Remi's RPM repository - enterprise - 10 - php81 - x86_64

Update: php-pecl-datadog-trace-1.26.0-1.module_php.8.1.el10.remi

Fri, 09 Oct 2026 08:49:50 +0000

Package: php-pecl-datadog-trace
Summary: APM and distributed tracing for PHP

Description:
The Datadog PHP Tracer brings APM and distributed tracing to PHP. Documentation: https://docs.datadoghq.com/tracing/languages/php/ Package built for PHP 8.1.

Changes:

php-pecl-datadog-trace-1.26.0-1.module_php.8.1.el10.remi.x86_64 [7.3 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.25.1-1.module_php.8.1.el10.remi.x86_64 [7.2 MiB]	Changelog by Remi Collet (2026-09-09): - update to 1.25.1 - open https://github.com/DataDog/dd-trace-php/issues/4175 test failures - open https://github.com/DataDog/dd-trace-php/issues/4174 offline build

Update: php-pecl-mongodb2-2.5.4-1.module_php.8.1.el10.remi

Fri, 09 Oct 2026 06:06:08 +0000

Package: php-pecl-mongodb2
Summary: MongoDB driver for PHP version 2

Description:
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver. php-pecl-mongodb provides version 1 of the extension, this package provides version 2. Package built for PHP 8.1.

Changes:

php-pecl-mongodb2-2.5.4-1.module_php.8.1.el10.remi.x86_64 [880 KiB]	Changelog by Remi Collet (2026-10-09): - update to 2.5.4 - use bundled libbson and libmongoc 2.5.6 - use bundled libmongocrypt 1.20.5
php-pecl-mongodb2-2.5.3-1.module_php.8.1.el10.remi.x86_64 [876 KiB]	Changelog by Remi Collet (2026-09-30): - update to 2.5.3 - use bundled libbson and libmongoc 2.5.5

Update: php-pecl-mongodb-1.21.11-1.module_php.8.1.el10.remi

Fri, 09 Oct 2026 05:37:32 +0000

Package: php-pecl-mongodb
Summary: MongoDB driver for PHP version 1

Description:
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver. This package provides version 1 of the extension, php-pecl-mongodb2 provides version 2. Package built for PHP 8.1.

Changes:

php-pecl-mongodb-1.21.11-1.module_php.8.1.el10.remi.x86_64 [881 KiB]	Changelog by Remi Collet (2026-10-09): - update to 1.21.11 - use bundled libbson and libmongc 1.30.13
php-pecl-mongodb-1.21.10-1.module_php.8.1.el10.remi.x86_64 [881 KiB]	Changelog by Remi Collet (2026-09-30): - update to 1.21.10 - use bundled libbson and libmongc 1.30.12

Update: php-orieg-judy-2.8.0-1.module_php.8.1.el10.remi

Fri, 09 Oct 2026 05:09:05 +0000

Package: php-orieg-judy
Summary: PHP Judy implements sparse dynamic arrays

Description:
PHP Judy implements sparse dynamic arrays (aka Judy Arrays). This extension is based on the Judy C library. A Judy array consumes memory only when it is populated, yet can grow to take advantage of all available memory if desired. Judy's key benefits are scalability, high performance, and memory efficiency. Package built for PHP 8.1.

Changes:

php-orieg-judy-2.8.0-1.module_php.8.1.el10.remi.x86_64 [162 KiB]	Changelog by Remi Collet (2026-10-09): - update to 2.8.0
php-orieg-judy-2.7.1-1.module_php.8.1.el10.remi.x86_64 [158 KiB]	Changelog by Remi Collet (2026-08-24): - update to 2.7.1

Update: php-orieg-judy-devel-2.8.0-1.module_php.8.1.el10.remi

Fri, 09 Oct 2026 05:09:05 +0000

Package: php-orieg-judy-devel
Summary: php-orieg-judy developer files (header)

Description:
These are the files needed to compile programs using php-orieg-judy.

Changes:

php-orieg-judy-devel-2.8.0-1.module_php.8.1.el10.remi.x86_64 [101 KiB]	Changelog by Remi Collet (2026-10-09): - update to 2.8.0
php-orieg-judy-devel-2.7.1-1.module_php.8.1.el10.remi.x86_64 [101 KiB]	Changelog by Remi Collet (2026-08-24): - update to 2.7.1

Update: php-pecl-rpminfo-1.2.2-1.module_php.8.1.el10.remi

Thu, 08 Oct 2026 11:57:09 +0000

Package: php-pecl-rpminfo
Summary: RPM information

Description:
Retrieve RPM information using librpm, from local RPM file or from installed packages database. Documentation: https://www.php.net/rpminfo Package built for PHP 8.1.

