| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: php-common | Distribution: Unknown |
| Version: 7.4.33 | Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine |
| Release: 24.el9.remi | Build date: Thu Jul 3 15:36:46 2025 |
| Group: Development/Languages | Build host: builder.remirepo.net |
| Size: 13798099 | Source RPM: php-7.4.33-24.el9.remi.src.rpm |
| Packager: Remi Collet | |
| Url: http://www.php.net/ | |
| Summary: Common files for PHP | |
The php-common package contains files used by both the php package and the php-cli package.
PHP and BSD
* Thu Jul 03 2025 Remi Collet <remi@remirepo.net> - 7.4.33-24
- Fix pgsql extension does not check for errors during escaping
CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
CVE-2025-6491
- Fix Null byte termination in hostnames
CVE-2025-1220
* Mon Mar 17 2025 Remi Collet <remi@remirepo.net> - 7.4.33-23
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
CVE-2025-1217
- use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 7.4.33-22
- backport fix for ICU 74+
- backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 7.4.33-21
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 7.4.33-20
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
* Fri Nov 15 2024 Remi Collet <remi@remirepo.net> - 7.4.33-19
- disable firebird on EL-10
* Thu Sep 26 2024 Remi Collet <remi@remirepo.net> - 7.4.33-18
- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
CVE-2024-8927
- Fix Logs from childrens may be altered
CVE-2024-9026
- Fix Erroneous parsing of multipart form data
CVE-2024-8925
- use ICU 74.2
* Mon Aug 26 2024 Remi Collet <remi@remirepo.net> - 7.4.33-17
- add backport for https://bugs.php.net/79589
error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
* Wed Jul 31 2024 Remi Collet <remi@remirepo.net> - 7.4.33-16
- use oracle client library version 23.5 on x86_64
* Tue Jun 04 2024 Remi Collet <remi@remirepo.net> - 7.4.33-15
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
CVE-2024-5458
* Wed Apr 10 2024 Remi Collet <remi@remirepo.net> - 7.4.33-14
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
CVE-2024-3096
* Wed Mar 06 2024 Remi Collet <remi@remirepo.net> - 7.4.33-13
- patch test suite for zlib-ng
* Mon Feb 19 2024 Remi Collet <remi@remirepo.net> - 7.4.33-12
- more build patch for GCC 14
* Wed Feb 14 2024 Remi Collet <remi@remirepo.net> - 7.4.33-11
- add build patch for GCC 14
- use oracle client library version 21.13 on x86_64
* Tue Dec 12 2023 Remi Collet <remi@remirepo.net> - 7.4.33-10
- use ICU 73.2
- use oracle client library version 21.12 on x86_64, 19.19 on aarch64
- add fixes for libxml 2.11 and 2.12 from 8.1
* Thu Sep 21 2023 Remi Collet <remi@remirepo.net> - 7.4.33-9
- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM
* Tue Aug 01 2023 Remi Collet <remi@remirepo.net> - 7.4.33-8
- Fix Security issue with external entity loading in XML without enabling it
GHSA-3qrf-m4j2-pcrr CVE-2023-3823
- Fix Buffer mismanagement in phar_dir_read()
GHSA-jqcx-ccgc-xwhv CVE-2023-3824
- move httpd/nginx wants directive to config files in /etc
/etc/php-zts.d /etc/php-zts.d/20-bz2.ini /etc/php-zts.d/20-calendar.ini /etc/php-zts.d/20-ctype.ini /etc/php-zts.d/20-curl.ini /etc/php-zts.d/20-exif.ini /etc/php-zts.d/20-fileinfo.ini /etc/php-zts.d/20-ftp.ini /etc/php-zts.d/20-gettext.ini /etc/php-zts.d/20-iconv.ini /etc/php-zts.d/20-phar.ini /etc/php-zts.d/20-sockets.ini /etc/php-zts.d/20-tokenizer.ini /etc/php.d /etc/php.d/20-bz2.ini /etc/php.d/20-calendar.ini /etc/php.d/20-ctype.ini /etc/php.d/20-curl.ini /etc/php.d/20-exif.ini /etc/php.d/20-fileinfo.ini /etc/php.d/20-ftp.ini /etc/php.d/20-gettext.ini /etc/php.d/20-iconv.ini /etc/php.d/20-phar.ini /etc/php.d/20-sockets.ini /etc/php.d/20-tokenizer.ini /etc/php.ini /usr/lib/.build-id /usr/lib/.build-id/05 /usr/lib/.build-id/05/08ced915d70e7bbe3730e4d5998323ece5de84 /usr/lib/.build-id/0e /usr/lib/.build-id/0e/82c0448b8f7bee659cac4323b4892023bc06f9 /usr/lib/.build-id/0f /usr/lib/.build-id/0f/cc2655b612f0c28a788c405ca6f8734eeabca7 /usr/lib/.build-id/15 /usr/lib/.build-id/15/575ca0b790335dfcfab57e945a92ce7267f21e /usr/lib/.build-id/18 /usr/lib/.build-id/18/80189456f4f97f3f1f8772b344b83858e69fe6 /usr/lib/.build-id/3b /usr/lib/.build-id/3b/81b45b5d7560b1d78756f9e090be832944808b /usr/lib/.build-id/3e /usr/lib/.build-id/3e/5ec42cf7a4f9ee66a37ec3d5b53d4b488ee263 /usr/lib/.build-id/42 /usr/lib/.build-id/42/b35cf1ac780b1e074e5bd3ef37a93f90628e88 /usr/lib/.build-id/4c /usr/lib/.build-id/4c/052eb405207bbb12fdbb160f72f85e331c9cc9 /usr/lib/.build-id/4c/1de01dcb1d641a41676e41b7cfdc4119fa2300 /usr/lib/.build-id/5a /usr/lib/.build-id/5a/2530893a907da3fcd6ec2e409ed681be63bb1e /usr/lib/.build-id/7c /usr/lib/.build-id/7c/e51e43773af4fec03b7650c5a3c71b5d4b659d /usr/lib/.build-id/86 /usr/lib/.build-id/86/9068e6483782cd45394e3dee158c86a1a50df9 /usr/lib/.build-id/8a /usr/lib/.build-id/8a/117b7a79f39b70b2e56b6e96f5f74a6f6d730b /usr/lib/.build-id/95 /usr/lib/.build-id/95/fcaf604bf26a3367919404f0f4f59aab8e4577 /usr/lib/.build-id/9e /usr/lib/.build-id/9e/6ce25aaf5cab4c883f0a3e447a40c44db09c5c /usr/lib/.build-id/a0 /usr/lib/.build-id/a0/917231b3ed3ec56b0edebae768cd4387b0de74 /usr/lib/.build-id/a1 /usr/lib/.build-id/a1/5243ea275bac8e6db435b3837a076d5c4c504b /usr/lib/.build-id/a8 /usr/lib/.build-id/a8/bbe14c1e509b283973622749e9efe595d9b8f6 /usr/lib/.build-id/b7 /usr/lib/.build-id/b7/d434ba10648634c3dc4982b1b87c5c94a8a2a9 /usr/lib/.build-id/bc /usr/lib/.build-id/bc/2d01d034c133ec02f9ad743b4cc981752ae20d /usr/lib/.build-id/c5 /usr/lib/.build-id/c5/35ed8d88e4816e773e5bfd85c754f47ebe2da9 /usr/lib/.build-id/e0 /usr/lib/.build-id/e0/fdda584d4807f9183900db471775054da42835 /usr/lib/.build-id/e7 /usr/lib/.build-id/e7/1c20faf4f71cad3797a262a04021ad6ace3731 /usr/lib64/php /usr/lib64/php-zts /usr/lib64/php-zts/modules /usr/lib64/php-zts/modules/bz2.so /usr/lib64/php-zts/modules/calendar.so /usr/lib64/php-zts/modules/ctype.so /usr/lib64/php-zts/modules/curl.so /usr/lib64/php-zts/modules/exif.so /usr/lib64/php-zts/modules/fileinfo.so /usr/lib64/php-zts/modules/ftp.so /usr/lib64/php-zts/modules/gettext.so /usr/lib64/php-zts/modules/iconv.so /usr/lib64/php-zts/modules/phar.so /usr/lib64/php-zts/modules/sockets.so /usr/lib64/php-zts/modules/tokenizer.so /usr/lib64/php/modules /usr/lib64/php/modules/bz2.so /usr/lib64/php/modules/calendar.so /usr/lib64/php/modules/ctype.so /usr/lib64/php/modules/curl.so /usr/lib64/php/modules/exif.so /usr/lib64/php/modules/fileinfo.so /usr/lib64/php/modules/ftp.so /usr/lib64/php/modules/gettext.so /usr/lib64/php/modules/iconv.so /usr/lib64/php/modules/phar.so /usr/lib64/php/modules/sockets.so /usr/lib64/php/modules/tokenizer.so /usr/share/doc/pecl /usr/share/doc/php-common /usr/share/doc/php-common/CODING_STANDARDS.md /usr/share/doc/php-common/CONTRIBUTING.md /usr/share/doc/php-common/EXTENSIONS /usr/share/doc/php-common/NEWS /usr/share/doc/php-common/README.REDIST.BINS /usr/share/doc/php-common/README.md /usr/share/doc/php-common/UPGRADING /usr/share/doc/php-common/UPGRADING.INTERNALS /usr/share/doc/php-common/docs /usr/share/doc/php-common/docs/input-filter.md /usr/share/doc/php-common/docs/mailinglist-rules.md /usr/share/doc/php-common/docs/output-api.md /usr/share/doc/php-common/docs/parameter-parsing-api.md /usr/share/doc/php-common/docs/release-process.md /usr/share/doc/php-common/docs/self-contained-extensions.md /usr/share/doc/php-common/docs/streams.md /usr/share/doc/php-common/docs/unix-build-system.md /usr/share/doc/php-common/php.ini-development /usr/share/doc/php-common/php.ini-production /usr/share/licenses/php-common /usr/share/licenses/php-common/LICENSE /usr/share/licenses/php-common/TSRM_LICENSE /usr/share/licenses/php-common/ZEND_LICENSE /usr/share/licenses/php-common/libmagic_LICENSE /usr/share/licenses/php-common/timelib_LICENSE /usr/share/php /usr/share/tests /usr/share/tests/pecl /var/lib/php /var/lib/php/peclxml
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Oct 25 08:49:49 2025