Remi's RPM repository - enterprise - 8 - modular - aarch64

Update: php-pecl-datadog-trace-1.26.1-1.module_php.8.5.el8.remi

Tue, 27 Oct 2026 13:54:57 +0000

Package: php-pecl-datadog-trace
Summary: APM and distributed tracing for PHP

Description:
The Datadog PHP Tracer brings APM and distributed tracing to PHP. Documentation: https://docs.datadoghq.com/tracing/languages/php/ Package built for PHP 8.5.

Changes:

php-pecl-datadog-trace-1.26.1-1.module_php.8.5.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.8.4.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.8.3.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.8.2.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.8.1.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.8.0.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.7.4.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.7.3.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.1-1.module_php.7.2.el8.remi.aarch64 [7.0 MiB]	Changelog by Remi Collet (2026-10-27): - update to 1.26.1
php-pecl-datadog-trace-1.26.0-1.module_php.8.5.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.8.4.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.8.3.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.8.2.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.8.1.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.8.0.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.7.4.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.7.3.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0
php-pecl-datadog-trace-1.26.0-1.module_php.7.2.el8.remi.aarch64 [6.9 MiB]	Changelog by Remi Collet (2026-10-09): - update to 1.26.0

Update: redis-8.10.3-1.module_redis.8.10.el8.remi

Tue, 27 Oct 2026 11:07:12 +0000

Package: redis
Summary: A persistent key-value database

Description:
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Redis also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Redis behave like a cache. You can use Redis from most programming languages also.

Changes:

redis-8.10.3-1.module_redis.8.10.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.10.3 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.10.2-1.module_redis.8.10.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.10.2 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.8.4-1.module_redis.8.8.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.8.4 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.8.3-1.module_redis.8.8.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.8.3 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.6.8-1.module_redis.8.6.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.6.8 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.6.7-1.module_redis.8.6.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.6.7 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.4.8-1.module_redis.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.4.8 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.4.7-1.module_redis.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.4.7 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.2.11-1.module_redis.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.2.11 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.2.10-1.module_redis.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.2.10 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-8.0.6-1.module_redis.8.0.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-02-24): - Redis 8.0.6 Released Mon 23 Feb 2026 10:00:00 IST - SECURITY: There is a security fix in the release
redis-8.0.5-1.module_redis.8.0.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2025-11-03): - Redis 8.0.5 Released Sun 2 Nov 2025 10:00:00 IST - Update urgency: HIGH: There are security fixes in the release.
redis-7.2.17-1.module_redis.7.2.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-27): - Redis 7.2.17 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-7.2.16-1.module_redis.7.2.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-08-18): - Redis 7.2.16 Released Mon 17 Aug 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-7.0.15-1.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2024-01-09): - Redis 7.0.15 Released Tue 09 Jan 2024 10:45:52 IST - Upgrade urgency SECURITY: CVE-2023-41056
redis-7.0.14-1.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2023-10-18): - Redis 7.0.14 Released Wed 18 Oct 2023 10:33:40 IDT - Upgrade urgency SECURITY: CVE-2023-45145
redis-6.2.24-1.module_redis.6.2.el8.remi.aarch64 [1.1 MiB]	Changelog by Remi Collet (2026-08-18): - Redis 6.2.24 Released Mon 17 Aug 2026 10:00:00 IST - Update urgency: SECURITY: There is a security fix in the release.
redis-6.2.23-1.module_redis.6.2.el8.remi.aarch64 [1.1 MiB]	Changelog by Remi Collet (2026-07-24): - Redis 6.2.23 Released Thu 23 Jul 2026 22:00:00 IST - Update urgency: SECURITY: There is a security fix in the release.
redis-6.0.20-1.el8.remi.aarch64 [1.0 MiB]	Changelog by Remi Collet (2023-07-10): - Redis 6.0.20 Released Mon July 10 12:00:00 IDT 2023 - Upgrade urgency SECURITY

Update: redis-devel-8.10.3-1.module_redis.8.10.el8.remi

Tue, 27 Oct 2026 11:07:12 +0000

Package: redis-devel
Summary: Development header for Redis module development

Description:
Header file required for building loadable Redis modules. Detailed API documentation is available in the redis-doc package.

