Remi's RPM repository - enterprise - 10 - modular - x86_64

Update: php-pecl-yac-3.0.1-1.module_php.8.6.el10.remi

Sat, 24 Oct 2026 04:00:14 +0000

Package: php-pecl-yac
Summary: Lockless user data cache

Description:
Yac (Yet Another Cache) is a shared memory user data cache for PHP. It can be used to replace APC or local memcached. Yac is lockless, that means, it is very fast, but there could be a chance you will get a wrong data(depends on how many key slots are allocated and how many keys are stored), so you'd better make sure that your product is not very sensitive to that. Package built for PHP 8.6.

Changes:

php-pecl-yac-3.0.1-1.module_php.8.6.el10.remi.x86_64 [58 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.8.5.el10.remi.x86_64 [58 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.8.4.el10.remi.x86_64 [58 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.8.3.el10.remi.x86_64 [58 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.8.2.el10.remi.x86_64 [58 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.8.1.el10.remi.x86_64 [57 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.8.0.el10.remi.x86_64 [57 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-3.0.1-1.module_php.7.4.el10.remi.x86_64 [57 KiB]	Changelog by Remi Collet (2026-10-24): - update to 3.0.1
php-pecl-yac-2.4.2-1.module_php.8.6.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.8.5.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.8.4.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.8.3.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.8.2.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.8.1.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.8.0.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2
php-pecl-yac-2.4.2-1.module_php.7.4.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-10): - update to 2.4.2

Update: php-iliaal-fastchart-1.8.0-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 06:10:19 +0000

Package: php-iliaal-fastchart
Summary: Native C PHP extension for fast chart rendering

Description:
Native C PHP extension. 38 chart types behind a modern OO API with fluent setters and final classes. Line, area, bar, scatter, bubble, pie, radar, polar, surface, contour, gauge, gantt, box-plot, treemap, funnel, waterfall, heatmap, linear meter, network / chord / arc graphs, circle packing, violin and population pyramids, Venn, word clouds, pictograms, serpentine timelines, plus a deep StockChart (seven candle styles, SMA / EMA / WMA overlays, volume + indicator panes). SVG is the canonical render format. PNG / JPG / WebP outputs flatten text to glyph paths, run plutovg over the resulting SVG, and encode the RGBA buffer with libpng / libjpeg-turbo / libwebp. The same chart object serves a sharp <svg> for dashboards or a PNG for emails without rebuilding state. renderToFile() picks the encoder from the extension; renderPng() / renderJpeg() / renderWebp() / renderSvg() return bytes in-process. Package built for PHP 8.6.

Changes:

php-iliaal-fastchart-1.8.0-1.module_php.8.6.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-10-23): - update to 1.8.0
php-iliaal-fastchart-1.8.0-1.module_php.8.5.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-10-23): - update to 1.8.0
php-iliaal-fastchart-1.8.0-1.module_php.8.4.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-10-23): - update to 1.8.0
php-iliaal-fastchart-1.8.0-1.module_php.8.3.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-10-23): - update to 1.8.0
php-iliaal-fastchart-1.8.0-1.module_php.8.2.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-10-23): - update to 1.8.0
php-iliaal-fastchart-1.8.0-1.module_php.8.1.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-10-23): - update to 1.8.0
php-iliaal-fastchart-1.7.4-1.module_php.8.6.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-09-18): - update to 1.7.4
php-iliaal-fastchart-1.7.4-1.module_php.8.5.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-09-18): - update to 1.7.4
php-iliaal-fastchart-1.7.4-1.module_php.8.4.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-09-18): - update to 1.7.4
php-iliaal-fastchart-1.7.4-1.module_php.8.3.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-09-18): - update to 1.7.4
php-iliaal-fastchart-1.7.4-1.module_php.8.2.el10.remi.x86_64 [13.9 MiB]	Changelog by Remi Collet (2026-09-18): - update to 1.7.4
php-iliaal-fastchart-1.7.4-1.module_php.8.1.el10.remi.x86_64 [13.8 MiB]	Changelog by Remi Collet (2026-09-18): - update to 1.7.4

Update: php-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php
Summary: PHP scripting language for creating dynamic web sites

Description:
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Changes:

php-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [3.2 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [3.2 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-8.5.12-1.module_php.8.5.el10.remi.x86_64 [3.0 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-8.5.11-1.module_php.8.5.el10.remi.x86_64 [3.0 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-8.4.27-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-8.4.26-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-8.3.36-1.module_php.8.3.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-8.3.35-1.module_php.8.3.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-8.2.35-1.module_php.8.2.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-8.2.34-1.module_php.8.2.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-8.1.34-6.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-8.0.30-21.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-8.0.30-19.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-7.4.33-31.module_php.7.4.el10.remi.x86_64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-7.4.33-29.module_php.7.4.el10.remi.x86_64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-bcmath-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-bcmath
Summary: A module for PHP applications for using the bcmath library

Description:
The php-bcmath package contains a dynamic shared object that will add support for using the bcmath library to PHP.

