Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

php-process-8.0.30-3.el9_6 RPM for s390x

From AlmaLinux 9.6 AppStream for s390x

Name: php-process Distribution: AlmaLinux
Version: 8.0.30 Vendor: AlmaLinux
Release: 3.el9_6 Build date: Tue May 13 22:47:02 2025
Group: Unspecified Build host: s390x-builder02.almalinux.org
Size: 102100 Source RPM: php-8.0.30-3.el9_6.src.rpm
Packager: AlmaLinux Packaging Team <packager@almalinux.org>
Url: http://www.php.net/
Summary: Modules for PHP script using system process interfaces
 
The php-process package contains dynamic shared objects which add
support to PHP using system interfaces for inter-process
communication.

Provides

Requires

License

PHP

Changelog

* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217
* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
* Fri Oct 06 2023 Remi Collet <rcollet@redhat.com> - 8.0.30-1
  - rebase to 8.0.30
  - Resolves: RHEL-11946

Files

/etc/php.d/20-posix.ini
/etc/php.d/20-shmop.ini
/etc/php.d/20-sysvmsg.ini
/etc/php.d/20-sysvsem.ini
/etc/php.d/20-sysvshm.ini
/usr/lib/.build-id
/usr/lib/.build-id/4d/f14151a9ac38a761b93cb0a29049a65bd9774d
/usr/lib/.build-id/56
/usr/lib/.build-id/56/dbc515ceadc5bf8fc07171d513ff0f61c914b9
/usr/lib/.build-id/a6
/usr/lib/.build-id/a6/014e84e09e17524a630b060c733f014e091daf
/usr/lib/.build-id/aa
/usr/lib/.build-id/aa/f4c974d1508905cdb61408b03f97d7f7d93dc5
/usr/lib/.build-id/fc
/usr/lib/.build-id/fc/1d29bdbe199fc20b088bf9f09055c2e1f9a482
/usr/lib64/php/modules/posix.so
/usr/lib64/php/modules/shmop.so
/usr/lib64/php/modules/sysvmsg.so
/usr/lib64/php/modules/sysvsem.so
/usr/lib64/php/modules/sysvshm.so

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun May 18 03:09:34 2025