| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: php-process | Distribution: Unknown |
| Version: 7.4.33 | Vendor: Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine #NoAI |
| Release: 29.module_php.7.4.el9.remi | Build date: Tue Oct 6 15:33:27 2026 |
| Group: Development/Languages | Build host: builder.remirepo.net |
| Size: 240212 | Source RPM: php-7.4.33-29.module_php.7.4.el9.remi.src.rpm |
| Packager: Remi Collet | |
| Url: http://www.php.net/ | |
| Summary: Modules for PHP script using system process interfaces | |
The php-process package contains dynamic shared objects which add support to PHP using system interfaces for inter-process communication.
PHP
* Thu Oct 01 2026 Remi Collet <remi@remirepo.net> - 7.4.33-29
- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
CVE-2026-93682
* Thu Jul 30 2026 Remi Collet <remi@remirepo.net> - 7.4.33-28
- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
CVE-2026-7260
* Wed Jul 01 2026 Remi Collet <remi@remirepo.net> - 7.4.33-27
- Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
CVE-2026-14355
* Tue May 12 2026 Remi Collet <remi@remirepo.net> - 7.4.33-26
- Fix XSS within status endpoint
CVE-2026-6735
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
CVE-2026-7261
- Fix Broken Apache map value NULL check
CVE-2026-7262
- Fix Signed integer overflow of char array offset
CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
CVE-2026-7258
* Thu Dec 18 2025 Remi Collet <remi@remirepo.net> - 7.4.33-25
- Fix Null byte termination in dns_get_record()
GHSA-www2-q4fc-65wf
- Fix Heap buffer overflow in array_merge()
CVE-2025-14178
- Fix Information Leak of Memory in getimagesize
CVE-2025-14177
* Thu Jul 03 2025 Remi Collet <remi@remirepo.net> - 7.4.33-24
- Fix pgsql extension does not check for errors during escaping
CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
CVE-2025-6491
- Fix Null byte termination in hostnames
CVE-2025-1220
* Mon Mar 17 2025 Remi Collet <remi@remirepo.net> - 7.4.33-23
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
CVE-2025-1217
- use oracle client library version 23.7 on x86_64 and aarch64
* Thu Feb 13 2025 Remi Collet <remi@remirepo.net> - 7.4.33-22
- backport fix for ICU 74+
- backport fix strict prototypes
* Wed Nov 27 2024 Remi Collet <remi@remirepo.net> - 7.4.33-21
- Fix Leak partial content of the heap through heap buffer over-read
CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <remi@remirepo.net> - 7.4.33-20
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
CVE-2024-11233
* Fri Nov 15 2024 Remi Collet <remi@remirepo.net> - 7.4.33-19
- disable firebird on EL-10
/etc/php-zts.d/20-posix.ini /etc/php-zts.d/20-shmop.ini /etc/php-zts.d/20-sysvmsg.ini /etc/php-zts.d/20-sysvsem.ini /etc/php-zts.d/20-sysvshm.ini /etc/php.d/20-posix.ini /etc/php.d/20-shmop.ini /etc/php.d/20-sysvmsg.ini /etc/php.d/20-sysvsem.ini /etc/php.d/20-sysvshm.ini /usr/lib/.build-id /usr/lib/.build-id/3f/276f9ffbdf79a6cd9972af18b1ca5cb3ff3986 /usr/lib/.build-id/44/b05990974f549601ee8361a47a72251a4f6228 /usr/lib/.build-id/65/8d19f4ee99f63442eca4c24bfac6b23ec18016 /usr/lib/.build-id/80 /usr/lib/.build-id/80/6e9a6e74b39890a24f3351fb40876269987315 /usr/lib/.build-id/88 /usr/lib/.build-id/88/f6f6dfda73433060fcdf439aa8e46efe5e7d7e /usr/lib/.build-id/8b /usr/lib/.build-id/8b/c897f1ece231276e968cfcb4c70446aa3c0f56 /usr/lib/.build-id/aa /usr/lib/.build-id/aa/8479f7fda64144f5374502528a76f739f521c8 /usr/lib/.build-id/e4/8bf720192d870cedeba554d4d371ea0677a614 /usr/lib/.build-id/f6 /usr/lib/.build-id/f6/9a5f1798ebb3395c0f69c75220293cd7db4cc7 /usr/lib/.build-id/ff /usr/lib/.build-id/ff/d0c11b0a37a8dd7161097b8b3130bc1a2503e8 /usr/lib64/php-zts/modules/posix.so /usr/lib64/php-zts/modules/shmop.so /usr/lib64/php-zts/modules/sysvmsg.so /usr/lib64/php-zts/modules/sysvsem.so /usr/lib64/php-zts/modules/sysvshm.so /usr/lib64/php/modules/posix.so /usr/lib64/php/modules/shmop.so /usr/lib64/php/modules/sysvmsg.so /usr/lib64/php/modules/sysvsem.so /usr/lib64/php/modules/sysvshm.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Oct 7 13:11:17 2026