Changes:

php-bcmath-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [51 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-bcmath-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [51 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-bcmath-8.5.12-1.module_php.8.5.el10.remi.x86_64 [51 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-bcmath-8.5.11-1.module_php.8.5.el10.remi.x86_64 [51 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-bcmath-8.4.27-1.module_php.8.4.el10.remi.x86_64 [49 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-bcmath-8.4.26-1.module_php.8.4.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-bcmath-8.3.36-1.module_php.8.3.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-bcmath-8.3.35-1.module_php.8.3.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-bcmath-8.2.35-1.module_php.8.2.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-bcmath-8.2.34-1.module_php.8.2.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-bcmath-8.1.34-6.module_php.8.1.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-bcmath-8.1.34-5.module_php.8.1.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-bcmath-8.0.30-21.module_php.8.0.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-bcmath-8.0.30-19.module_php.8.0.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-bcmath-7.4.33-31.module_php.7.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-bcmath-7.4.33-29.module_php.7.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-cli-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-cli
Summary: Command-line interface for PHP

Description:
The php-cli package contains the command-line interface executing PHP scripts, /usr/bin/php, and the CGI interface.

Changes:

php-cli-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [6.5 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-cli-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [6.4 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-cli-8.5.12-1.module_php.8.5.el10.remi.x86_64 [6.0 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-cli-8.5.11-1.module_php.8.5.el10.remi.x86_64 [6.0 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-cli-8.4.27-1.module_php.8.4.el10.remi.x86_64 [2.3 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-cli-8.4.26-1.module_php.8.4.el10.remi.x86_64 [2.3 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-cli-8.3.36-1.module_php.8.3.el10.remi.x86_64 [2.2 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-cli-8.3.35-1.module_php.8.3.el10.remi.x86_64 [2.2 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-cli-8.2.35-1.module_php.8.2.el10.remi.x86_64 [2.2 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-cli-8.2.34-1.module_php.8.2.el10.remi.x86_64 [2.1 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-cli-8.1.34-6.module_php.8.1.el10.remi.x86_64 [2.1 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-cli-8.1.34-5.module_php.8.1.el10.remi.x86_64 [2.1 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-cli-8.0.30-21.module_php.8.0.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-cli-8.0.30-19.module_php.8.0.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-cli-7.4.33-31.module_php.7.4.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-cli-7.4.33-29.module_php.7.4.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-common-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-common
Summary: Common files for PHP

Description:
The php-common package contains files used by both the php package and the php-cli package.

Changes:

php-common-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [837 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-common-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [834 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-common-8.5.12-1.module_php.8.5.el10.remi.x86_64 [820 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-common-8.5.11-1.module_php.8.5.el10.remi.x86_64 [815 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-common-8.4.27-1.module_php.8.4.el10.remi.x86_64 [767 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-common-8.4.26-1.module_php.8.4.el10.remi.x86_64 [763 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-common-8.3.36-1.module_php.8.3.el10.remi.x86_64 [713 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-common-8.3.35-1.module_php.8.3.el10.remi.x86_64 [712 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-common-8.2.35-1.module_php.8.2.el10.remi.x86_64 [686 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-common-8.2.34-1.module_php.8.2.el10.remi.x86_64 [685 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-common-8.1.34-6.module_php.8.1.el10.remi.x86_64 [673 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-common-8.1.34-5.module_php.8.1.el10.remi.x86_64 [673 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-common-8.0.30-21.module_php.8.0.el10.remi.x86_64 [664 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-common-8.0.30-19.module_php.8.0.el10.remi.x86_64 [663 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-common-7.4.33-31.module_php.7.4.el10.remi.x86_64 [642 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-common-7.4.33-29.module_php.7.4.el10.remi.x86_64 [642 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-dba-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-dba
Summary: A database abstraction layer module for PHP applications

Description:
The php-dba package contains a dynamic shared object that will add support for using the DBA database abstraction layer to PHP.

Changes:

php-dba-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [43 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-dba-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [43 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-dba-8.5.12-1.module_php.8.5.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-dba-8.5.11-1.module_php.8.5.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-dba-8.4.27-1.module_php.8.4.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-dba-8.4.26-1.module_php.8.4.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-dba-8.3.36-1.module_php.8.3.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-dba-8.3.35-1.module_php.8.3.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-dba-8.2.35-1.module_php.8.2.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-dba-8.2.34-1.module_php.8.2.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-dba-8.1.34-6.module_php.8.1.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dba-8.1.34-5.module_php.8.1.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dba-8.0.30-21.module_php.8.0.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dba-8.0.30-19.module_php.8.0.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dba-7.4.33-31.module_php.7.4.el10.remi.x86_64 [38 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dba-7.4.33-29.module_php.7.4.el10.remi.x86_64 [38 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-dbg-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-dbg
Summary: The interactive PHP debugger

Description:
The php-dbg package contains the interactive PHP debugger.