Changes:

php-pecl-rpminfo-1.2.2-1.module_php.8.1.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-10-08): - update to 1.2.2
php-pecl-rpminfo-1.2.1-1.el10.remi.8.1.x86_64 [33 KiB]	Changelog by Remi Collet (2025-09-25): - update to 1.2.1

Update: php-pecl-bitset-3.2.1-1.module_php.8.1.el10.remi

Thu, 08 Oct 2026 11:08:05 +0000

Package: php-pecl-bitset
Summary: BITSET extension

Description:
The BitSet extension assists by providing a mechanism to manage sets of bits. This provides a similar API (object-based) to java.util.BitSet with some PHP-specific flavoring. Package built for PHP 8.1.

Changes:

php-pecl-bitset-3.2.1-1.module_php.8.1.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-10-08): - update to 3.2.1
php-pecl-bitset-3.2.0-3.el10.remi.8.1.x86_64 [22 KiB]	Changelog by Remi Collet (2023-08-30): - rebuild for PHP 8.3.0RC1

Update: php-zephir-parser-2.9.0-1.module_php.8.1.el10.remi

Wed, 07 Oct 2026 07:16:37 +0000

Package: php-zephir-parser
Summary: Zephir code parser

Description:
Zephir Parser is a code parser, delivered as a C extension for the PHP language.

Changes:

php-zephir-parser-2.9.0-1.module_php.8.1.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2026-10-07): - update to 2.9.0
php-zephir-parser-2.8.0-1.module_php.8.1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.8.0

Update: php-zephir-parser-devel-2.9.0-1.module_php.8.1.el10.remi

Wed, 07 Oct 2026 07:16:37 +0000

Package: php-zephir-parser-devel
Summary: php-zephir-parser developer files (headers)

Description:
These are the files needed to compile programs using php-zephir-parser.

Changes:

php-zephir-parser-devel-2.9.0-1.module_php.8.1.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2026-10-07): - update to 2.9.0
php-zephir-parser-devel-2.8.0-1.module_php.8.1.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.8.0

Update: php-pecl-uv-0.3.1-1.module_php.8.1.el10.remi

Sat, 03 Oct 2026 05:27:06 +0000

Package: php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.1.

Changes:

php-pecl-uv-0.3.1-1.module_php.8.1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php-pecl-uv-0.3.0-2.el10.remi.8.1.x86_64 [79 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php-phalcon5-5.22.1-1.module_php.8.1.el10.remi

Fri, 02 Oct 2026 09:32:14 +0000

Package: php-phalcon5
Summary: Phalcon Framework

Description:
Phalcon is a web framework implemented as a C extension offering high performance and lower resource consumption. Documentation: https://docs.phalcon.io/ Package built for PHP 8.1.

Changes:

php-phalcon5-5.22.1-1.module_php.8.1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-02): - update to 5.22.1
php-phalcon5-5.22.0-1.module_php.8.1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-30): - update to 5.22.0

Update: php-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php
Summary: PHP scripting language for creating dynamic web sites

Description:
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Changes:

php-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-8.1.34-4.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-bcmath-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-bcmath
Summary: A module for PHP applications for using the bcmath library

Description:
The php-bcmath package contains a dynamic shared object that will add support for using the bcmath library to PHP.

Changes:

php-bcmath-8.1.34-5.module_php.8.1.el10.remi.x86_64 [35 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-bcmath-8.1.34-4.module_php.8.1.el10.remi.x86_64 [34 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-cli-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-cli
Summary: Command-line interface for PHP

Description:
The php-cli package contains the command-line interface executing PHP scripts, /usr/bin/php, and the CGI interface.

Changes:

php-cli-8.1.34-5.module_php.8.1.el10.remi.x86_64 [2.1 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-cli-8.1.34-4.module_php.8.1.el10.remi.x86_64 [2.1 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-common-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-common
Summary: Common files for PHP

Description:
The php-common package contains files used by both the php package and the php-cli package.

Changes:

php-common-8.1.34-5.module_php.8.1.el10.remi.x86_64 [673 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-common-8.1.34-4.module_php.8.1.el10.remi.x86_64 [672 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-dba-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-dba
Summary: A database abstraction layer module for PHP applications

Description:
The php-dba package contains a dynamic shared object that will add support for using the DBA database abstraction layer to PHP.

Changes:

php-dba-8.1.34-5.module_php.8.1.el10.remi.x86_64 [36 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-dba-8.1.34-4.module_php.8.1.el10.remi.x86_64 [35 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-dbg-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-dbg
Summary: The interactive PHP debugger

Description:
The php-dbg package contains the interactive PHP debugger.

Changes:

php-dbg-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.8 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-dbg-8.1.34-4.module_php.8.1.el10.remi.x86_64 [1.8 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-devel-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-devel
Summary: Files needed for building PHP extensions

Description:
The php-devel package contains the files needed for building PHP extensions. If you need to compile your own PHP extensions, you will need to install this package.

