
/usr/share/licenses/php-common/ZEND_LICENSE
/usr/share/licenses/php-common/libmagic_LICENSE
/usr/share/licenses/php-common/timelib_LICENSE
/usr/share/php
/usr/share/tests
/usr/share/tests/pecl
/var/lib/php
/var/lib/php/peclxml


Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Oct 28 14:52:46 2026