Changes:

redis-devel-8.10.3-1.module_redis.8.10.el8.remi.aarch64 [72 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.10.3 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.10.2-1.module_redis.8.10.el8.remi.aarch64 [72 KiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.10.2 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.8.4-1.module_redis.8.8.el8.remi.aarch64 [72 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.8.4 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.8.3-1.module_redis.8.8.el8.remi.aarch64 [71 KiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.8.3 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.6.8-1.module_redis.8.6.el8.remi.aarch64 [71 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.6.8 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.6.7-1.module_redis.8.6.el8.remi.aarch64 [71 KiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.6.7 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.4.8-1.module_redis.8.4.el8.remi.aarch64 [70 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.4.8 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.4.7-1.module_redis.8.4.el8.remi.aarch64 [70 KiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.4.7 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.2.11-1.module_redis.8.2.el8.remi.aarch64 [70 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 8.2.11 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.2.10-1.module_redis.8.2.el8.remi.aarch64 [69 KiB]	Changelog by Remi Collet (2026-09-18): - Redis 8.2.10 Released Thu 17 Sep 2026 18:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-8.0.6-1.module_redis.8.0.el8.remi.aarch64 [68 KiB]	Changelog by Remi Collet (2026-02-24): - Redis 8.0.6 Released Mon 23 Feb 2026 10:00:00 IST - SECURITY: There is a security fix in the release
redis-devel-8.0.5-1.module_redis.8.0.el8.remi.aarch64 [68 KiB]	Changelog by Remi Collet (2025-11-03): - Redis 8.0.5 Released Sun 2 Nov 2025 10:00:00 IST - Update urgency: HIGH: There are security fixes in the release.
redis-devel-7.2.17-1.module_redis.7.2.el8.remi.aarch64 [52 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 7.2.17 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-7.2.16-1.module_redis.7.2.el8.remi.aarch64 [52 KiB]	Changelog by Remi Collet (2026-08-18): - Redis 7.2.16 Released Mon 17 Aug 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-devel-7.0.15-1.el8.remi.aarch64 [48 KiB]	Changelog by Remi Collet (2024-01-09): - Redis 7.0.15 Released Tue 09 Jan 2024 10:45:52 IST - Upgrade urgency SECURITY: CVE-2023-41056
redis-devel-7.0.14-1.el8.remi.aarch64 [48 KiB]	Changelog by Remi Collet (2023-10-18): - Redis 7.0.14 Released Wed 18 Oct 2023 10:33:40 IDT - Upgrade urgency SECURITY: CVE-2023-45145
redis-devel-6.2.24-1.module_redis.6.2.el8.remi.aarch64 [43 KiB]	Changelog by Remi Collet (2026-08-18): - Redis 6.2.24 Released Mon 17 Aug 2026 10:00:00 IST - Update urgency: SECURITY: There is a security fix in the release.
redis-devel-6.2.23-1.module_redis.6.2.el8.remi.aarch64 [43 KiB]	Changelog by Remi Collet (2026-07-24): - Redis 6.2.23 Released Thu 23 Jul 2026 22:00:00 IST - Update urgency: SECURITY: There is a security fix in the release.
redis-devel-6.0.20-1.el8.remi.aarch64 [40 KiB]	Changelog by Remi Collet (2023-07-10): - Redis 6.0.20 Released Mon July 10 12:00:00 IDT 2023 - Upgrade urgency SECURITY

Update: valkey-9.2.0~rc1-1.module_valkey.9.2.el8.remi

Tue, 22 Sep 2026 05:23:35 +0000

Package: valkey
Summary: A persistent key-value database

Description:
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. See https://valkey.io/topics/

Changes:

valkey-9.2.0~rc1-1.module_valkey.9.2.el8.remi.aarch64 [2.0 MiB]	Changelog by Remi Collet (2026-09-22): - Valkey 9.2.0-rc1
valkey-9.1.3-1.module_valkey.9.1.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.1.3 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-9.1.2-1.module_valkey.9.1.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.1.2 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-9.0.7-1.module_valkey.9.0.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.0.7 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-9.0.6-1.module_valkey.9.0.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.0.6 - Released Tue 01 September 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-8.1.11-1.module_valkey.8.1.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-27): - Valkey 8.1.11 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-8.1.10-1.module_valkey.8.1.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-01): - Valkey 8.1.10 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes

Update: valkey-devel-9.2.0~rc1-1.module_valkey.9.2.el8.remi

Tue, 22 Sep 2026 05:23:35 +0000

Package: valkey-devel
Summary: Development header for Valkey module development

Description:
Header file required for building loadable Valkey modules.

Changes:

valkey-devel-9.2.0~rc1-1.module_valkey.9.2.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-09-22): - Valkey 9.2.0-rc1
valkey-devel-9.1.3-1.module_valkey.9.1.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.1.3 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-devel-9.1.2-1.module_valkey.9.1.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.1.2 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-devel-9.0.7-1.module_valkey.9.0.el8.remi.aarch64 [33 KiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.0.7 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-devel-9.0.6-1.module_valkey.9.0.el8.remi.aarch64 [33 KiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.0.6 - Released Tue 01 September 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-devel-8.1.11-1.module_valkey.8.1.el8.remi.aarch64 [33 KiB]	Changelog by Remi Collet (2026-10-27): - Valkey 8.1.11 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-devel-8.1.10-1.module_valkey.8.1.el8.remi.aarch64 [33 KiB]	Changelog by Remi Collet (2026-09-01): - Valkey 8.1.10 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes

