php-xml-7.4.33-21.fc40.remi RPM for x86_64

From Remi's RPM Modular for Fedora 40 for x86_64

The php-xml package contains dynamic shared objects which add support
to PHP for manipulating XML documents using the DOM tree,
and performing XSL transformations on XML documents.

Provides

• php-xml
• config(php-xml)
• php-dom
• php-dom(x86-64)
• php-domxml
• php-domxml(x86-64)
• php-simplexml
• php-simplexml(x86-64)
• php-xml(x86-64)
• php-xmlreader
• php-xmlreader(x86-64)
• php-xmlwriter
• php-xmlwriter(x86-64)
• php-xsl
• php-xsl(x86-64)

Requires

• config(php-xml) = 7.4.33-21.fc40.remi
• ld-linux-x86-64.so.2()(64bit)
• ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_ABI_DT_RELR)(64bit)
• libexslt.so.0()(64bit)
• libxml2.so.2()(64bit)
• libxml2.so.2(LIBXML2_2.4.30)(64bit)
• libxml2.so.2(LIBXML2_2.5.0)(64bit)
• libxml2.so.2(LIBXML2_2.5.2)(64bit)
• libxml2.so.2(LIBXML2_2.5.4)(64bit)
• libxml2.so.2(LIBXML2_2.5.7)(64bit)
• libxml2.so.2(LIBXML2_2.5.8)(64bit)
• libxml2.so.2(LIBXML2_2.5.9)(64bit)
• libxml2.so.2(LIBXML2_2.6.0)(64bit)
• libxml2.so.2(LIBXML2_2.6.14)(64bit)
• libxml2.so.2(LIBXML2_2.6.20)(64bit)
• libxml2.so.2(LIBXML2_2.6.23)(64bit)
• libxml2.so.2(LIBXML2_2.6.28)(64bit)
• libxml2.so.2(LIBXML2_2.6.3)(64bit)
• libxml2.so.2(LIBXML2_2.6.5)(64bit)
• libxml2.so.2(LIBXML2_2.6.7)(64bit)
• libxml2.so.2(LIBXML2_2.6.8)(64bit)
• libxml2.so.2(LIBXML2_2.9.0)(64bit)
• libxslt.so.1()(64bit)
• libxslt.so.1(LIBXML2_1.0.11)(64bit)
• libxslt.so.1(LIBXML2_1.0.13)(64bit)
• libxslt.so.1(LIBXML2_1.0.18)(64bit)
• libxslt.so.1(LIBXML2_1.0.22)(64bit)
• libxslt.so.1(LIBXML2_1.0.24)(64bit)
• php-common(x86-64) = 7.4.33-21.fc40.remi
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

PHP

Changelog

* Wed Nov 27 2024 Remi Collet <[email protected]> - 7.4.33-21
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
* Fri Nov 22 2024 Remi Collet <[email protected]> - 7.4.33-20
  - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
    GHSA-4w77-75f9-2c8w
  - Fix OOB access in ldap_escape
    CVE-2024-8932
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
* Fri Nov 15 2024 Remi Collet <[email protected]> - 7.4.33-19
  - disable firebird on EL-10
* Thu Sep 26 2024 Remi Collet <[email protected]> - 7.4.33-18
  - Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
    CVE-2024-4577
  - Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
    CVE-2024-8926
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - use ICU 74.2
* Mon Aug 26 2024 Remi Collet <[email protected]> - 7.4.33-17
  - add backport for https://bugs.php.net/79589
    error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
* Wed Jul 31 2024 Remi Collet <[email protected]> - 7.4.33-16
  - use oracle client library version 23.5 on x86_64
* Tue Jun 04 2024 Remi Collet <[email protected]> - 7.4.33-15
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
* Wed Apr 10 2024 Remi Collet <[email protected]> - 7.4.33-14
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096
* Wed Mar 06 2024 Remi Collet <[email protected]> - 7.4.33-13
  - patch test suite for zlib-ng
* Mon Feb 19 2024 Remi Collet <[email protected]> - 7.4.33-12
  - more build patch for GCC 14
* Wed Feb 14 2024 Remi Collet <[email protected]> - 7.4.33-11
  - add build patch for GCC 14
  - use oracle client library version 21.13 on x86_64
* Tue Dec 12 2023 Remi Collet <[email protected]> - 7.4.33-10
  - use ICU 73.2
  - use oracle client library version 21.12 on x86_64, 19.19 on aarch64
  - add fixes for libxml 2.11 and 2.12 from 8.1
* Thu Sep 21 2023 Remi Collet <[email protected]> - 7.4.33-9
  - use oracle client library version 21.11 on x86_64, 19.19 on aarch64
  - use official Oracle Instant Client RPM
* Tue Aug 01 2023 Remi Collet <[email protected]> - 7.4.33-8
  - Fix Security issue with external entity loading in XML without enabling it
    GHSA-3qrf-m4j2-pcrr CVE-2023-3823
  - Fix Buffer mismanagement in phar_dir_read()
    GHSA-jqcx-ccgc-xwhv CVE-2023-3824
  - move httpd/nginx wants directive to config files in /etc
* Tue Jun 06 2023 Remi Collet <[email protected]> - 7.4.33-7
  - Fix Missing error check and insufficient random bytes in HTTP Digest
    authentication for SOAP
    GHSA-76gg-c692-v2mw CVE-2023-3247
* Fri Apr 14 2023 Remi Collet <[email protected]> - 7.4.33-6
  - use ICU 72.1
  - use oracle client library version 21.10
  - fix possible buffer overflow in date
  - define %__phpize and %__phpconfig
* Tue Feb 21 2023 Remi Collet <[email protected]> - 7.4.33-5
  - F38: enable imap extension
* Tue Feb 14 2023 Remi Collet <[email protected]> - 7.4.33-4
  - fix #81744: Password_verify() always return true with some hash
    CVE-2023-0567
  - fix #81746: 1-byte array overrun in common path resolve code
    CVE-2023-0568
  - fix DOS vulnerability when parsing multipart request body
    CVE-2023-0662
* Fri Feb 10 2023 Remi Collet <[email protected]> - 7.4.33-3
  - F38: disable imap extension
  - add dependency on pcre2 minimal version
* Mon Dec 19 2022 Remi Collet <[email protected]> - 7.4.33-2
  - pdo: fix #81740: PDO::quote() may return unquoted string
    CVE-2022-31631
  - use oracle client library version 21.8