Changes:

php-dbg-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [3.3 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-dbg-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [3.3 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-dbg-8.5.12-1.module_php.8.5.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-dbg-8.5.11-1.module_php.8.5.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-dbg-8.4.27-1.module_php.8.4.el10.remi.x86_64 [2.0 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-dbg-8.4.26-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-dbg-8.3.36-1.module_php.8.3.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-dbg-8.3.35-1.module_php.8.3.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-dbg-8.2.35-1.module_php.8.2.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-dbg-8.2.34-1.module_php.8.2.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-dbg-8.1.34-6.module_php.8.1.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dbg-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dbg-8.0.30-21.module_php.8.0.el10.remi.x86_64 [1.6 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dbg-8.0.30-19.module_php.8.0.el10.remi.x86_64 [1.6 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dbg-7.4.33-31.module_php.7.4.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dbg-7.4.33-29.module_php.7.4.el10.remi.x86_64 [1.6 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-devel-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-devel
Summary: Files needed for building PHP extensions

Description:
The php-devel package contains the files needed for building PHP extensions. If you need to compile your own PHP extensions, you will need to install this package.

Changes:

php-devel-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [843 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-devel-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [842 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-devel-8.5.12-1.module_php.8.5.el10.remi.x86_64 [820 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-devel-8.5.11-1.module_php.8.5.el10.remi.x86_64 [818 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-devel-8.4.27-1.module_php.8.4.el10.remi.x86_64 [786 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-devel-8.4.26-1.module_php.8.4.el10.remi.x86_64 [784 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-devel-8.3.36-1.module_php.8.3.el10.remi.x86_64 [722 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-devel-8.3.35-1.module_php.8.3.el10.remi.x86_64 [721 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-devel-8.2.35-1.module_php.8.2.el10.remi.x86_64 [708 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-devel-8.2.34-1.module_php.8.2.el10.remi.x86_64 [705 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-devel-8.1.34-6.module_php.8.1.el10.remi.x86_64 [685 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-devel-8.1.34-5.module_php.8.1.el10.remi.x86_64 [685 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-devel-8.0.30-21.module_php.8.0.el10.remi.x86_64 [662 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-devel-8.0.30-19.module_php.8.0.el10.remi.x86_64 [661 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-devel-7.4.33-31.module_php.7.4.el10.remi.x86_64 [623 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-devel-7.4.33-29.module_php.7.4.el10.remi.x86_64 [623 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-embedded-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-embedded
Summary: PHP library for embedding in applications

Description:
The php-embedded package contains a library which can be embedded into applications to provide PHP scripting language support.

Changes:

php-embedded-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [3.2 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-embedded-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [3.2 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-embedded-8.5.12-1.module_php.8.5.el10.remi.x86_64 [3.0 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-embedded-8.5.11-1.module_php.8.5.el10.remi.x86_64 [3.0 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-embedded-8.4.27-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-embedded-8.4.26-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-embedded-8.3.36-1.module_php.8.3.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-embedded-8.3.35-1.module_php.8.3.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-embedded-8.2.35-1.module_php.8.2.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-embedded-8.2.34-1.module_php.8.2.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-embedded-8.1.34-6.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-embedded-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-embedded-8.0.30-21.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-embedded-8.0.30-19.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-embedded-7.4.33-31.module_php.7.4.el10.remi.x86_64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-embedded-7.4.33-29.module_php.7.4.el10.remi.x86_64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-enchant-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-enchant
Summary: Enchant spelling extension for PHP applications

Description:
The php-enchant package contains a dynamic shared object that will add support for using the enchant library to PHP.

Changes:

php-enchant-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [24 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-enchant-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [24 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-enchant-8.5.12-1.module_php.8.5.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-enchant-8.5.11-1.module_php.8.5.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-enchant-8.4.27-1.module_php.8.4.el10.remi.x86_64 [22 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-enchant-8.4.26-1.module_php.8.4.el10.remi.x86_64 [22 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-enchant-8.3.36-1.module_php.8.3.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-enchant-8.3.35-1.module_php.8.3.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-enchant-8.2.35-1.module_php.8.2.el10.remi.x86_64 [17 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-enchant-8.2.34-1.module_php.8.2.el10.remi.x86_64 [18 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-enchant-8.1.34-6.module_php.8.1.el10.remi.x86_64 [19 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-enchant-8.1.34-5.module_php.8.1.el10.remi.x86_64 [19 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-enchant-8.0.30-21.module_php.8.0.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-enchant-8.0.30-19.module_php.8.0.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-enchant-7.4.33-31.module_php.7.4.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-enchant-7.4.33-29.module_php.7.4.el10.remi.x86_64 [20 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-ffi-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-ffi
Summary: Foreign Function Interface

Description:
FFI is one of the features that made Python and LuaJIT very useful for fast prototyping. It allows calling C functions and using C data types from pure scripting language and therefore develop “system code” more productively. For PHP, FFI opens a way to write PHP extensions and bindings to C libraries in pure PHP.