Update: valkey-rdma-9.2.0~rc1-1.module_valkey.9.2.el8.remi

Tue, 22 Sep 2026 05:23:35 +0000

Package: valkey-rdma
Summary: RDMA module for valkey

Description:
RDMA module for valkey. See https://valkey.io/topics/RDMA/

Changes:

valkey-rdma-9.2.0~rc1-1.module_valkey.9.2.el8.remi.aarch64 [38 KiB]	Changelog by Remi Collet (2026-09-22): - Valkey 9.2.0-rc1
valkey-rdma-9.1.3-1.module_valkey.9.1.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.1.3 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-rdma-9.1.2-1.module_valkey.9.1.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.1.2 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-rdma-9.0.7-1.module_valkey.9.0.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.0.7 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-rdma-9.0.6-1.module_valkey.9.0.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.0.6 - Released Tue 01 September 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-rdma-8.1.11-1.module_valkey.8.1.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-10-27): - Valkey 8.1.11 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-rdma-8.1.10-1.module_valkey.8.1.el8.remi.aarch64 [37 KiB]	Changelog by Remi Collet (2026-09-01): - Valkey 8.1.10 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes

Update: valkey-doc-9.2.0~rc1-1.module_valkey.9.2.el8.remi

Tue, 22 Sep 2026 05:29:31 +0000

Package: valkey-doc
Summary: Documentation and extra man pages for valkey

Description:
Documentation and extra man pages for valkey.

Changes:

valkey-doc-9.2.0~rc1-1.module_valkey.9.2.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-09-22): - Valkey 9.2.0-rc1
valkey-doc-9.1.3-1.module_valkey.9.1.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.1.3 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-doc-9.1.2-1.module_valkey.9.1.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.1.2 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-doc-9.0.7-1.module_valkey.9.0.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-10-27): - Valkey 9.0.7 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-doc-9.0.6-1.module_valkey.9.0.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-09-01): - Valkey 9.0.6 - Released Tue 01 September 2026 - Upgrade urgency SECURITY: This release includes security fixes
valkey-doc-8.1.11-1.module_valkey.8.1.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-10-27): - Valkey 8.1.11 - Released Mon 26 October 2026 - Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.
valkey-doc-8.1.10-1.module_valkey.8.1.el8.remi.noarch [1.3 MiB]	Changelog by Remi Collet (2026-09-01): - Valkey 8.1.10 - Released Mon 31 August 2026 - Upgrade urgency SECURITY: This release includes security fixes

Update: redis-doc-7.2.17-1.module_redis.7.2.el8.remi

Tue, 27 Oct 2026 10:39:57 +0000

Package: redis-doc
Summary: Documentation for Redis including man pages

Description:
Manual pages and detailed documentation for many aspects of Redis use, administration and development.

Changes:

redis-doc-7.2.17-1.module_redis.7.2.el8.remi.noarch [631 KiB]	Changelog by Remi Collet (2026-10-27): - Redis 7.2.17 Released Mon 26 Oct 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-doc-7.2.16-1.module_redis.7.2.el8.remi.noarch [631 KiB]	Changelog by Remi Collet (2026-08-18): - Redis 7.2.16 Released Mon 17 Aug 2026 10:00:00 IST - Update urgency: SECURITY: There are security fixes in the release.
redis-doc-7.0.15-1.el8.remi.noarch [626 KiB]	Changelog by Remi Collet (2024-01-09): - Redis 7.0.15 Released Tue 09 Jan 2024 10:45:52 IST - Upgrade urgency SECURITY: CVE-2023-41056
redis-doc-7.0.14-1.el8.remi.noarch [630 KiB]	Changelog by Remi Collet (2023-10-18): - Redis 7.0.14 Released Wed 18 Oct 2023 10:33:40 IDT - Upgrade urgency SECURITY: CVE-2023-45145
redis-doc-6.2.24-1.module_redis.6.2.el8.remi.noarch [629 KiB]	Changelog by Remi Collet (2026-08-18): - Redis 6.2.24 Released Mon 17 Aug 2026 10:00:00 IST - Update urgency: SECURITY: There is a security fix in the release.
redis-doc-6.2.23-1.module_redis.6.2.el8.remi.noarch [629 KiB]	Changelog by Remi Collet (2026-07-24): - Redis 6.2.23 Released Thu 23 Jul 2026 22:00:00 IST - Update urgency: SECURITY: There is a security fix in the release.

Update: php-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php
Summary: PHP scripting language for creating dynamic web sites

Description:
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server.

