Remi's RPM repository - enterprise - 9 - debug-remi - aarch64

Update: php81-php-bcmath-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-bcmath-debuginfo
Summary: Debug information for package php81-php-bcmath

Description:
This package provides debug information for package php81-php-bcmath. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-bcmath-debuginfo-8.1.34-5.el9.remi.aarch64 [51 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-bcmath-debuginfo-8.1.34-4.el9.remi.aarch64 [50 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-cli-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-cli-debuginfo
Summary: Debug information for package php81-php-cli

Description:
This package provides debug information for package php81-php-cli. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-cli-debuginfo-8.1.34-5.el9.remi.aarch64 [9.3 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-cli-debuginfo-8.1.34-4.el9.remi.aarch64 [9.3 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-common-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-common-debuginfo
Summary: Debug information for package php81-php-common

Description:
This package provides debug information for package php81-php-common. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-common-debuginfo-8.1.34-5.el9.remi.aarch64 [756 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-common-debuginfo-8.1.34-4.el9.remi.aarch64 [755 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-dba-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-dba-debuginfo
Summary: Debug information for package php81-php-dba

Description:
This package provides debug information for package php81-php-dba. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-dba-debuginfo-8.1.34-5.el9.remi.aarch64 [87 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-dba-debuginfo-8.1.34-4.el9.remi.aarch64 [86 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-dbg-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-dbg-debuginfo
Summary: Debug information for package php81-php-dbg

Description:
This package provides debug information for package php81-php-dbg. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-dbg-debuginfo-8.1.34-5.el9.remi.aarch64 [4.8 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-dbg-debuginfo-8.1.34-4.el9.remi.aarch64 [4.8 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-debuginfo
Summary: Debug information for package php81-php

Description:
This package provides debug information for package php81-php. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-debuginfo-8.1.34-5.el9.remi.aarch64 [9.0 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-debuginfo-8.1.34-4.el9.remi.aarch64 [9.0 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-embedded-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-embedded-debuginfo
Summary: Debug information for package php81-php-embedded

Description:
This package provides debug information for package php81-php-embedded. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-embedded-debuginfo-8.1.34-5.el9.remi.aarch64 [4.6 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-embedded-debuginfo-8.1.34-4.el9.remi.aarch64 [4.6 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-enchant-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-enchant-debuginfo
Summary: Debug information for package php81-php-enchant

Description:
This package provides debug information for package php81-php-enchant. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-enchant-debuginfo-8.1.34-5.el9.remi.aarch64 [26 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-enchant-debuginfo-8.1.34-4.el9.remi.aarch64 [25 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-ffi-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-ffi-debuginfo
Summary: Debug information for package php81-php-ffi

Description:
This package provides debug information for package php81-php-ffi. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-ffi-debuginfo-8.1.34-5.el9.remi.aarch64 [182 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-ffi-debuginfo-8.1.34-4.el9.remi.aarch64 [181 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-fpm-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-fpm-debuginfo
Summary: Debug information for package php81-php-fpm

Description:
This package provides debug information for package php81-php-fpm. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-fpm-debuginfo-8.1.34-5.el9.remi.aarch64 [4.7 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-fpm-debuginfo-8.1.34-4.el9.remi.aarch64 [4.7 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-gd-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-gd-debuginfo
Summary: Debug information for package php81-php-gd

Description:
This package provides debug information for package php81-php-gd. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-gd-debuginfo-8.1.34-5.el9.remi.aarch64 [67 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-gd-debuginfo-8.1.34-4.el9.remi.aarch64 [66 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-gmp-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-gmp-debuginfo
Summary: Debug information for package php81-php-gmp

Description:
This package provides debug information for package php81-php-gmp. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-gmp-debuginfo-8.1.34-5.el9.remi.aarch64 [58 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-gmp-debuginfo-8.1.34-4.el9.remi.aarch64 [57 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-imap-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-imap-debuginfo
Summary: Debug information for package php81-php-imap

Description:
This package provides debug information for package php81-php-imap. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-imap-debuginfo-8.1.34-5.el9.remi.aarch64 [79 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-imap-debuginfo-8.1.34-4.el9.remi.aarch64 [79 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-intl-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-intl-debuginfo
Summary: Debug information for package php81-php-intl

Description:
This package provides debug information for package php81-php-intl. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-intl-debuginfo-8.1.34-5.el9.remi.aarch64 [485 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-intl-debuginfo-8.1.34-4.el9.remi.aarch64 [484 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-ldap-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-ldap-debuginfo
Summary: Debug information for package php81-php-ldap

Description:
This package provides debug information for package php81-php-ldap. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-ldap-debuginfo-8.1.34-5.el9.remi.aarch64 [79 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-ldap-debuginfo-8.1.34-4.el9.remi.aarch64 [78 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-litespeed-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-litespeed-debuginfo
Summary: Debug information for package php81-php-litespeed

Description:
This package provides debug information for package php81-php-litespeed. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-litespeed-debuginfo-8.1.34-5.el9.remi.aarch64 [4.6 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-litespeed-debuginfo-8.1.34-4.el9.remi.aarch64 [4.6 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-mbstring-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-mbstring-debuginfo
Summary: Debug information for package php81-php-mbstring