Changes:

php-ffi-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [83 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-ffi-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [83 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-ffi-8.5.12-1.module_php.8.5.el10.remi.x86_64 [83 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-ffi-8.5.11-1.module_php.8.5.el10.remi.x86_64 [83 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-ffi-8.4.27-1.module_php.8.4.el10.remi.x86_64 [82 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-ffi-8.4.26-1.module_php.8.4.el10.remi.x86_64 [82 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-ffi-8.3.36-1.module_php.8.3.el10.remi.x86_64 [80 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-ffi-8.3.35-1.module_php.8.3.el10.remi.x86_64 [80 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-ffi-8.2.35-1.module_php.8.2.el10.remi.x86_64 [76 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-ffi-8.2.34-1.module_php.8.2.el10.remi.x86_64 [77 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-ffi-8.1.34-6.module_php.8.1.el10.remi.x86_64 [76 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ffi-8.1.34-5.module_php.8.1.el10.remi.x86_64 [76 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ffi-8.0.30-21.module_php.8.0.el10.remi.x86_64 [75 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ffi-8.0.30-19.module_php.8.0.el10.remi.x86_64 [75 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ffi-7.4.33-31.module_php.7.4.el10.remi.x86_64 [74 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ffi-7.4.33-29.module_php.7.4.el10.remi.x86_64 [74 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-fpm-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-fpm
Summary: PHP FastCGI Process Manager

Description:
PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites.

Changes:

php-fpm-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [3.3 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-fpm-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [3.3 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-fpm-8.5.12-1.module_php.8.5.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-fpm-8.5.11-1.module_php.8.5.el10.remi.x86_64 [3.1 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-fpm-8.4.27-1.module_php.8.4.el10.remi.x86_64 [2.0 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-fpm-8.4.26-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-fpm-8.3.36-1.module_php.8.3.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-fpm-8.3.35-1.module_php.8.3.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-fpm-8.2.35-1.module_php.8.2.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-fpm-8.2.34-1.module_php.8.2.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-fpm-8.1.34-6.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-fpm-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-fpm-8.0.30-21.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-fpm-8.0.30-19.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-fpm-7.4.33-31.module_php.7.4.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-fpm-7.4.33-29.module_php.7.4.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-gd-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-gd
Summary: A module for PHP applications for using the gd graphics library

Description:
The php-gd package contains a dynamic shared object that will add support for using the gd graphics library to PHP.

Changes:

php-gd-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [53 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-gd-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [54 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-gd-8.5.12-1.module_php.8.5.el10.remi.x86_64 [52 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-gd-8.5.11-1.module_php.8.5.el10.remi.x86_64 [52 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-gd-8.4.27-1.module_php.8.4.el10.remi.x86_64 [51 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-gd-8.4.26-1.module_php.8.4.el10.remi.x86_64 [51 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-gd-8.3.36-1.module_php.8.3.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-gd-8.3.35-1.module_php.8.3.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-gd-8.2.35-1.module_php.8.2.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-gd-8.2.34-1.module_php.8.2.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-gd-8.1.34-6.module_php.8.1.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gd-8.1.34-5.module_php.8.1.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gd-8.0.30-21.module_php.8.0.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gd-8.0.30-19.module_php.8.0.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gd-7.4.33-31.module_php.7.4.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gd-7.4.33-29.module_php.7.4.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-gmp-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-gmp
Summary: A module for PHP applications for using the GNU MP library

Description:
These functions allow you to work with arbitrary-length integers using the GNU MP library.

Changes:

php-gmp-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-gmp-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-gmp-8.5.12-1.module_php.8.5.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-gmp-8.5.11-1.module_php.8.5.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-gmp-8.4.27-1.module_php.8.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-gmp-8.4.26-1.module_php.8.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-gmp-8.3.36-1.module_php.8.3.el10.remi.x86_64 [33 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-gmp-8.3.35-1.module_php.8.3.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-gmp-8.2.35-1.module_php.8.2.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-gmp-8.2.34-1.module_php.8.2.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-gmp-8.1.34-6.module_php.8.1.el10.remi.x86_64 [32 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gmp-8.1.34-5.module_php.8.1.el10.remi.x86_64 [32 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gmp-8.0.30-21.module_php.8.0.el10.remi.x86_64 [33 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gmp-8.0.30-19.module_php.8.0.el10.remi.x86_64 [33 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gmp-7.4.33-31.module_php.7.4.el10.remi.x86_64 [30 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gmp-7.4.33-29.module_php.7.4.el10.remi.x86_64 [30 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-intl-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-intl
Summary: Internationalization extension for PHP applications

Description:
The php-intl package contains a dynamic shared object that will add support for using the ICU library to PHP.

Changes:

php-intl-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [197 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-intl-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [197 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-intl-8.5.12-1.module_php.8.5.el10.remi.x86_64 [189 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-intl-8.5.11-1.module_php.8.5.el10.remi.x86_64 [188 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-intl-8.4.27-1.module_php.8.4.el10.remi.x86_64 [183 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-intl-8.4.26-1.module_php.8.4.el10.remi.x86_64 [182 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-intl-8.3.36-1.module_php.8.3.el10.remi.x86_64 [166 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-intl-8.3.35-1.module_php.8.3.el10.remi.x86_64 [165 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-intl-8.2.35-1.module_php.8.2.el10.remi.x86_64 [160 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-intl-8.2.34-1.module_php.8.2.el10.remi.x86_64 [160 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-intl-8.1.34-6.module_php.8.1.el10.remi.x86_64 [146 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-intl-8.1.34-5.module_php.8.1.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-intl-8.0.30-21.module_php.8.0.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-intl-8.0.30-19.module_php.8.0.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-intl-7.4.33-31.module_php.7.4.el10.remi.x86_64 [144 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-intl-7.4.33-29.module_php.7.4.el10.remi.x86_64 [144 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-ldap-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-ldap
Summary: A module for PHP applications that use LDAP

Description:
The php-ldap adds Lightweight Directory Access Protocol (LDAP) support to PHP. LDAP is a set of protocols for accessing directory services over the Internet. PHP is an HTML-embedded scripting language.