Changes:

php-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-8.5.12-1.module_php.8.5.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-8.5.11-1.module_php.8.5.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-8.4.27-1.module_php.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-8.4.26-1.module_php.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-8.3.36-1.module_php.8.3.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-8.3.35-1.module_php.8.3.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-8.2.35-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-8.2.34-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-8.1.34-6.module_php.8.1.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-8.1.34-5.module_php.8.1.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-8.0.30-21.module_php.8.0.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-8.0.30-19.module_php.8.0.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-7.4.33-31.module_php.7.4.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-7.4.33-29.module_php.7.4.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-7.3.33-24.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-7.3.33-23.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-7.2.34-31.module_php.7.2.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-7.2.34-30.module_php.7.2.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-bcmath-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-bcmath
Summary: A module for PHP applications for using the bcmath library

Description:
The php-bcmath package contains a dynamic shared object that will add support for using the bcmath library to PHP.

Changes:

php-bcmath-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [105 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-bcmath-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [105 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-bcmath-8.5.12-1.module_php.8.5.el8.remi.aarch64 [105 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-bcmath-8.5.11-1.module_php.8.5.el8.remi.aarch64 [105 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-bcmath-8.4.27-1.module_php.8.4.el8.remi.aarch64 [103 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-bcmath-8.4.26-1.module_php.8.4.el8.remi.aarch64 [103 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-bcmath-8.3.36-1.module_php.8.3.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-bcmath-8.3.35-1.module_php.8.3.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-bcmath-8.2.35-1.module_php.8.2.el8.remi.aarch64 [89 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-bcmath-8.2.34-1.module_php.8.2.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-bcmath-8.1.34-6.module_php.8.1.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-bcmath-8.1.34-5.module_php.8.1.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-bcmath-8.0.30-21.module_php.8.0.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-bcmath-8.0.30-19.module_php.8.0.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-bcmath-7.4.33-31.module_php.7.4.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-bcmath-7.4.33-29.module_php.7.4.el8.remi.aarch64 [84 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-bcmath-7.3.33-24.module_php.7.3.el8.remi.aarch64 [80 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-bcmath-7.3.33-23.module_php.7.3.el8.remi.aarch64 [79 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-bcmath-7.2.34-31.module_php.7.2.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-bcmath-7.2.34-30.module_php.7.2.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-cli-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-cli
Summary: Command-line interface for PHP

Description:
The php-cli package contains the command-line interface executing PHP scripts, /usr/bin/php, and the CGI interface.

Changes:

php-cli-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [5.8 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-cli-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [5.8 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-cli-8.5.12-1.module_php.8.5.el8.remi.aarch64 [5.6 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-cli-8.5.11-1.module_php.8.5.el8.remi.aarch64 [5.6 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-cli-8.4.27-1.module_php.8.4.el8.remi.aarch64 [3.6 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-cli-8.4.26-1.module_php.8.4.el8.remi.aarch64 [3.6 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-cli-8.3.36-1.module_php.8.3.el8.remi.aarch64 [3.5 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-cli-8.3.35-1.module_php.8.3.el8.remi.aarch64 [3.5 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-cli-8.2.35-1.module_php.8.2.el8.remi.aarch64 [3.4 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-cli-8.2.34-1.module_php.8.2.el8.remi.aarch64 [3.3 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-cli-8.1.34-6.module_php.8.1.el8.remi.aarch64 [3.3 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-cli-8.1.34-5.module_php.8.1.el8.remi.aarch64 [3.3 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-cli-8.0.30-21.module_php.8.0.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-cli-8.0.30-19.module_php.8.0.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-cli-7.4.33-31.module_php.7.4.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-cli-7.4.33-29.module_php.7.4.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-cli-7.3.33-24.module_php.7.3.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-cli-7.3.33-23.module_php.7.3.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-cli-7.2.34-31.module_php.7.2.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-cli-7.2.34-30.module_php.7.2.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-common-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-common
Summary: Common files for PHP

Description:
The php-common package contains files used by both the php package and the php-cli package.

Changes:

php-common-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [859 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-common-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [856 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-common-8.5.12-1.module_php.8.5.el8.remi.aarch64 [843 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-common-8.5.11-1.module_php.8.5.el8.remi.aarch64 [838 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-common-8.4.27-1.module_php.8.4.el8.remi.aarch64 [799 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-common-8.4.26-1.module_php.8.4.el8.remi.aarch64 [795 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-common-8.3.36-1.module_php.8.3.el8.remi.aarch64 [748 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-common-8.3.35-1.module_php.8.3.el8.remi.aarch64 [747 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-common-8.2.35-1.module_php.8.2.el8.remi.aarch64 [740 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-common-8.2.34-1.module_php.8.2.el8.remi.aarch64 [739 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-common-8.1.34-6.module_php.8.1.el8.remi.aarch64 [724 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-common-8.1.34-5.module_php.8.1.el8.remi.aarch64 [724 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-common-8.0.30-21.module_php.8.0.el8.remi.aarch64 [716 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-common-8.0.30-19.module_php.8.0.el8.remi.aarch64 [716 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-common-7.4.33-31.module_php.7.4.el8.remi.aarch64 [694 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-common-7.4.33-29.module_php.7.4.el8.remi.aarch64 [694 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-common-7.3.33-24.module_php.7.3.el8.remi.aarch64 [655 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-common-7.3.33-23.module_php.7.3.el8.remi.aarch64 [655 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-common-7.2.34-31.module_php.7.2.el8.remi.aarch64 [644 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-common-7.2.34-30.module_php.7.2.el8.remi.aarch64 [644 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-dba-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-dba
Summary: A database abstraction layer module for PHP applications