Description:
This package provides debug information for package php81-php-mbstring. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-mbstring-debuginfo-8.1.34-5.el9.remi.aarch64 [280 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-mbstring-debuginfo-8.1.34-4.el9.remi.aarch64 [279 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-mysqlnd-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-mysqlnd-debuginfo
Summary: Debug information for package php81-php-mysqlnd

Description:
This package provides debug information for package php81-php-mysqlnd. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-mysqlnd-debuginfo-8.1.34-5.el9.remi.aarch64 [362 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-mysqlnd-debuginfo-8.1.34-4.el9.remi.aarch64 [359 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-oci8-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-oci8-debuginfo
Summary: Debug information for package php81-php-oci8

Description:
This package provides debug information for package php81-php-oci8. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-oci8-debuginfo-8.1.34-5.el9.remi.aarch64 [179 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-oci8-debuginfo-8.1.34-4.el9.remi.aarch64 [178 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-odbc-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-odbc-debuginfo
Summary: Debug information for package php81-php-odbc

Description:
This package provides debug information for package php81-php-odbc. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-odbc-debuginfo-8.1.34-5.el9.remi.aarch64 [78 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-odbc-debuginfo-8.1.34-4.el9.remi.aarch64 [77 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-opcache-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-opcache-debuginfo
Summary: Debug information for package php81-php-opcache

Description:
This package provides debug information for package php81-php-opcache. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-opcache-debuginfo-8.1.34-5.el9.remi.aarch64 [1.2 MiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-opcache-debuginfo-8.1.34-4.el9.remi.aarch64 [1.2 MiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-pdo-dblib-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-pdo-dblib-debuginfo
Summary: Debug information for package php81-php-pdo-dblib

Description:
This package provides debug information for package php81-php-pdo-dblib. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-pdo-dblib-debuginfo-8.1.34-5.el9.remi.aarch64 [38 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-pdo-dblib-debuginfo-8.1.34-4.el9.remi.aarch64 [37 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-pdo-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-pdo-debuginfo
Summary: Debug information for package php81-php-pdo

Description:
This package provides debug information for package php81-php-pdo. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-pdo-debuginfo-8.1.34-5.el9.remi.aarch64 [182 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-pdo-debuginfo-8.1.34-4.el9.remi.aarch64 [181 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-pdo-firebird-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-pdo-firebird-debuginfo
Summary: Debug information for package php81-php-pdo-firebird

Description:
This package provides debug information for package php81-php-pdo-firebird. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-pdo-firebird-debuginfo-8.1.34-5.el9.remi.aarch64 [46 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-pdo-firebird-debuginfo-8.1.34-4.el9.remi.aarch64 [45 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-pgsql-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-pgsql-debuginfo
Summary: Debug information for package php81-php-pgsql

Description:
This package provides debug information for package php81-php-pgsql. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-pgsql-debuginfo-8.1.34-5.el9.remi.aarch64 [154 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-pgsql-debuginfo-8.1.34-4.el9.remi.aarch64 [153 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-process-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-process-debuginfo
Summary: Debug information for package php81-php-process

Description:
This package provides debug information for package php81-php-process. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-process-debuginfo-8.1.34-5.el9.remi.aarch64 [67 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-process-debuginfo-8.1.34-4.el9.remi.aarch64 [67 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-pspell-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-pspell-debuginfo
Summary: Debug information for package php81-php-pspell

Description:
This package provides debug information for package php81-php-pspell. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-pspell-debuginfo-8.1.34-5.el9.remi.aarch64 [23 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-pspell-debuginfo-8.1.34-4.el9.remi.aarch64 [22 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-snmp-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-snmp-debuginfo
Summary: Debug information for package php81-php-snmp

Description:
This package provides debug information for package php81-php-snmp. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-snmp-debuginfo-8.1.34-5.el9.remi.aarch64 [66 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-snmp-debuginfo-8.1.34-4.el9.remi.aarch64 [65 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-soap-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-soap-debuginfo
Summary: Debug information for package php81-php-soap

Description:
This package provides debug information for package php81-php-soap. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-soap-debuginfo-8.1.34-5.el9.remi.aarch64 [458 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-soap-debuginfo-8.1.34-4.el9.remi.aarch64 [457 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260

Update: php81-php-sodium-debuginfo-8.1.34-5.el9.remi

Thu, 01 Oct 2026 13:47:09 +0000

Package: php81-php-sodium-debuginfo
Summary: Debug information for package php81-php-sodium

Description:
This package provides debug information for package php81-php-sodium. Debug information is useful when developing applications that use this package or when debugging this package.

Changes:

php81-php-sodium-debuginfo-8.1.34-5.el9.remi.aarch64 [61 KiB]

Changelog by Remi Collet (2026-10-01):

- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
  CVE-2026-93682

php81-php-sodium-debuginfo-8.1.34-4.el9.remi.aarch64 [60 KiB]

Changelog by Remi Collet (2026-07-30):

- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260