Remi's RPM repository - enterprise - 10 - remi - x86_64

Update: php-sebastian-version7-7.0.1-1.el10.remi

Mon, 05 Oct 2026 04:38:48 +0000

Package: php-sebastian-version7
Summary: Managing the version number of Git-hosted PHP projects, version 7

Description:
Library that helps with managing the version number of Git-hosted PHP projects. This package provides version 7 of sebastian/version library. Autoloader: /usr/share/php/SebastianBergmann/Version7/autoload.php

Changes:

php-sebastian-version7-7.0.1-1.el10.remi.noarch [12 KiB]	Changelog by Remi Collet (2026-10-05): - update to 7.0.1
php-sebastian-version7-7.0.0-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2026-02-06): - update to 7.0.0 - raise dependency on PHP 8.4 - rename to php-sebastian-version7 - move to /usr/share/php/SebastianBergmann/Version7

Update: php-sebastian-version6-6.0.1-1.el10.remi

Mon, 05 Oct 2026 04:36:40 +0000

Package: php-sebastian-version6
Summary: Managing the version number of Git-hosted PHP projects, version 6

Description:
Library that helps with managing the version number of Git-hosted PHP projects. This package provides version 6 of sebastian/version library. Autoloader: /usr/share/php/SebastianBergmann/Version6/autoload.php

Changes:

php-sebastian-version6-6.0.1-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2026-10-05): - update to 6.0.1
php-sebastian-version6-6.0.0-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2025-02-07): - update to 6.0.0 - raise dependency on PHP 8.2 - rename to php-sebastian-version6 - move to /usr/share/php/SebastianBergmann/Version6

Update: php-phpunit-php-code-coverage14-14.4.1-1.el10.remi

Sun, 04 Oct 2026 05:10:23 +0000

Package: php-phpunit-php-code-coverage14
Summary: PHP code coverage information, version 14

Description:
Library that provides collection, processing, and rendering functionality for PHP code coverage information. This package provides version 14 of phpunit/php-code-coverage library. Autoloader: /usr/share/php/SebastianBergmann/CodeCoverage14/autoload.php

Changes:

php-phpunit-php-code-coverage14-14.4.1-1.el10.remi.noarch [134 KiB]	Changelog by Remi Collet (2026-10-04): - update to 14.4.1 - raise dependency on phpunit/php-text-template 6.0.1 - raise dependency on sebastian/environment 9.3.3
php-phpunit-php-code-coverage14-14.4.0-1.el10.remi.noarch [134 KiB]	Changelog by Remi Collet (2026-10-01): - update to 14.4.0

Update: php-phpunit-php-code-coverage12-12.5.8-1.el10.remi

Sun, 04 Oct 2026 05:06:17 +0000

Package: php-phpunit-php-code-coverage12
Summary: PHP code coverage information, version 12

Description:
Library that provides collection, processing, and rendering functionality for PHP code coverage information. This package provides version 12 of phpunit/php-code-coverage library. Autoloader: /usr/share/php/SebastianBergmann/CodeCoverage12/autoload.php

Changes:

php-phpunit-php-code-coverage12-12.5.8-1.el10.remi.noarch [327 KiB]

Changelog by Remi Collet (2026-10-04):

- update to 12.5.8
- raise dependency on nikic/php-parser 5.9.0
- raise dependency on phpunit/php-text-template 5.0.1

php-phpunit-php-code-coverage12-12.5.7-1.el10.remi.noarch [327 KiB]

Changelog by Remi Collet (2026-06-02):

- update to 12.5.7
- raise dependency on sebastian/environment 8.1.2
- raise dependency on sebastian/lines-of-code 4.0.1

Update: php-phpunit-php-text-template6-6.0.1-1.el10.remi

Sun, 04 Oct 2026 05:03:29 +0000

Package: php-phpunit-php-text-template6
Summary: Simple template engine, version 6

Description:
Simple template engine. This package provides version 6 of phpunit/php-text-template library. Autoloader: /usr/share/php/SebastianBergmann/Template6/autoload.php

Changes:

php-phpunit-php-text-template6-6.0.1-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2026-10-04): - update to 6.0.1
php-phpunit-php-text-template6-6.0.0-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2026-02-06): - update to 6.0.0 - raise dependency on PHP 8.4 - rename to php-phpunit-php-text-template6 - move to /usr/share/php/SebastianBergmann/Template6

Update: php-phpunit-php-text-template5-5.0.1-1.el10.remi

Sun, 04 Oct 2026 04:57:35 +0000

Package: php-phpunit-php-text-template5
Summary: Simple template engine, version 5

Description:
Simple template engine. This package provides version 5 of phpunit/php-text-template library. Autoloader: /usr/share/php/SebastianBergmann/Template5/autoload.php

Changes:

php-phpunit-php-text-template5-5.0.1-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2026-10-04): - update to 5.0.1
php-phpunit-php-text-template5-5.0.0-1.el10.remi.noarch [13 KiB]	Changelog by Remi Collet (2025-02-07): - update to 5.0.0 - raise dependency on PHP 8.3 - rename to php-phpunit-php-text-template5 - move to /usr/share/php/SebastianBergmann/Template5

Update: php83-php-pecl-uv-0.3.1-1.el10.remi

Sat, 03 Oct 2026 05:33:11 +0000

Package: php83-php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.3 as Software Collection (php83 by remi).