Description:
The php-dba package contains a dynamic shared object that will add support for using the DBA database abstraction layer to PHP.

Changes:

php-dba-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-dba-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-dba-8.5.12-1.module_php.8.5.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-dba-8.5.11-1.module_php.8.5.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-dba-8.4.27-1.module_php.8.4.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-dba-8.4.26-1.module_php.8.4.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-dba-8.3.36-1.module_php.8.3.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-dba-8.3.35-1.module_php.8.3.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-dba-8.2.35-1.module_php.8.2.el8.remi.aarch64 [89 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-dba-8.2.34-1.module_php.8.2.el8.remi.aarch64 [89 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-dba-8.1.34-6.module_php.8.1.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dba-8.1.34-5.module_php.8.1.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dba-8.0.30-21.module_php.8.0.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dba-8.0.30-19.module_php.8.0.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dba-7.4.33-31.module_php.7.4.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dba-7.4.33-29.module_php.7.4.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dba-7.3.33-24.module_php.7.3.el8.remi.aarch64 [80 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-dba-7.3.33-23.module_php.7.3.el8.remi.aarch64 [80 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-dba-7.2.34-31.module_php.7.2.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-dba-7.2.34-30.module_php.7.2.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-dbg-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-dbg
Summary: The interactive PHP debugger

Description:
The php-dbg package contains the interactive PHP debugger.

Changes:

php-dbg-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [3.0 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-dbg-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [3.0 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-dbg-8.5.12-1.module_php.8.5.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-dbg-8.5.11-1.module_php.8.5.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-dbg-8.4.27-1.module_php.8.4.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-dbg-8.4.26-1.module_php.8.4.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-dbg-8.3.36-1.module_php.8.3.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-dbg-8.3.35-1.module_php.8.3.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-dbg-8.2.35-1.module_php.8.2.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-dbg-8.2.34-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-dbg-8.1.34-6.module_php.8.1.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dbg-8.1.34-5.module_php.8.1.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dbg-8.0.30-21.module_php.8.0.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dbg-8.0.30-19.module_php.8.0.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dbg-7.4.33-31.module_php.7.4.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-dbg-7.4.33-29.module_php.7.4.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-dbg-7.3.33-24.module_php.7.3.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-dbg-7.3.33-23.module_php.7.3.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-dbg-7.2.34-31.module_php.7.2.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-dbg-7.2.34-30.module_php.7.2.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-devel-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-devel
Summary: Files needed for building PHP extensions

Description:
The php-devel package contains the files needed for building PHP extensions. If you need to compile your own PHP extensions, you will need to install this package.

Changes:

php-devel-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [1018 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-devel-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [1016 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-devel-8.5.12-1.module_php.8.5.el8.remi.aarch64 [993 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-devel-8.5.11-1.module_php.8.5.el8.remi.aarch64 [990 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-devel-8.4.27-1.module_php.8.4.el8.remi.aarch64 [929 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-devel-8.4.26-1.module_php.8.4.el8.remi.aarch64 [927 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-devel-8.3.36-1.module_php.8.3.el8.remi.aarch64 [857 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-devel-8.3.35-1.module_php.8.3.el8.remi.aarch64 [854 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-devel-8.2.35-1.module_php.8.2.el8.remi.aarch64 [839 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-devel-8.2.34-1.module_php.8.2.el8.remi.aarch64 [836 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-devel-8.1.34-6.module_php.8.1.el8.remi.aarch64 [812 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-devel-8.1.34-5.module_php.8.1.el8.remi.aarch64 [812 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-devel-8.0.30-21.module_php.8.0.el8.remi.aarch64 [784 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-devel-8.0.30-19.module_php.8.0.el8.remi.aarch64 [784 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-devel-7.4.33-31.module_php.7.4.el8.remi.aarch64 [736 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-devel-7.4.33-29.module_php.7.4.el8.remi.aarch64 [736 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-devel-7.3.33-24.module_php.7.3.el8.remi.aarch64 [730 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-devel-7.3.33-23.module_php.7.3.el8.remi.aarch64 [729 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-devel-7.2.34-31.module_php.7.2.el8.remi.aarch64 [704 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-devel-7.2.34-30.module_php.7.2.el8.remi.aarch64 [704 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-embedded-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-embedded
Summary: PHP library for embedding in applications

Description:
The php-embedded package contains a library which can be embedded into applications to provide PHP scripting language support.