Changes:

php-ldap-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [48 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-ldap-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [48 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-ldap-8.5.12-1.module_php.8.5.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-ldap-8.5.11-1.module_php.8.5.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-ldap-8.4.27-1.module_php.8.4.el10.remi.x86_64 [46 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-ldap-8.4.26-1.module_php.8.4.el10.remi.x86_64 [46 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-ldap-8.3.36-1.module_php.8.3.el10.remi.x86_64 [44 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-ldap-8.3.35-1.module_php.8.3.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-ldap-8.2.35-1.module_php.8.2.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-ldap-8.2.34-1.module_php.8.2.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-ldap-8.1.34-6.module_php.8.1.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ldap-8.1.34-5.module_php.8.1.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ldap-8.0.30-21.module_php.8.0.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ldap-8.0.30-19.module_php.8.0.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ldap-7.4.33-31.module_php.7.4.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ldap-7.4.33-29.module_php.7.4.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-litespeed-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-litespeed
Summary: LiteSpeed Web Server PHP support

Description:
The php-litespeed package provides the /usr/bin/lsphp command used by the LiteSpeed Web Server (LSAPI enabled PHP).

Changes:

php-litespeed-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [3.2 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-litespeed-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [3.2 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-litespeed-8.5.12-1.module_php.8.5.el10.remi.x86_64 [3.0 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-litespeed-8.5.11-1.module_php.8.5.el10.remi.x86_64 [3.0 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-litespeed-8.4.27-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-litespeed-8.4.26-1.module_php.8.4.el10.remi.x86_64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-litespeed-8.3.36-1.module_php.8.3.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-litespeed-8.3.35-1.module_php.8.3.el10.remi.x86_64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-litespeed-8.2.35-1.module_php.8.2.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-litespeed-8.2.34-1.module_php.8.2.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-litespeed-8.1.34-6.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-litespeed-8.1.34-5.module_php.8.1.el10.remi.x86_64 [1.7 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-litespeed-8.0.30-21.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-litespeed-8.0.30-19.module_php.8.0.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-litespeed-7.4.33-31.module_php.7.4.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-litespeed-7.4.33-29.module_php.7.4.el10.remi.x86_64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-mbstring-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-mbstring
Summary: A module for PHP applications which need multi-byte string handling

Description:
The php-mbstring package contains a dynamic shared object that will add support for multi-byte string handling to PHP.

Changes:

php-mbstring-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [516 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-mbstring-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [514 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-mbstring-8.5.12-1.module_php.8.5.el10.remi.x86_64 [531 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-mbstring-8.5.11-1.module_php.8.5.el10.remi.x86_64 [531 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-mbstring-8.4.27-1.module_php.8.4.el10.remi.x86_64 [531 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-mbstring-8.4.26-1.module_php.8.4.el10.remi.x86_64 [529 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-mbstring-8.3.36-1.module_php.8.3.el10.remi.x86_64 [521 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-mbstring-8.3.35-1.module_php.8.3.el10.remi.x86_64 [520 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-mbstring-8.2.35-1.module_php.8.2.el10.remi.x86_64 [518 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-mbstring-8.2.34-1.module_php.8.2.el10.remi.x86_64 [518 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-mbstring-8.1.34-6.module_php.8.1.el10.remi.x86_64 [469 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mbstring-8.1.34-5.module_php.8.1.el10.remi.x86_64 [469 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mbstring-8.0.30-21.module_php.8.0.el10.remi.x86_64 [464 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mbstring-8.0.30-19.module_php.8.0.el10.remi.x86_64 [464 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mbstring-7.4.33-31.module_php.7.4.el10.remi.x86_64 [465 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mbstring-7.4.33-29.module_php.7.4.el10.remi.x86_64 [465 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-mysqlnd-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-mysqlnd
Summary: A module for PHP applications that use MySQL databases

Description:
The php-mysqlnd package contains a dynamic shared object that will add MySQL database support to PHP. MySQL is an object-relational database management system. PHP is an HTML-embeddable scripting language. If you need MySQL support for PHP applications, you will need to install this package and the php package. This package use the MySQL Native Driver

