Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

php-xml-8.0.30-3.el9_6 RPM for ppc64le

From AlmaLinux 9.6 AppStream for ppc64le

Name: php-xml Distribution: AlmaLinux
Version: 8.0.30 Vendor: AlmaLinux
Release: 3.el9_6 Build date: Tue May 13 22:29:14 2025
Group: Unspecified Build host: ppc64le-builder01.almalinux.org
Size: 549510 Source RPM: php-8.0.30-3.el9_6.src.rpm
Packager: AlmaLinux Packaging Team <packager@almalinux.org>
Url: http://www.php.net/
Summary: A module for PHP applications which use XML
The php-xml package contains dynamic shared objects which add support
to PHP for manipulating XML documents using the DOM tree,
and performing XSL transformations on XML documents.

Provides

Requires

License

PHP

Changelog

* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
* Fri Oct 06 2023 Remi Collet <rcollet@redhat.com> - 8.0.30-1
  - rebase to 8.0.30
  - Resolves: RHEL-11946

Files

/etc/php.d/20-dom.ini
/etc/php.d/20-simplexml.ini
/etc/php.d/20-xml.ini
/etc/php.d/20-xmlwriter.ini
/etc/php.d/20-xsl.ini
/etc/php.d/30-xmlreader.ini
/usr/lib/.build-id
/usr/lib/.build-id/56
/usr/lib/.build-id/56/7977fb679622a72d671b29713954d15121149b
/usr/lib/.build-id/66
/usr/lib/.build-id/66/9307548577f1a45a9a381541191d2097336781
/usr/lib/.build-id/a1/acc9fd96041bb5b726ac4593d7b1d8d6d79f7f
/usr/lib/.build-id/a8
/usr/lib/.build-id/a8/d1acb5797340c805ae7eaf3beba2e3faeeccff
/usr/lib/.build-id/b5
/usr/lib/.build-id/b5/f31be4ea41d4964f819a858731277114838b43
/usr/lib/.build-id/c4
/usr/lib/.build-id/c4/6e8f8ebbbf104830bf7a1916a902d8ec378526
/usr/lib64/php/modules/dom.so
/usr/lib64/php/modules/simplexml.so
/usr/lib64/php/modules/xml.so
/usr/lib64/php/modules/xmlreader.so
/usr/lib64/php/modules/xmlwriter.so
/usr/lib64/php/modules/xsl.so


Generated by rpm2html 1.8.1

Fabrice Bellet, Sun May 18 02:59:27 2025