Changes:

php83-php-pecl-uv-0.3.1-1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php83-php-pecl-uv-0.3.0-2.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php82-php-pecl-uv-0.3.1-1.el10.remi

Sat, 03 Oct 2026 05:32:42 +0000

Package: php82-php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.2 as Software Collection (php82 by remi).

Changes:

php82-php-pecl-uv-0.3.1-1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php82-php-pecl-uv-0.3.0-2.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php81-php-pecl-uv-0.3.1-1.el10.remi

Sat, 03 Oct 2026 05:31:03 +0000

Package: php81-php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.1 as Software Collection (php81 by remi).

Changes:

php81-php-pecl-uv-0.3.1-1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php81-php-pecl-uv-0.3.0-2.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php85-php-pecl-uv-0.3.1-1.el10.remi

Sat, 03 Oct 2026 05:28:48 +0000

Package: php85-php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.5 as Software Collection (php85 by remi).

Changes:

php85-php-pecl-uv-0.3.1-1.el10.remi.x86_64 [77 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php85-php-pecl-uv-0.3.0-2.el10.remi.x86_64 [80 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php80-php-pecl-uv-0.3.1-1.el10.remi

Sat, 03 Oct 2026 05:28:10 +0000

Package: php80-php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.0 as Software Collection (php80 by remi).

Changes:

php80-php-pecl-uv-0.3.1-1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php80-php-pecl-uv-0.3.0-2.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php84-php-pecl-uv-0.3.1-1.el10.remi

Sat, 03 Oct 2026 05:27:48 +0000

Package: php84-php-pecl-uv
Summary: Libuv wrapper

Description:
The uv extension provides access to underlying libuv functions. Package built for PHP 8.4 as Software Collection (php84 by remi).

Changes:

php84-php-pecl-uv-0.3.1-1.el10.remi.x86_64 [78 KiB]	Changelog by Remi Collet (2026-10-03): - update to 0.3.1 - re-license spec file to CECILL-2.1 - add pie virtual provides - drop pear/pecl dependency - sources from github
php84-php-pecl-uv-0.3.0-2.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2023-08-24): - build out of sources tree

Update: php84-php-phalcon5-5.22.1-1.el10.remi

Fri, 02 Oct 2026 10:45:28 +0000

Package: php84-php-phalcon5
Summary: Phalcon Framework

Description:
Phalcon is a web framework implemented as a C extension offering high performance and lower resource consumption. Documentation: https://docs.phalcon.io/ Package built for PHP 8.4 as Software Collection (php84 by remi).

Changes:

php84-php-phalcon5-5.22.1-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-02): - update to 5.22.1
php84-php-phalcon5-5.22.0-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-30): - update to 5.22.0

Update: php83-php-phalcon5-5.22.1-1.el10.remi

Fri, 02 Oct 2026 10:29:37 +0000

Package: php83-php-phalcon5
Summary: Phalcon Framework

Changes:

php83-php-phalcon5-5.22.1-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-02): - update to 5.22.1
php83-php-phalcon5-5.22.0-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-30): - update to 5.22.0

Update: php-mock-phpunit2-2.16.0-1.el10.remi

Fri, 02 Oct 2026 09:48:45 +0000

Package: php-mock-phpunit2
Summary: Mock built-in PHP functions with PHPUnit.

Description:
Mock built-in PHP functions (e.g. time()) with PHPUnit. This package relies on PHP's namespace fallback policy. No further extension is needed.

Changes:

php-mock-phpunit2-2.16.0-1.el10.remi.noarch [18 KiB]	Changelog by Remi Collet (2026-10-02): - update to 2.16.0
php-mock-phpunit2-2.15.0-1.el10.remi.noarch [18 KiB]	Changelog by Remi Collet (2026-02-06): - update to 2.15.0 - allow phpunit13

Update: php81-php-phalcon5-5.22.1-1.el10.remi

Fri, 02 Oct 2026 09:33:04 +0000

Package: php81-php-phalcon5
Summary: Phalcon Framework

Changes:

php81-php-phalcon5-5.22.1-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-02): - update to 5.22.1
php81-php-phalcon5-5.22.0-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-30): - update to 5.22.0

Update: php82-php-phalcon5-5.22.1-1.el10.remi

Fri, 02 Oct 2026 09:28:59 +0000

Package: php82-php-phalcon5
Summary: Phalcon Framework

Changes:

php82-php-phalcon5-5.22.1-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-02): - update to 5.22.1
php82-php-phalcon5-5.22.0-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-30): - update to 5.22.0

