php-common-8.0.30-8.el9_8 RPM for s390x

From AlmaLinux 9.8 AppStream for s390x

The php-common package contains files used by both the php
package and the php-cli package.

Provides

• php-common
• bundled(libmagic)
• bundled(timelib)
• config(php-common)
• php(api)
• php(language)
• php(language)(s390-64)
• php(zend-abi)
• php-bz2
• php-bz2(s390-64)
• php-calendar
• php-calendar(s390-64)
• php-common(s390-64)
• php-core
• php-core(s390-64)
• php-ctype
• php-ctype(s390-64)
• php-curl
• php-curl(s390-64)
• php-date
• php-date(s390-64)
• php-exif
• php-exif(s390-64)
• php-fileinfo
• php-fileinfo(s390-64)
• php-filter
• php-filter(s390-64)
• php-ftp
• php-ftp(s390-64)
• php-gettext
• php-gettext(s390-64)
• php-hash
• php-hash(s390-64)
• php-iconv
• php-iconv(s390-64)
• php-json
• php-json(s390-64)
• php-libxml
• php-libxml(s390-64)
• php-mhash
• php-mhash(s390-64)
• php-openssl
• php-openssl(s390-64)
• php-pcre
• php-pcre(s390-64)
• php-phar
• php-phar(s390-64)
• php-reflection
• php-reflection(s390-64)
• php-session
• php-session(s390-64)
• php-sockets
• php-sockets(s390-64)
• php-spl
• php-spl(s390-64)
• php-standard
• php-standard(s390-64)
• php-tokenizer
• php-tokenizer(s390-64)
• php-zlib
• php-zlib(s390-64)

Requires

• config(php-common) = 8.0.30-8.el9_8
• libbz2.so.1()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.15)(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.7)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcurl.so.4()(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

PHP and BSD

Changelog

* Tue Aug 04 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-8
  - Fix leak on double DatePeriod::__construct() call
  - Fixed SQL injection via E'...' backslash breakout
    CVE-2026-17543
  - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
    CVE-2026-7260
* Thu Jul 09 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-7
  - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
    CVE-2026-14355
* Fri Jun 05 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-6
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258
* Fri Jan 16 2026 Remi Collet <rcollet@redhat.com> - 8.0.30-5
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177
* Fri Oct 03 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-4
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections
* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096

Files

/etc/php.d
/etc/php.d/20-bz2.ini
/etc/php.d/20-calendar.ini
/etc/php.d/20-ctype.ini
/etc/php.d/20-curl.ini
/etc/php.d/20-exif.ini
/etc/php.d/20-fileinfo.ini
/etc/php.d/20-ftp.ini
/etc/php.d/20-gettext.ini
/etc/php.d/20-iconv.ini
/etc/php.d/20-phar.ini
/etc/php.d/20-sockets.ini
/etc/php.d/20-tokenizer.ini
/etc/php.ini
/usr/lib/.build-id
/usr/lib/.build-id/21
/usr/lib/.build-id/21/4f4c9885c78df130682b6190c45878f9395f3c
/usr/lib/.build-id/37
/usr/lib/.build-id/37/7c285f6a7741b99bfff054b551e59a14a4658d
/usr/lib/.build-id/7b
/usr/lib/.build-id/7b/3fe270417f0e52ddf745fc685b50e91c4083a3
/usr/lib/.build-id/89
/usr/lib/.build-id/89/64cda4921ae31c804e45fbff50ab2b528d5135
/usr/lib/.build-id/8c
/usr/lib/.build-id/8c/385cf976b969a28f6d43fb44faf7c92ceb0abb
/usr/lib/.build-id/8e
/usr/lib/.build-id/8e/51006616c31bbd8e5c9e438b2e6ac1ab0dc367
/usr/lib/.build-id/b3
/usr/lib/.build-id/b3/c1f7855f508f1f3f9de553fd3e10edc08071f4
/usr/lib/.build-id/c5
/usr/lib/.build-id/c5/5a3701797d17f90ba3acf3f4f8bd42978cc4b8
/usr/lib/.build-id/cf
/usr/lib/.build-id/cf/46c11d42d56872bbb151bc2deee197b8b4c0a5
/usr/lib/.build-id/d3
/usr/lib/.build-id/d3/17ae698331930d77dfe5369ab2a35303a6461c
/usr/lib/.build-id/e7
/usr/lib/.build-id/e7/db575ed1b2986aaedd2ec8a21422dbccb9f039
/usr/lib/.build-id/fe
/usr/lib/.build-id/fe/72e78b23322db5e611f7f13b82d4330ce3bb98
/usr/lib64/php
/usr/lib64/php/modules
/usr/lib64/php/modules/bz2.so
/usr/lib64/php/modules/calendar.so
/usr/lib64/php/modules/ctype.so
/usr/lib64/php/modules/curl.so
/usr/lib64/php/modules/exif.so
/usr/lib64/php/modules/fileinfo.so
/usr/lib64/php/modules/ftp.so
/usr/lib64/php/modules/gettext.so
/usr/lib64/php/modules/iconv.so
/usr/lib64/php/modules/phar.so
/usr/lib64/php/modules/sockets.so
/usr/lib64/php/modules/tokenizer.so
/usr/share/doc/pecl
/usr/share/doc/php-common
/usr/share/doc/php-common/CODING_STANDARDS.md
/usr/share/doc/php-common/CONTRIBUTING.md
/usr/share/doc/php-common/EXTENSIONS
/usr/share/doc/php-common/NEWS
/usr/share/doc/php-common/README.REDIST.BINS
/usr/share/doc/php-common/README.md
/usr/share/doc/php-common/UPGRADING
/usr/share/doc/php-common/UPGRADING.INTERNALS
/usr/share/doc/php-common/docs
/usr/share/doc/php-common/docs/input-filter.md
/usr/share/doc/php-common/docs/mailinglist-rules.md
/usr/share/doc/php-common/docs/output-api.md
/usr/share/doc/php-common/docs/parameter-parsing-api.md
/usr/share/doc/php-common/docs/release-process.md
/usr/share/doc/php-common/docs/self-contained-extensions.md
/usr/share/doc/php-common/docs/streams.md
/usr/share/doc/php-common/docs/unix-build-system.md
/usr/share/doc/php-common/php.ini-development
/usr/share/doc/php-common/php.ini-production
/usr/share/licenses/php-common
/usr/share/licenses/php-common/LICENSE
/usr/share/licenses/php-common/TSRM_LICENSE
/usr/share/licenses/php-common/ZEND_LICENSE
/usr/share/licenses/php-common/libmagic_LICENSE
/usr/share/licenses/php-common/timelib_LICENSE
/usr/share/php
/usr/share/tests
/usr/share/tests/pecl
/var/lib/php
/var/lib/php/peclxml

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Sep 2 03:29:30 2026