| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: php-xml | Distribution: Unknown |
| Version: 8.0.30 | Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine |
| Release: 13.el9.remi | Build date: Thu Mar 13 10:56:59 2025 |
| Group: Unspecified | Build host: builder.remirepo.net |
| Size: 864732 | Source RPM: php-8.0.30-13.el9.remi.src.rpm |
| Packager: Remi Collet | |
| Url: http://www.php.net/ | |
| Summary: A module for PHP applications which use XML | |
The php-xml package contains dynamic shared objects which add support to PHP for manipulating XML documents using the DOM tree, and performing XSL transformations on XML documents.
PHP
* Thu Mar 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-13
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
CVE-2025-1217
- use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 8.0.30-12
- backport fix for ICU 74+
- backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 8.0.30-11
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 8.0.30-10
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
* Thu Sep 26 2024 Remi Collet <remi@remirepo.net> - 8.0.30-9
- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
CVE-2024-8927
- Fix Logs from childrens may be altered
CVE-2024-9026
- Fix Erroneous parsing of multipart form data
CVE-2024-8925
- use ICU 74.2
* Mon Aug 26 2024 Remi Collet <remi@remirepo.net> - 8.0.30-8
- add backport for https://bugs.php.net/79589
error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
* Wed Jul 31 2024 Remi Collet <remi@remirepo.net> - 8.0.30-7
- use oracle client library version 23.5 on x86_64
* Tue Jun 04 2024 Remi Collet <remi@remirepo.net> - 8.0.30-6
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
CVE-2024-5458
* Wed Apr 10 2024 Remi Collet <remi@remirepo.net> - 8.0.30-5
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
CVE-2024-3096
* Wed Mar 06 2024 Remi Collet <remi@remirepo.net> - 8.0.30-4
- use oracle client library version 21.13 on x86_64
- patch test suite for zlib-ng
- add EOL message
* Tue Dec 12 2023 Remi Collet <remi@remirepo.net> - 8.0.30-3
- use ICU 73.2
- use oracle client library version 21.12 on x86_64, 19.19 on aarch64
- add fixes for libxml 2.11 and 2.12 from 8.1
* Thu Sep 21 2023 Remi Collet <remi@remirepo.net> - 8.0.30-2
- use oracle client library version 21.11 on x86_64, 19.19 on aarch64
- use official Oracle Instant Client RPM
* Thu Aug 03 2023 Remi Collet <remi@remirepo.net> - 8.0.30-1
- Update to 8.0.30 - http://www.php.net/releases/8_0_30.php
- move httpd/nginx wants directive to config files in /etc
* Thu Jun 08 2023 Remi Collet <remi@remirepo.net> - 8.0.29-1
- Update to 8.0.29 - http://www.php.net/releases/8_0_29.php
* Thu May 11 2023 Remi Collet <remi@remirepo.net> - 8.0.28-4
- define %__phpize and %__phpconfig
* Fri Apr 21 2023 Remi Collet <remi@remirepo.net> - 8.0.28-3
- use ICU 72.1
- use oracle client library version 21.10
- fix missing TZData version in intl phpinfo
- fix possible buffer overflow in date
/etc/php-zts.d/20-dom.ini /etc/php-zts.d/20-simplexml.ini /etc/php-zts.d/20-xml.ini /etc/php-zts.d/20-xmlwriter.ini /etc/php-zts.d/20-xsl.ini /etc/php-zts.d/30-xmlreader.ini /etc/php.d/20-dom.ini /etc/php.d/20-simplexml.ini /etc/php.d/20-xml.ini /etc/php.d/20-xmlwriter.ini /etc/php.d/20-xsl.ini /etc/php.d/30-xmlreader.ini /usr/lib/.build-id /usr/lib/.build-id/12 /usr/lib/.build-id/12/de32b2e5f9a67f46fedeb51ed76b9d80b3163e /usr/lib/.build-id/15 /usr/lib/.build-id/15/3cc4239415e766aa76e85d9cb1cce6981d9f2f /usr/lib/.build-id/18 /usr/lib/.build-id/18/efb746f2a430c164f51d8937594665a7e3a104 /usr/lib/.build-id/38 /usr/lib/.build-id/38/04d273945acccb0014e88ccc4fc5728d5be469 /usr/lib/.build-id/3b /usr/lib/.build-id/3b/52b6390d9e217a8b67db95e226c6b0a97b3a8c /usr/lib/.build-id/43 /usr/lib/.build-id/43/a98039f6fab02b1ab6b3624a56081e131c9ead /usr/lib/.build-id/4b /usr/lib/.build-id/4b/4aedd9db813d41bc8505a03f1cd6e3efce8794 /usr/lib/.build-id/69 /usr/lib/.build-id/69/860e4b33927a4721ff336374410bd605aa023b /usr/lib/.build-id/6b /usr/lib/.build-id/6b/faed54c2db5dee40ed0acfacdcbca214c6318b /usr/lib/.build-id/82/e633af89dd023ec3e267dc2b2f6571de916e3c /usr/lib/.build-id/8d/30186566a55dbbc17987533366de01157dce53 /usr/lib/.build-id/cd /usr/lib/.build-id/cd/a843aff53ef3cfe78d4e30f776ed572e9ec5d5 /usr/lib64/php-zts/modules/dom.so /usr/lib64/php-zts/modules/simplexml.so /usr/lib64/php-zts/modules/xml.so /usr/lib64/php-zts/modules/xmlreader.so /usr/lib64/php-zts/modules/xmlwriter.so /usr/lib64/php-zts/modules/xsl.so /usr/lib64/php/modules/dom.so /usr/lib64/php/modules/simplexml.so /usr/lib64/php/modules/xml.so /usr/lib64/php/modules/xmlreader.so /usr/lib64/php/modules/xmlwriter.so /usr/lib64/php/modules/xsl.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Oct 25 08:49:49 2025