[ All 3 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z ]
×

Package php-ffi-8.0.30-4.el9_7.x86_64 download

Name php-ffi
Epoch 0
Version 8.0.30
Release 4.el9_7
Architecture x86_64
Website/URL http://www.php.net/
License PHP
Build Time 2025-12-19 09:30:04
Build Host builder-x86-05.inferitos.ru
Summary Foreign Function Interface
Repositories AppStream
Description FFI is one of the features that made Python and LuaJIT very useful for fast prototyping. It allows calling C functions and using C data types from pure scripting language and therefore develop “system code” more productively. For PHP, FFI opens a way to write PHP extensions and bindings to C libraries in pure PHP.
Errata
Size 73 KiB
Source Project php-8.0.30-4.el9_7
SHA-256 checksum 6b04cadc1820718d9e66c03aa0f517515376bf0648132fb7977cdb8a0328afda
× Full screenshot
Changelog link
* Fri Oct 03 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-4
- Fix pgsql extension does not check for errors during escaping
  CVE-2025-1735
- Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
  CVE-2025-6491
- Fix Null byte termination in hostnames
  CVE-2025-1220
- Fix soap memory corruption
- Fix ldap_set_option() not applied on different ldap connections

* Thu Mar 13 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-3
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource
  CVE-2025-1219
- Fix Stream HTTP wrapper header check might omit basic auth header
  CVE-2025-1736
- Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
  CVE-2025-1861
- Fix Streams HTTP wrapper does not fail for headers without colon
  CVE-2025-1734
- Fix Header parser of `http` stream wrapper does not handle folded headers
  CVE-2025-1217

* Tue Jan 21 2025 Remi Collet <rcollet@redhat.com> - 8.0.30-2
- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Logs from childrens may be altered
  CVE-2024-9026
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096

* Fri Oct 06 2023 Remi Collet <rcollet@redhat.com> - 8.0.30-1
- rebase to 8.0.30
- Resolves: RHEL-11946