Changes:

php-embedded-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-embedded-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-embedded-8.5.12-1.module_php.8.5.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-embedded-8.5.11-1.module_php.8.5.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-embedded-8.4.27-1.module_php.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-embedded-8.4.26-1.module_php.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-embedded-8.3.36-1.module_php.8.3.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-embedded-8.3.35-1.module_php.8.3.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-embedded-8.2.35-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-embedded-8.2.34-1.module_php.8.2.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-embedded-8.1.34-6.module_php.8.1.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-embedded-8.1.34-5.module_php.8.1.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-embedded-8.0.30-21.module_php.8.0.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-embedded-8.0.30-19.module_php.8.0.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-embedded-7.4.33-31.module_php.7.4.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-embedded-7.4.33-29.module_php.7.4.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-embedded-7.3.33-24.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-embedded-7.3.33-23.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-embedded-7.2.34-31.module_php.7.2.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-embedded-7.2.34-30.module_php.7.2.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-enchant-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-enchant
Summary: Enchant spelling extension for PHP applications

Description:
The php-enchant package contains a dynamic shared object that will add support for using the enchant library to PHP.

Changes:

php-enchant-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [80 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-enchant-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [80 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-enchant-8.5.12-1.module_php.8.5.el8.remi.aarch64 [79 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-enchant-8.5.11-1.module_php.8.5.el8.remi.aarch64 [79 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-enchant-8.4.27-1.module_php.8.4.el8.remi.aarch64 [78 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-enchant-8.4.26-1.module_php.8.4.el8.remi.aarch64 [78 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-enchant-8.3.36-1.module_php.8.3.el8.remi.aarch64 [76 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-enchant-8.3.35-1.module_php.8.3.el8.remi.aarch64 [76 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-enchant-8.2.35-1.module_php.8.2.el8.remi.aarch64 [73 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-enchant-8.2.34-1.module_php.8.2.el8.remi.aarch64 [73 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-enchant-8.1.34-6.module_php.8.1.el8.remi.aarch64 [73 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-enchant-8.1.34-5.module_php.8.1.el8.remi.aarch64 [72 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-enchant-8.0.30-21.module_php.8.0.el8.remi.aarch64 [73 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-enchant-8.0.30-19.module_php.8.0.el8.remi.aarch64 [72 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-enchant-7.4.33-31.module_php.7.4.el8.remi.aarch64 [70 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-enchant-7.4.33-29.module_php.7.4.el8.remi.aarch64 [69 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-enchant-7.3.33-24.module_php.7.3.el8.remi.aarch64 [65 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-enchant-7.3.33-23.module_php.7.3.el8.remi.aarch64 [65 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-enchant-7.2.34-31.module_php.7.2.el8.remi.aarch64 [62 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-enchant-7.2.34-30.module_php.7.2.el8.remi.aarch64 [62 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-fpm-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-fpm
Summary: PHP FastCGI Process Manager

Description:
PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites.

Changes:

php-fpm-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [3.0 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-fpm-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [3.0 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-fpm-8.5.12-1.module_php.8.5.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-fpm-8.5.11-1.module_php.8.5.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-fpm-8.4.27-1.module_php.8.4.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-fpm-8.4.26-1.module_php.8.4.el8.remi.aarch64 [1.9 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-fpm-8.3.36-1.module_php.8.3.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-fpm-8.3.35-1.module_php.8.3.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-fpm-8.2.35-1.module_php.8.2.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-fpm-8.2.34-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-fpm-8.1.34-6.module_php.8.1.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-fpm-8.1.34-5.module_php.8.1.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-fpm-8.0.30-21.module_php.8.0.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-fpm-8.0.30-19.module_php.8.0.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-fpm-7.4.33-31.module_php.7.4.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-fpm-7.4.33-29.module_php.7.4.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-fpm-7.3.33-24.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-fpm-7.3.33-23.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-fpm-7.2.34-31.module_php.7.2.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-fpm-7.2.34-30.module_php.7.2.el8.remi.aarch64 [1.5 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-gd-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-gd
Summary: A module for PHP applications for using the gd graphics library

Description:
The php-gd package contains a dynamic shared object that will add support for using the gd graphics library to PHP.