Changes:

php-mysqlnd-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [146 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-mysqlnd-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [146 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-mysqlnd-8.5.12-1.module_php.8.5.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-mysqlnd-8.5.11-1.module_php.8.5.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-mysqlnd-8.4.27-1.module_php.8.4.el10.remi.x86_64 [144 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-mysqlnd-8.4.26-1.module_php.8.4.el10.remi.x86_64 [144 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-mysqlnd-8.3.36-1.module_php.8.3.el10.remi.x86_64 [140 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-mysqlnd-8.3.35-1.module_php.8.3.el10.remi.x86_64 [140 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-mysqlnd-8.2.35-1.module_php.8.2.el10.remi.x86_64 [138 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-mysqlnd-8.2.34-1.module_php.8.2.el10.remi.x86_64 [138 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-mysqlnd-8.1.34-6.module_php.8.1.el10.remi.x86_64 [139 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mysqlnd-8.1.34-5.module_php.8.1.el10.remi.x86_64 [138 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mysqlnd-8.0.30-21.module_php.8.0.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mysqlnd-8.0.30-19.module_php.8.0.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mysqlnd-7.4.33-31.module_php.7.4.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mysqlnd-7.4.33-29.module_php.7.4.el10.remi.x86_64 [145 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-odbc-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-odbc
Summary: A module for PHP applications that use ODBC databases

Description:
The php-odbc package contains a dynamic shared object that will add database support through ODBC to PHP. ODBC is an open specification which provides a consistent API for developers to use for accessing data sources (which are often, but not always, databases). PHP is an HTML-embeddable scripting language. If you need ODBC support for PHP applications, you will need to install this package and the php package.

Changes:

php-odbc-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [59 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-odbc-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [59 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-odbc-8.5.12-1.module_php.8.5.el10.remi.x86_64 [55 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-odbc-8.5.11-1.module_php.8.5.el10.remi.x86_64 [55 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-odbc-8.4.27-1.module_php.8.4.el10.remi.x86_64 [54 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-odbc-8.4.26-1.module_php.8.4.el10.remi.x86_64 [54 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-odbc-8.3.36-1.module_php.8.3.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-odbc-8.3.35-1.module_php.8.3.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-odbc-8.2.35-1.module_php.8.2.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-odbc-8.2.34-1.module_php.8.2.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-odbc-8.1.34-6.module_php.8.1.el10.remi.x86_64 [44 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-odbc-8.1.34-5.module_php.8.1.el10.remi.x86_64 [44 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-odbc-8.0.30-21.module_php.8.0.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-odbc-8.0.30-19.module_php.8.0.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-odbc-7.4.33-31.module_php.7.4.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-odbc-7.4.33-29.module_php.7.4.el10.remi.x86_64 [45 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-pdo-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-pdo
Summary: A database access abstraction module for PHP applications

Description:
The php-pdo package contains a dynamic shared object that will add a database access abstraction layer to PHP. This module provides a common interface for accessing MySQL, PostgreSQL or other databases.

Changes:

php-pdo-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [99 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-pdo-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [99 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-pdo-8.5.12-1.module_php.8.5.el10.remi.x86_64 [98 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-pdo-8.5.11-1.module_php.8.5.el10.remi.x86_64 [97 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-pdo-8.4.27-1.module_php.8.4.el10.remi.x86_64 [95 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-pdo-8.4.26-1.module_php.8.4.el10.remi.x86_64 [94 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-pdo-8.3.36-1.module_php.8.3.el10.remi.x86_64 [87 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-pdo-8.3.35-1.module_php.8.3.el10.remi.x86_64 [87 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-pdo-8.2.35-1.module_php.8.2.el10.remi.x86_64 [83 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-pdo-8.2.34-1.module_php.8.2.el10.remi.x86_64 [83 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-pdo-8.1.34-6.module_php.8.1.el10.remi.x86_64 [81 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-8.1.34-5.module_php.8.1.el10.remi.x86_64 [81 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pdo-8.0.30-21.module_php.8.0.el10.remi.x86_64 [82 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-8.0.30-19.module_php.8.0.el10.remi.x86_64 [82 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pdo-7.4.33-31.module_php.7.4.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-7.4.33-29.module_php.7.4.el10.remi.x86_64 [79 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-pdo-dblib-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-pdo-dblib
Summary: PDO driver for Microsoft SQL Server and Sybase databases

Description:
The php-pdo-dblib package contains a dynamic shared object that implements the PHP Data Objects (PDO) interface to enable access from PHP to Microsoft SQL Server and Sybase databases through the FreeTDS library.

Changes:

php-pdo-dblib-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-pdo-dblib-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-pdo-dblib-8.5.12-1.module_php.8.5.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-pdo-dblib-8.5.11-1.module_php.8.5.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-pdo-dblib-8.4.27-1.module_php.8.4.el10.remi.x86_64 [26 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-pdo-dblib-8.4.26-1.module_php.8.4.el10.remi.x86_64 [26 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-pdo-dblib-8.3.36-1.module_php.8.3.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-pdo-dblib-8.3.35-1.module_php.8.3.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-pdo-dblib-8.2.35-1.module_php.8.2.el10.remi.x86_64 [21 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-pdo-dblib-8.2.34-1.module_php.8.2.el10.remi.x86_64 [21 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-pdo-dblib-8.1.34-6.module_php.8.1.el10.remi.x86_64 [22 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-dblib-8.1.34-5.module_php.8.1.el10.remi.x86_64 [22 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pdo-dblib-8.0.30-21.module_php.8.0.el10.remi.x86_64 [24 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-dblib-8.0.30-19.module_php.8.0.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pdo-dblib-7.4.33-31.module_php.7.4.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-dblib-7.4.33-29.module_php.7.4.el10.remi.x86_64 [23 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-pdo-firebird-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-pdo-firebird
Summary: PDO driver for Interbase/Firebird databases

Description:
The php-pdo-firebird package contains the PDO driver for Interbase/Firebird databases.

