Remi's RPM repository - Packages

Blog | Support | Repository | Wizard

php-xmlrpc - A module for PHP applications which use the XML-RPC protocol

Website:
http://www.php.net/
Licence:
PHP and BSD
Vendor:
Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine
Description:
The php-xmlrpc package contains a dynamic shared object that will add
support for the XML-RPC protocol to PHP.

Packages

php-xmlrpc-7.4.33-18.el8.remi.aarch64 [90 KiB] Changelog by Remi Collet (2024-09-26):
- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Logs from childrens may be altered
  CVE-2024-9026
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925
- use ICU 74.2
php-xmlrpc-7.4.33-17.el8.remi.aarch64 [90 KiB] Changelog by Remi Collet (2024-08-26):
- add backport for https://bugs.php.net/79589
  error:14095126:SSL routines:ssl3_read_n:unexpected eof while reading
php-xmlrpc-7.3.33-16.el8.remi.aarch64 [87 KiB] Changelog by Remi Collet (2024-09-26):
- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925
php-xmlrpc-7.3.33-14.el8.remi.aarch64 [87 KiB] Changelog by Remi Collet (2024-06-04):
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458
php-xmlrpc-7.2.34-22.el8.remi.aarch64 [85 KiB] Changelog by Remi Collet (2024-06-04):
- Fix filter bypass in filter_var FILTER_VALIDATE_URL
  CVE-2024-5458
php-xmlrpc-7.2.34-21.el8.remi.aarch64 [84 KiB] Changelog by Remi Collet (2024-04-10):
- use oracle client library version 21.13 on x86_64, 19.19 on aarch64
- Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
  CVE-2024-2756
- Fix password_verify can erroneously return true opening ATO risk
  CVE-2024-3096