| Name: | php-cli |
|---|---|
| Version: | 8.0.30 |
| Release: | 5.el9_7 |
| Architecture: | aarch64 |
| Group: | Unspecified |
| Size: | 9604643 |
| License: | PHP and Zend and BSD and MIT and ASL 1.0 and NCSA and PostgreSQL |
| RPM: | php-cli-8.0.30-5.el9_7.aarch64.rpm |
| Source RPM: | php-8.0.30-5.el9_7.src.rpm |
| Build Date: | Tue Feb 17 2026 |
| Build Host: | build-ol9-aarch64.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.php.net/ |
| Summary: | Command-line interface for PHP |
| Description: | The php-cli package contains the command-line interface executing PHP scripts, /usr/bin/php, and the CGI interface. |
- Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177
- Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections
- Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217
- Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096