Changes:

php-devel-8.1.34-5.module_php.8.1.el10.remi.x86_64 [685 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-devel-8.1.34-4.module_php.8.1.el10.remi.x86_64 [684 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-embedded-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-embedded
Summary: PHP library for embedding in applications

Description:
The php-embedded package contains a library which can be embedded into applications to provide PHP scripting language support.

Changes:

php-embedded-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-embedded-8.1.34-4.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-enchant-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-enchant
Summary: Enchant spelling extension for PHP applications

Description:
The php-enchant package contains a dynamic shared object that will add support for using the enchant library to PHP.

Changes:

php-enchant-8.1.34-5.module_php.8.1.el10.remi.x86_64 [19 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-enchant-8.1.34-4.module_php.8.1.el10.remi.x86_64 [18 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-ffi-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-ffi
Summary: Foreign Function Interface

Description:
FFI is one of the features that made Python and LuaJIT very useful for fast prototyping. It allows calling C functions and using C data types from pure scripting language and therefore develop “system code” more productively. For PHP, FFI opens a way to write PHP extensions and bindings to C libraries in pure PHP.

Changes:

php-ffi-8.1.34-5.module_php.8.1.el10.remi.x86_64 [76 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-ffi-8.1.34-4.module_php.8.1.el10.remi.x86_64 [75 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-fpm-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-fpm
Summary: PHP FastCGI Process Manager

Description:
PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites.

Changes:

php-fpm-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-fpm-8.1.34-4.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-gd-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-gd
Summary: A module for PHP applications for using the gd graphics library

Description:
The php-gd package contains a dynamic shared object that will add support for using the gd graphics library to PHP.

Changes:

php-gd-8.1.34-5.module_php.8.1.el10.remi.x86_64 [40 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-gd-8.1.34-4.module_php.8.1.el10.remi.x86_64 [39 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-gmp-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-gmp
Summary: A module for PHP applications for using the GNU MP library

Description:
These functions allow you to work with arbitrary-length integers using the GNU MP library.

Changes:

php-gmp-8.1.34-5.module_php.8.1.el10.remi.x86_64 [32 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-gmp-8.1.34-4.module_php.8.1.el10.remi.x86_64 [31 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-imap-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-imap
Summary: A module for PHP applications that use IMAP

Description:
The php-imap module will add IMAP (Internet Message Access Protocol) support to PHP. IMAP is a protocol for retrieving and uploading e-mail messages on mail servers. PHP is an HTML-embedded scripting language.

Changes:

php-imap-8.1.34-5.module_php.8.1.el10.remi.x86_64 [44 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-imap-8.1.34-4.module_php.8.1.el10.remi.x86_64 [43 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-intl-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-intl
Summary: Internationalization extension for PHP applications

Description:
The php-intl package contains a dynamic shared object that will add support for using the ICU library to PHP.

Changes:

php-intl-8.1.34-5.module_php.8.1.el10.remi.x86_64 [145 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-intl-8.1.34-4.module_php.8.1.el10.remi.x86_64 [145 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-ldap-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-ldap
Summary: A module for PHP applications that use LDAP

Description:
The php-ldap adds Lightweight Directory Access Protocol (LDAP) support to PHP. LDAP is a set of protocols for accessing directory services over the Internet. PHP is an HTML-embedded scripting language.

Changes:

php-ldap-8.1.34-5.module_php.8.1.el10.remi.x86_64 [42 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-ldap-8.1.34-4.module_php.8.1.el10.remi.x86_64 [41 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-litespeed-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-litespeed
Summary: LiteSpeed Web Server PHP support

Description:
The php-litespeed package provides the /usr/bin/lsphp command used by the LiteSpeed Web Server (LSAPI enabled PHP).

Changes:

php-litespeed-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-litespeed-8.1.34-4.module_php.8.1.el10.remi.x86_64 [1.7 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-mbstring-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-mbstring
Summary: A module for PHP applications which need multi-byte string handling

Description:
The php-mbstring package contains a dynamic shared object that will add support for multi-byte string handling to PHP.

Changes:

php-mbstring-8.1.34-5.module_php.8.1.el10.remi.x86_64 [469 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-mbstring-8.1.34-4.module_php.8.1.el10.remi.x86_64 [468 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php-mysqlnd-8.1.34-5.module_php.8.1.el10.remi

Thu, 01 Oct 2026 14:11:28 +0000

Package: php-mysqlnd
Summary: A module for PHP applications that use MySQL databases

Description:
The php-mysqlnd package contains a dynamic shared object that will add MySQL database support to PHP. MySQL is an object-relational database management system. PHP is an HTML-embeddable scripting language. If you need MySQL support for PHP applications, you will need to install this package and the php package. This package use the MySQL Native Driver

Changes:

php-mysqlnd-8.1.34-5.module_php.8.1.el10.remi.x86_64 [138 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php-mysqlnd-8.1.34-4.module_php.8.1.el10.remi.x86_64 [138 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260