Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

php-process-7.4.33-31.module_php.7.4.el9.remi RPM for x86_64

From Remi's RPM Modular for RedHat EL 9 for x86_64

Name: php-process Distribution: Unknown
Version: 7.4.33 Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine #NoAI
Release: 31.module_php.7.4.el9.remi Build date: Wed Oct 21 15:12:57 2026
Group: Development/Languages Build host: builder.remirepo.net
Size: 240204 Source RPM: php-7.4.33-31.module_php.7.4.el9.remi.src.rpm
Packager: Remi Collet
Url: http://www.php.net/
Summary: Modules for PHP script using system process interfaces
 
The php-process package contains dynamic shared objects which add
support to PHP using system interfaces for inter-process
communication.

Provides

Requires

License

PHP

Changelog

* Wed Oct 21 2026 Remi Collet <remi@remirepo.net> - 7.4.33-31
  - Mitigation fix Avoid state corruption via bailout
    CVE-2026-109618, CVE-2026-109619
* Fri Oct 16 2026 Remi Collet <remi@remirepo.net> - 7.4.33-30
  - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
    CVE-2026-93682
* Thu Oct 01 2026 Remi Collet <remi@remirepo.net> - 7.4.33-29
  - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
  - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
    CVE-2026-91768
  - Fixed Various packet overreads in mysqlnd wire protocol
    CVE-2025-1218
  - Fix TLS hostname verification falls back to CN after SAN mismatch
    CVE-2026-91769
  - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
    CVE-2026-91767
  - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
    CVE-2026-6103
  - Fix Unbounded recursion in server-side cleanup_xml_node()
    CVE-2026-91765
  - Fix Integer overflow to buffer overflow in SOAP HTTP parsing
    CVE-2025-14181
  - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
    CVE-2026-92842
  - Fix Cross-origin credential leak in HTTP stream wrapper redirects
    CVE-2026-91766
* Thu Jul 30 2026 Remi Collet <remi@remirepo.net> - 7.4.33-28
  - Fix leak on double DatePeriod::__construct() call
  - Fixed SQL injection via E'...' backslash breakout
    CVE-2026-17543
  - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
    CVE-2026-7260
* Wed Jul 01 2026 Remi Collet <remi@remirepo.net> - 7.4.33-27
  - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
    CVE-2026-14355
* Tue May 12 2026 Remi Collet <remi@remirepo.net> - 7.4.33-26
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258
* Thu Dec 18 2025 Remi Collet <remi@remirepo.net> - 7.4.33-25
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177
* Thu Jul 03 2025 Remi Collet <remi@remirepo.net> - 7.4.33-24
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
* Mon Mar 17 2025 Remi Collet <remi@remirepo.net> - 7.4.33-23
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
  - use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 7.4.33-22
  - backport fix for ICU 74+
  - backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 7.4.33-21
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 7.4.33-20
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
* Fri Nov 15 2024 Remi Collet <remi@remirepo.net> - 7.4.33-19
  - disable firebird on EL-10

Files

/etc/php-zts.d/20-posix.ini
/etc/php-zts.d/20-shmop.ini
/etc/php-zts.d/20-sysvmsg.ini
/etc/php-zts.d/20-sysvsem.ini
/etc/php-zts.d/20-sysvshm.ini
/etc/php.d/20-posix.ini
/etc/php.d/20-shmop.ini
/etc/php.d/20-sysvmsg.ini
/etc/php.d/20-sysvsem.ini
/etc/php.d/20-sysvshm.ini
/usr/lib/.build-id
/usr/lib/.build-id/1b
/usr/lib/.build-id/1b/7356ec33b45901fc78d64c837f31094c30a0fa
/usr/lib/.build-id/2a
/usr/lib/.build-id/2a/7a0d01f7544ffe8296c4d10b3b682a2ba7b068
/usr/lib/.build-id/42
/usr/lib/.build-id/42/0f47e0e7ef8523aa622d39f045d408b1069e84
/usr/lib/.build-id/58
/usr/lib/.build-id/58/8bbc20eefdb1974d712a9671b03855f9791792
/usr/lib/.build-id/67
/usr/lib/.build-id/67/8b1a8674c9888c8e5f744b69a51545ec359de5
/usr/lib/.build-id/9e
/usr/lib/.build-id/9e/c2fc29192ba5c9aef952003a2008d730108b5b
/usr/lib/.build-id/a7
/usr/lib/.build-id/a7/4dbe1e069e2aceb5475f5e07403a638a021f3d
/usr/lib/.build-id/ce/543aa0698e9a8884874e08c5bd8a4ba7ef22e6
/usr/lib/.build-id/e3
/usr/lib/.build-id/e3/266d0829e022fc3567c9f7756fe962f466c90e
/usr/lib/.build-id/fa
/usr/lib/.build-id/fa/452a97cd5b68165efd4a74a1d5d9a29c55534c
/usr/lib64/php-zts/modules/posix.so
/usr/lib64/php-zts/modules/shmop.so
/usr/lib64/php-zts/modules/sysvmsg.so
/usr/lib64/php-zts/modules/sysvsem.so
/usr/lib64/php-zts/modules/sysvshm.so
/usr/lib64/php/modules/posix.so
/usr/lib64/php/modules/shmop.so
/usr/lib64/php/modules/sysvmsg.so
/usr/lib64/php/modules/sysvsem.so
/usr/lib64/php/modules/sysvshm.so

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Oct 31 14:45:27 2026