| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: php-common | Distribution: CentOS |
| Version: 8.0.30 | Vendor: CentOS |
| Release: 6.el9 | Build date: Fri Jun 5 15:17:32 2026 |
| Group: Unspecified | Build host: aarch64-02.stream.rdu2.redhat.com |
| Size: 8481123 | Source RPM: php-8.0.30-6.el9.src.rpm |
| Packager: builder@centos.org | |
| Url: http://www.php.net/ | |
| Summary: Common files for PHP | |
The php-common package contains files used by both the php package and the php-cli package.
PHP and BSD
* Fri Jun 05 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-6
- Fix XSS within status endpoint
CVE-2026-6735
- Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
CVE-2026-7259
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
CVE-2026-7261
- Fix Broken Apache map value NULL check
CVE-2026-7262
- Fix Signed integer overflow of char array offset
CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
CVE-2026-7258
* Fri Jan 16 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-5
- Fix Null byte termination in dns_get_record()
GHSA-www2-q4fc-65wf
- Fix Heap buffer overflow in array_merge()
CVE-2025-14178
- Fix Information Leak of Memory in getimagesize
CVE-2025-14177
* Fri Oct 03 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-4
- Fix pgsql extension does not check for errors during escaping
CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
CVE-2025-6491
- Fix Null byte termination in hostnames
CVE-2025-1220
- Fix soap memory corruption
- Fix ldap_set_option() not applied on different ldap connections
* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
CVE-2025-1217
* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
CVE-2024-8927
- Fix Logs from childrens may be altered
CVE-2024-9026
- Fix Erroneous parsing of multipart form data
CVE-2024-8925
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
CVE-2024-5458
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
CVE-2024-3096
/etc/php.d /etc/php.d/20-bz2.ini /etc/php.d/20-calendar.ini /etc/php.d/20-ctype.ini /etc/php.d/20-curl.ini /etc/php.d/20-exif.ini /etc/php.d/20-fileinfo.ini /etc/php.d/20-ftp.ini /etc/php.d/20-gettext.ini /etc/php.d/20-iconv.ini /etc/php.d/20-phar.ini /etc/php.d/20-sockets.ini /etc/php.d/20-tokenizer.ini /etc/php.ini /usr/lib/.build-id /usr/lib/.build-id/0f /usr/lib/.build-id/0f/b1d2f0c30d2d3f32da484baa7be5a983dc62dd /usr/lib/.build-id/1f /usr/lib/.build-id/1f/c80b71309c38f82d1935111e2749d2aa725302 /usr/lib/.build-id/2c /usr/lib/.build-id/2c/64d4188bb3fef3e664c691be5ea3e4d8f61648 /usr/lib/.build-id/38 /usr/lib/.build-id/38/82007d6729b35432fa2b52d86bb68640234b44 /usr/lib/.build-id/42 /usr/lib/.build-id/42/a2c9e2cf091218e3a2efd0448d9148993a46c0 /usr/lib/.build-id/57 /usr/lib/.build-id/57/3f062580a08c57bb16d877847c71f83bb6a50b /usr/lib/.build-id/b6 /usr/lib/.build-id/b6/15a420097f9268499ce15288cadf3e42a4e1ab /usr/lib/.build-id/c7 /usr/lib/.build-id/c7/9812ccde887ac37053a86e67e5b46e1b1ae92f /usr/lib/.build-id/d4 /usr/lib/.build-id/d4/8a81dd73f397d5cf7e9d35ca6b5570840dad55 /usr/lib/.build-id/de /usr/lib/.build-id/de/335307d5226d26ad6b5a02d57254a5664e328b /usr/lib/.build-id/e8 /usr/lib/.build-id/e8/da10ee8bae6b4a230475685ffc2602a620f969 /usr/lib/.build-id/f6 /usr/lib/.build-id/f6/5f234d4e3cf7dcaa332acf49e52715dfa79176 /usr/lib64/php /usr/lib64/php/modules /usr/lib64/php/modules/bz2.so /usr/lib64/php/modules/calendar.so /usr/lib64/php/modules/ctype.so /usr/lib64/php/modules/curl.so /usr/lib64/php/modules/exif.so /usr/lib64/php/modules/fileinfo.so /usr/lib64/php/modules/ftp.so /usr/lib64/php/modules/gettext.so /usr/lib64/php/modules/iconv.so /usr/lib64/php/modules/phar.so /usr/lib64/php/modules/sockets.so /usr/lib64/php/modules/tokenizer.so /usr/share/doc/pecl /usr/share/doc/php-common /usr/share/doc/php-common/CODING_STANDARDS.md /usr/share/doc/php-common/CONTRIBUTING.md /usr/share/doc/php-common/EXTENSIONS /usr/share/doc/php-common/NEWS /usr/share/doc/php-common/README.REDIST.BINS /usr/share/doc/php-common/README.md /usr/share/doc/php-common/UPGRADING /usr/share/doc/php-common/UPGRADING.INTERNALS /usr/share/doc/php-common/docs /usr/share/doc/php-common/docs/input-filter.md /usr/share/doc/php-common/docs/mailinglist-rules.md /usr/share/doc/php-common/docs/output-api.md /usr/share/doc/php-common/docs/parameter-parsing-api.md /usr/share/doc/php-common/docs/release-process.md /usr/share/doc/php-common/docs/self-contained-extensions.md /usr/share/doc/php-common/docs/streams.md /usr/share/doc/php-common/docs/unix-build-system.md /usr/share/doc/php-common/php.ini-development /usr/share/doc/php-common/php.ini-production /usr/share/licenses/php-common /usr/share/licenses/php-common/LICENSE /usr/share/licenses/php-common/TSRM_LICENSE /usr/share/licenses/php-common/ZEND_LICENSE /usr/share/licenses/php-common/libmagic_LICENSE /usr/share/licenses/php-common/timelib_LICENSE /usr/share/php /usr/share/tests /usr/share/tests/pecl /var/lib/php /var/lib/php/peclxml
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Jun 11 04:42:20 2026