Changes:

php-gd-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [105 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-gd-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [105 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-gd-8.5.12-1.module_php.8.5.el8.remi.aarch64 [104 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-gd-8.5.11-1.module_php.8.5.el8.remi.aarch64 [104 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-gd-8.4.27-1.module_php.8.4.el8.remi.aarch64 [103 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-gd-8.4.26-1.module_php.8.4.el8.remi.aarch64 [103 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-gd-8.3.36-1.module_php.8.3.el8.remi.aarch64 [97 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-gd-8.3.35-1.module_php.8.3.el8.remi.aarch64 [97 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-gd-8.2.35-1.module_php.8.2.el8.remi.aarch64 [94 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-gd-8.2.34-1.module_php.8.2.el8.remi.aarch64 [94 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-gd-8.1.34-6.module_php.8.1.el8.remi.aarch64 [93 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gd-8.1.34-5.module_php.8.1.el8.remi.aarch64 [93 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gd-8.0.30-21.module_php.8.0.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gd-8.0.30-19.module_php.8.0.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gd-7.4.33-31.module_php.7.4.el8.remi.aarch64 [89 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gd-7.4.33-29.module_php.7.4.el8.remi.aarch64 [89 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gd-7.3.33-24.module_php.7.3.el8.remi.aarch64 [84 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-gd-7.3.33-23.module_php.7.3.el8.remi.aarch64 [84 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-gd-7.2.34-31.module_php.7.2.el8.remi.aarch64 [82 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-gd-7.2.34-30.module_php.7.2.el8.remi.aarch64 [81 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-gmp-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-gmp
Summary: A module for PHP applications for using the GNU MP library

Description:
These functions allow you to work with arbitrary-length integers using the GNU MP library.

Changes:

php-gmp-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-gmp-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-gmp-8.5.12-1.module_php.8.5.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-gmp-8.5.11-1.module_php.8.5.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-gmp-8.4.27-1.module_php.8.4.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-gmp-8.4.26-1.module_php.8.4.el8.remi.aarch64 [91 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-gmp-8.3.36-1.module_php.8.3.el8.remi.aarch64 [90 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-gmp-8.3.35-1.module_php.8.3.el8.remi.aarch64 [90 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-gmp-8.2.35-1.module_php.8.2.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-gmp-8.2.34-1.module_php.8.2.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-gmp-8.1.34-6.module_php.8.1.el8.remi.aarch64 [86 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gmp-8.1.34-5.module_php.8.1.el8.remi.aarch64 [86 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gmp-8.0.30-21.module_php.8.0.el8.remi.aarch64 [86 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gmp-8.0.30-19.module_php.8.0.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gmp-7.4.33-31.module_php.7.4.el8.remi.aarch64 [81 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-gmp-7.4.33-29.module_php.7.4.el8.remi.aarch64 [81 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-gmp-7.3.33-24.module_php.7.3.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-gmp-7.3.33-23.module_php.7.3.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-gmp-7.2.34-31.module_php.7.2.el8.remi.aarch64 [73 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-gmp-7.2.34-30.module_php.7.2.el8.remi.aarch64 [73 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-imap-8.3.36-1.module_php.8.3.el8.remi

Wed, 21 Oct 2026 07:41:17 +0000

Package: php-imap
Summary: A module for PHP applications that use IMAP

Description:
The php-imap module will add IMAP (Internet Message Access Protocol) support to PHP. IMAP is a protocol for retrieving and uploading e-mail messages on mail servers. PHP is an HTML-embedded scripting language.

Changes:

php-imap-8.3.36-1.module_php.8.3.el8.remi.aarch64 [100 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-imap-8.3.35-1.module_php.8.3.el8.remi.aarch64 [99 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-imap-8.2.35-1.module_php.8.2.el8.remi.aarch64 [97 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-imap-8.2.34-1.module_php.8.2.el8.remi.aarch64 [97 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-imap-8.1.34-6.module_php.8.1.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-imap-8.1.34-5.module_php.8.1.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-imap-8.0.30-21.module_php.8.0.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-imap-8.0.30-19.module_php.8.0.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-imap-7.4.33-31.module_php.7.4.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-imap-7.4.33-29.module_php.7.4.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-imap-7.3.33-24.module_php.7.3.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-imap-7.3.33-23.module_php.7.3.el8.remi.aarch64 [87 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-imap-7.2.34-31.module_php.7.2.el8.remi.aarch64 [84 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-imap-7.2.34-30.module_php.7.2.el8.remi.aarch64 [83 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-interbase-7.3.33-24.module_php.7.3.el8.remi

Tue, 27 Oct 2026 10:00:23 +0000

Package: php-interbase
Summary: A module for PHP applications that use Interbase/Firebird databases

Description:
The php-interbase package contains a dynamic shared object that will add database support through Interbase/Firebird to PHP. InterBase is the name of the closed-source variant of this RDBMS that was developed by Borland/Inprise. Firebird is a commercially independent project of C and C++ programmers, technical advisors and supporters developing and enhancing a multi-platform relational database management system based on the source code released by Inprise Corp (now known as Borland Software Corp) under the InterBase Public License.