Update: php85-php-phalcon5-5.22.1-1.el10.remi

Fri, 02 Oct 2026 09:23:57 +0000

Package: php85-php-phalcon5
Summary: Phalcon Framework

Changes:

php85-php-phalcon5-5.22.1-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-02): - update to 5.22.1
php85-php-phalcon5-5.22.0-1.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-30): - update to 5.22.0

Update: php80-php-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php
Summary: PHP scripting language for creating dynamic web sites

Description:
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. This package contains the module (often referred to as mod_php) which adds support for the PHP language to system Apache HTTP Server.

Changes:

php80-php-8.0.30-19.el10.remi.x86_64 [1.5 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-8.0.30-18.el10.remi.x86_64 [1.5 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-bcmath-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-bcmath
Summary: A module for PHP applications for using the bcmath library

Description:
The php80-php-bcmath package contains a dynamic shared object that will add support for using the bcmath library to PHP.

Changes:

php80-php-bcmath-8.0.30-19.el10.remi.x86_64 [35 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-bcmath-8.0.30-18.el10.remi.x86_64 [35 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-cli-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-cli
Summary: Command-line interface for PHP

Description:
The php80-php-cli package contains the command-line interface executing PHP scripts, /opt/remi/php80/root/usr/bin/php, and the CGI interface.

Changes:

php80-php-cli-8.0.30-19.el10.remi.x86_64 [1.9 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-cli-8.0.30-18.el10.remi.x86_64 [1.9 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-common-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-common
Summary: Common files for PHP

Description:
The php80-php-common package contains files used by both the php80-php package and the php80-php-cli package.

Changes:

php80-php-common-8.0.30-19.el10.remi.x86_64 [659 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-common-8.0.30-18.el10.remi.x86_64 [658 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-dba-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-dba
Summary: A database abstraction layer module for PHP applications

Description:
The php80-php-dba package contains a dynamic shared object that will add support for using the DBA database abstraction layer to PHP.

Changes:

php80-php-dba-8.0.30-19.el10.remi.x86_64 [37 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-dba-8.0.30-18.el10.remi.x86_64 [36 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-dbg-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-dbg
Summary: The interactive PHP debugger

Description:
The php80-php-dbg package contains the interactive PHP debugger.

Changes:

php80-php-dbg-8.0.30-19.el10.remi.x86_64 [1.6 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-dbg-8.0.30-18.el10.remi.x86_64 [1.6 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-devel-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-devel
Summary: Files needed for building PHP extensions

Description:
The php80-php-devel package contains the files needed for building PHP extensions. If you need to compile your own PHP extensions, you will need to install this package.

Changes:

php80-php-devel-8.0.30-19.el10.remi.x86_64 [660 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-devel-8.0.30-18.el10.remi.x86_64 [659 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-embedded-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-embedded
Summary: PHP library for embedding in applications

Description:
The php80-php-embedded package contains a library which can be embedded into applications to provide PHP scripting language support.

Changes:

php80-php-embedded-8.0.30-19.el10.remi.x86_64 [1.5 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-embedded-8.0.30-18.el10.remi.x86_64 [1.5 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-enchant-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-enchant
Summary: Enchant spelling extension for PHP applications

Description:
The php80-php-enchant package contains a dynamic shared object that will add support for using the enchant library to PHP.

Changes:

php80-php-enchant-8.0.30-19.el10.remi.x86_64 [19 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-enchant-8.0.30-18.el10.remi.x86_64 [19 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-ffi-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-ffi
Summary: Foreign Function Interface

Description:
FFI is one of the features that made Python and LuaJIT very useful for fast prototyping. It allows calling C functions and using C data types from pure scripting language and therefore develop “system code” more productively. For PHP, FFI opens a way to write PHP extensions and bindings to C libraries in pure PHP.

Changes:

php80-php-ffi-8.0.30-19.el10.remi.x86_64 [74 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-ffi-8.0.30-18.el10.remi.x86_64 [74 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-fpm-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-fpm
Summary: PHP FastCGI Process Manager

Description:
PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites.

Changes:

php80-php-fpm-8.0.30-19.el10.remi.x86_64 [1.5 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-fpm-8.0.30-18.el10.remi.x86_64 [1.5 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php80-php-gd-8.0.30-19.el10.remi

Fri, 02 Oct 2026 09:00:12 +0000

Package: php80-php-gd
Summary: A module for PHP applications for using the gd graphics library

Description:
The php80-php-gd package contains a dynamic shared object that will add support for using the gd graphics library to PHP.

Changes:

php80-php-gd-8.0.30-19.el10.remi.x86_64 [39 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Partially Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php80-php-gd-8.0.30-18.el10.remi.x86_64 [39 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260