Changes:

php-pdo-firebird-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-pdo-firebird-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-pdo-firebird-8.5.12-1.module_php.8.5.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-pdo-firebird-8.5.11-1.module_php.8.5.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-pdo-firebird-8.4.27-1.module_php.8.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-pdo-firebird-8.4.26-1.module_php.8.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-pdo-firebird-8.3.36-1.module_php.8.3.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-pdo-firebird-8.3.35-1.module_php.8.3.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-pdo-firebird-8.2.35-1.module_php.8.2.el10.remi.x86_64 [24 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-pdo-firebird-8.2.34-1.module_php.8.2.el10.remi.x86_64 [24 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-pdo-firebird-8.1.34-6.module_php.8.1.el10.remi.x86_64 [25 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-firebird-8.1.34-5.module_php.8.1.el10.remi.x86_64 [25 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pdo-firebird-8.0.30-21.module_php.8.0.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-firebird-8.0.30-19.module_php.8.0.el10.remi.x86_64 [27 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pdo-firebird-7.4.33-31.module_php.7.4.el10.remi.x86_64 [26 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pdo-firebird-7.4.33-29.module_php.7.4.el10.remi.x86_64 [25 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-pgsql-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-pgsql
Summary: A PostgreSQL database module for PHP

Description:
The php-pgsql package add PostgreSQL database support to PHP. PostgreSQL is an object-relational database management system that supports almost all SQL constructs. PHP is an HTML-embedded scripting language. If you need back-end support for PostgreSQL, you should install this package in addition to the main php package.

Changes:

php-pgsql-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [94 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-pgsql-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [93 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-pgsql-8.5.12-1.module_php.8.5.el10.remi.x86_64 [94 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-pgsql-8.5.11-1.module_php.8.5.el10.remi.x86_64 [93 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-pgsql-8.4.27-1.module_php.8.4.el10.remi.x86_64 [91 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-pgsql-8.4.26-1.module_php.8.4.el10.remi.x86_64 [91 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-pgsql-8.3.36-1.module_php.8.3.el10.remi.x86_64 [76 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-pgsql-8.3.35-1.module_php.8.3.el10.remi.x86_64 [76 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-pgsql-8.2.35-1.module_php.8.2.el10.remi.x86_64 [72 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-pgsql-8.2.34-1.module_php.8.2.el10.remi.x86_64 [72 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-pgsql-8.1.34-6.module_php.8.1.el10.remi.x86_64 [73 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pgsql-8.1.34-5.module_php.8.1.el10.remi.x86_64 [73 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pgsql-8.0.30-21.module_php.8.0.el10.remi.x86_64 [72 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pgsql-8.0.30-19.module_php.8.0.el10.remi.x86_64 [72 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-pgsql-7.4.33-31.module_php.7.4.el10.remi.x86_64 [72 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-pgsql-7.4.33-29.module_php.7.4.el10.remi.x86_64 [72 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-process-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-process
Summary: Modules for PHP script using system process interfaces

Description:
The php-process package contains dynamic shared objects which add support to PHP using system interfaces for inter-process communication.

Changes:

php-process-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-process-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-process-8.5.12-1.module_php.8.5.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-process-8.5.11-1.module_php.8.5.el10.remi.x86_64 [47 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-process-8.4.27-1.module_php.8.4.el10.remi.x86_64 [46 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-process-8.4.26-1.module_php.8.4.el10.remi.x86_64 [46 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-process-8.3.36-1.module_php.8.3.el10.remi.x86_64 [43 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-process-8.3.35-1.module_php.8.3.el10.remi.x86_64 [43 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-process-8.2.35-1.module_php.8.2.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-process-8.2.34-1.module_php.8.2.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-process-8.1.34-6.module_php.8.1.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-process-8.1.34-5.module_php.8.1.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-process-8.0.30-21.module_php.8.0.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-process-8.0.30-19.module_php.8.0.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-process-7.4.33-31.module_php.7.4.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-process-7.4.33-29.module_php.7.4.el10.remi.x86_64 [40 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-snmp-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-snmp
Summary: A module for PHP applications that query SNMP-managed devices

Description:
The php-snmp package contains a dynamic shared object that will add support for querying SNMP devices to PHP. PHP is an HTML-embeddable scripting language. If you need SNMP support for PHP applications, you will need to install this package and the php package.

