Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

php-process-8.0.30-3.el9_6 RPM for aarch64

From AlmaLinux 9.6 AppStream for aarch64

Name: php-process Distribution: AlmaLinux
Version: 8.0.30 Vendor: AlmaLinux
Release: 3.el9_6 Build date: Tue May 13 22:00:39 2025
Group: Unspecified Build host: arm-builder01.almalinux.org
Size: 343972 Source RPM: php-8.0.30-3.el9_6.src.rpm
Packager: AlmaLinux Packaging Team <packager@almalinux.org>
Url: http://www.php.net/
Summary: Modules for PHP script using system process interfaces
 
The php-process package contains dynamic shared objects which add
support to PHP using system interfaces for inter-process
communication.

Provides

Requires

License

PHP

Changelog

* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
* Fri Oct 06 2023 Remi Collet <rcollet@redhat.com> - 8.0.30-1
  - rebase to 8.0.30
  - Resolves: RHEL-11946

Files

/etc/php.d/20-posix.ini
/etc/php.d/20-shmop.ini
/etc/php.d/20-sysvmsg.ini
/etc/php.d/20-sysvsem.ini
/etc/php.d/20-sysvshm.ini
/usr/lib/.build-id
/usr/lib/.build-id/2f
/usr/lib/.build-id/2f/881cdf4a72ac2acf3e385d9141e1a5c322c212
/usr/lib/.build-id/80
/usr/lib/.build-id/80/1a105c18ccfe2edf8bfa845b01681380553c64
/usr/lib/.build-id/d3
/usr/lib/.build-id/d3/6973f76e7c9c41dd381fe4066873ae2daf1210
/usr/lib/.build-id/ef/9e8416d9a3681be069207c22f1d403fb04a5f6
/usr/lib/.build-id/f2
/usr/lib/.build-id/f2/6730db007be5f8f1f732dfe1b8d8c8122e1c74
/usr/lib64/php/modules/posix.so
/usr/lib64/php/modules/shmop.so
/usr/lib64/php/modules/sysvmsg.so
/usr/lib64/php/modules/sysvsem.so
/usr/lib64/php/modules/sysvshm.so

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun May 18 03:06:43 2025