Files

/etc/php-zts.d/20-dom.ini
/etc/php-zts.d/20-simplexml.ini
/etc/php-zts.d/20-xml.ini
/etc/php-zts.d/20-xmlwriter.ini
/etc/php-zts.d/20-xsl.ini
/etc/php-zts.d/30-xmlreader.ini
/etc/php.d/20-dom.ini
/etc/php.d/20-simplexml.ini
/etc/php.d/20-xml.ini
/etc/php.d/20-xmlwriter.ini
/etc/php.d/20-xsl.ini
/etc/php.d/30-xmlreader.ini
/usr/lib/.build-id
/usr/lib/.build-id/07
/usr/lib/.build-id/07/750e85db096223a31179e0dc969021c8804139
/usr/lib/.build-id/2f
/usr/lib/.build-id/2f/25a5cef77884ead655fc002f6425ca6f04b294
/usr/lib/.build-id/37
/usr/lib/.build-id/37/9d147420f6480099bf3f42fecb9f3a6e5ebcaa
/usr/lib/.build-id/3f
/usr/lib/.build-id/3f/6e81b806933a9bae2f851e7fb48ccc5149905a
/usr/lib/.build-id/6e
/usr/lib/.build-id/6e/812a89bd6bc0fa43093b51f6694f44967258f5
/usr/lib/.build-id/7e
/usr/lib/.build-id/7e/23ec3b9f78933f801148d12308e93936cbeecc
/usr/lib/.build-id/86/7ea4ef1675086e7a9054f2a605c4f61c2b96f6
/usr/lib/.build-id/9a/63d15cd631d670e29f155e73e289f72fa47710
/usr/lib/.build-id/a5/63ce684e428a696bb7e323d96c977157dd5772
/usr/lib/.build-id/b0
/usr/lib/.build-id/b0/4c6fbe1ee51df3e50f50d203500b2cb52f7f16
/usr/lib/.build-id/b9
/usr/lib/.build-id/b9/fb388d6a67ab557d712d937a3754d370d1e0e4
/usr/lib/.build-id/e5/92d6ae9e0e9c12b24401685fcd4c10913a4aaa
/usr/lib64/php-zts/modules/dom.so
/usr/lib64/php-zts/modules/simplexml.so
/usr/lib64/php-zts/modules/xml.so
/usr/lib64/php-zts/modules/xmlreader.so
/usr/lib64/php-zts/modules/xmlwriter.so
/usr/lib64/php-zts/modules/xsl.so
/usr/lib64/php/modules/dom.so
/usr/lib64/php/modules/simplexml.so
/usr/lib64/php/modules/xml.so
/usr/lib64/php/modules/xmlreader.so
/usr/lib64/php/modules/xmlwriter.so
/usr/lib64/php/modules/xsl.so

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Nov 29 10:30:27 2024