Changes:

php-snmp-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-snmp-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [41 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-snmp-8.5.12-1.module_php.8.5.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-snmp-8.5.11-1.module_php.8.5.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-snmp-8.4.27-1.module_php.8.4.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-snmp-8.4.26-1.module_php.8.4.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-snmp-8.3.36-1.module_php.8.3.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-snmp-8.3.35-1.module_php.8.3.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-snmp-8.2.35-1.module_php.8.2.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-snmp-8.2.34-1.module_php.8.2.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-snmp-8.1.34-6.module_php.8.1.el10.remi.x86_64 [32 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-snmp-8.1.34-5.module_php.8.1.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-snmp-8.0.30-21.module_php.8.0.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-snmp-8.0.30-19.module_php.8.0.el10.remi.x86_64 [32 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-snmp-7.4.33-31.module_php.7.4.el10.remi.x86_64 [30 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-snmp-7.4.33-29.module_php.7.4.el10.remi.x86_64 [30 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-soap-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-soap
Summary: A module for PHP applications that use the SOAP protocol

Description:
The php-soap package contains a dynamic shared object that will add support to PHP for using the SOAP web services protocol.

Changes:

php-soap-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [157 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-soap-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [153 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-soap-8.5.12-1.module_php.8.5.el10.remi.x86_64 [155 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-soap-8.5.11-1.module_php.8.5.el10.remi.x86_64 [152 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-soap-8.4.27-1.module_php.8.4.el10.remi.x86_64 [153 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-soap-8.4.26-1.module_php.8.4.el10.remi.x86_64 [150 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-soap-8.3.36-1.module_php.8.3.el10.remi.x86_64 [149 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-soap-8.3.35-1.module_php.8.3.el10.remi.x86_64 [146 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-soap-8.2.35-1.module_php.8.2.el10.remi.x86_64 [146 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-soap-8.2.34-1.module_php.8.2.el10.remi.x86_64 [142 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-soap-8.1.34-6.module_php.8.1.el10.remi.x86_64 [142 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-soap-8.1.34-5.module_php.8.1.el10.remi.x86_64 [142 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-soap-8.0.30-21.module_php.8.0.el10.remi.x86_64 [136 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-soap-8.0.30-19.module_php.8.0.el10.remi.x86_64 [136 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-soap-7.4.33-31.module_php.7.4.el10.remi.x86_64 [136 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-soap-7.4.33-29.module_php.7.4.el10.remi.x86_64 [136 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-sodium-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-sodium
Summary: Wrapper for the Sodium cryptographic library

Description:
The php-sodium package provides a simple, low-level PHP extension for the libsodium cryptographic library.

Changes:

php-sodium-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-sodium-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [50 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-sodium-8.5.12-1.module_php.8.5.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-sodium-8.5.11-1.module_php.8.5.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-sodium-8.4.27-1.module_php.8.4.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-sodium-8.4.26-1.module_php.8.4.el10.remi.x86_64 [42 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-sodium-8.3.36-1.module_php.8.3.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-sodium-8.3.35-1.module_php.8.3.el10.remi.x86_64 [39 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-sodium-8.2.35-1.module_php.8.2.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-sodium-8.2.34-1.module_php.8.2.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-sodium-8.1.34-6.module_php.8.1.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-sodium-8.1.34-5.module_php.8.1.el10.remi.x86_64 [37 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-sodium-8.0.30-21.module_php.8.0.el10.remi.x86_64 [36 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-sodium-8.0.30-19.module_php.8.0.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-sodium-7.4.33-31.module_php.7.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-sodium-7.4.33-29.module_php.7.4.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682

Update: php-tidy-8.6.0~RC4-1.module_php.8.6.el10.remi

Fri, 23 Oct 2026 05:08:12 +0000

Package: php-tidy
Summary: Standard PHP module provides tidy library support

Description:
The php-tidy package contains a dynamic shared object that will add support for using the tidy library to PHP.

Changes:

php-tidy-8.6.0~RC4-1.module_php.8.6.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-tidy-8.6.0~RC3-1.module_php.8.6.el10.remi.x86_64 [35 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-tidy-8.5.12-1.module_php.8.5.el10.remi.x86_64 [34 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-tidy-8.5.11-1.module_php.8.5.el10.remi.x86_64 [33 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-tidy-8.4.27-1.module_php.8.4.el10.remi.x86_64 [33 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-tidy-8.4.26-1.module_php.8.4.el10.remi.x86_64 [33 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-tidy-8.3.36-1.module_php.8.3.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-tidy-8.3.35-1.module_php.8.3.el10.remi.x86_64 [31 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-tidy-8.2.35-1.module_php.8.2.el10.remi.x86_64 [28 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-tidy-8.2.34-1.module_php.8.2.el10.remi.x86_64 [28 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-tidy-8.1.34-6.module_php.8.1.el10.remi.x86_64 [29 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-tidy-8.1.34-5.module_php.8.1.el10.remi.x86_64 [29 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-tidy-8.0.30-21.module_php.8.0.el10.remi.x86_64 [30 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-tidy-8.0.30-19.module_php.8.0.el10.remi.x86_64 [30 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-tidy-7.4.33-31.module_php.7.4.el10.remi.x86_64 [29 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-tidy-7.4.33-29.module_php.7.4.el10.remi.x86_64 [29 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682