Remi's RPM repository - Packages

Blog | Support | Repository | Wizard

php80-php - PHP scripting language for creating dynamic web sites

Website:
http://www.php.net/
Licence:
PHP and Zend and BSD and MIT and ASL 1.0 and NCSA
Vendor:
Remi's RPM repository <https://rpms.remirepo.net/>
Description:
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated web pages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts.

This package contains the module (often referred to as mod_php)
which adds support for the PHP language to system Apache HTTP Server.

Packages

php80-php-8.0.30-13.remi.src [10.7 MiB] Changelog by Remi Collet (2025-03-13):
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
  CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
  CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
  CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
  CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
  CVE-2025-1217
- use oracle client library version 23.7 on x86_64 and aarch64
php80-php-8.0.30-12.remi.src [10.7 MiB] Changelog by Remi Collet (2025-02-13):
- backport fix for ICU 74+
php80-php-8.0.30-11.remi.src [10.7 MiB] Changelog by Remi Collet (2024-11-27):
- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929
php80-php-8.0.30-10.remi.src [10.7 MiB] Changelog by Remi Collet (2024-11-22):
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233
php80-php-8.0.30-9.remi.src [10.7 MiB] Changelog by Remi Collet (2024-09-26):
- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Logs from childrens may be altered
  CVE-2024-9026
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925
- use ICU 74.2
php80-php-8.0.30-8.remi.src [10.6 MiB] Changelog by Remi Collet (2024-07-31):
- add backport for https://bugs.php.net/79589
  error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
php80-php-8.0.30-7.remi.src [10.6 MiB] Changelog by Remi Collet (2024-07-31):
- use oracle client library version 23.5 on x86_64
php80-php-8.0.30-6.remi.src [10.6 MiB] Changelog by Remi Collet (2024-06-04):
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458