Changes:

php-interbase-7.3.33-24.module_php.7.3.el8.remi.aarch64 [98 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-interbase-7.3.33-23.module_php.7.3.el8.remi.aarch64 [97 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-interbase-7.2.34-31.module_php.7.2.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-interbase-7.2.34-30.module_php.7.2.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-intl-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-intl
Summary: Internationalization extension for PHP applications

Description:
The php-intl package contains a dynamic shared object that will add support for using the ICU library to PHP.

Changes:

php-intl-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [234 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-intl-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [233 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-intl-8.5.12-1.module_php.8.5.el8.remi.aarch64 [226 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-intl-8.5.11-1.module_php.8.5.el8.remi.aarch64 [225 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-intl-8.4.27-1.module_php.8.4.el8.remi.aarch64 [222 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-intl-8.4.26-1.module_php.8.4.el8.remi.aarch64 [221 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-intl-8.3.36-1.module_php.8.3.el8.remi.aarch64 [212 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-intl-8.3.35-1.module_php.8.3.el8.remi.aarch64 [212 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-intl-8.2.35-1.module_php.8.2.el8.remi.aarch64 [207 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-intl-8.2.34-1.module_php.8.2.el8.remi.aarch64 [206 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-intl-8.1.34-6.module_php.8.1.el8.remi.aarch64 [191 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-intl-8.1.34-5.module_php.8.1.el8.remi.aarch64 [190 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-intl-8.0.30-21.module_php.8.0.el8.remi.aarch64 [188 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-intl-8.0.30-19.module_php.8.0.el8.remi.aarch64 [188 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-intl-7.4.33-31.module_php.7.4.el8.remi.aarch64 [188 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-intl-7.4.33-29.module_php.7.4.el8.remi.aarch64 [188 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-intl-7.3.33-24.module_php.7.3.el8.remi.aarch64 [183 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-intl-7.3.33-23.module_php.7.3.el8.remi.aarch64 [183 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-intl-7.2.34-31.module_php.7.2.el8.remi.aarch64 [181 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-intl-7.2.34-30.module_php.7.2.el8.remi.aarch64 [181 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-json-7.4.33-31.module_php.7.4.el8.remi

Wed, 21 Oct 2026 13:19:20 +0000

Package: php-json
Summary: JavaScript Object Notation extension for PHP

Description:
The php-json package provides an extension that will add support for JavaScript Object Notation (JSON) to PHP.

Changes:

php-json-7.4.33-31.module_php.7.4.el8.remi.aarch64 [79 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-json-7.4.33-29.module_php.7.4.el8.remi.aarch64 [78 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-json-7.3.33-24.module_php.7.3.el8.remi.aarch64 [74 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-json-7.3.33-23.module_php.7.3.el8.remi.aarch64 [74 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-json-7.2.34-31.module_php.7.2.el8.remi.aarch64 [71 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-json-7.2.34-30.module_php.7.2.el8.remi.aarch64 [71 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-ldap-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-ldap
Summary: A module for PHP applications that use LDAP

Description:
The php-ldap adds Lightweight Directory Access Protocol (LDAP) support to PHP. LDAP is a set of protocols for accessing directory services over the Internet. PHP is an HTML-embedded scripting language.

Changes:

php-ldap-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [101 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-ldap-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [101 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-ldap-8.5.12-1.module_php.8.5.el8.remi.aarch64 [101 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-ldap-8.5.11-1.module_php.8.5.el8.remi.aarch64 [101 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-ldap-8.4.27-1.module_php.8.4.el8.remi.aarch64 [100 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-ldap-8.4.26-1.module_php.8.4.el8.remi.aarch64 [100 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-ldap-8.3.36-1.module_php.8.3.el8.remi.aarch64 [99 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-ldap-8.3.35-1.module_php.8.3.el8.remi.aarch64 [98 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-ldap-8.2.35-1.module_php.8.2.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-ldap-8.2.34-1.module_php.8.2.el8.remi.aarch64 [95 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-ldap-8.1.34-6.module_php.8.1.el8.remi.aarch64 [94 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ldap-8.1.34-5.module_php.8.1.el8.remi.aarch64 [93 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ldap-8.0.30-21.module_php.8.0.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ldap-8.0.30-19.module_php.8.0.el8.remi.aarch64 [92 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ldap-7.4.33-31.module_php.7.4.el8.remi.aarch64 [90 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-ldap-7.4.33-29.module_php.7.4.el8.remi.aarch64 [90 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-ldap-7.3.33-24.module_php.7.3.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-ldap-7.3.33-23.module_php.7.3.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-ldap-7.2.34-31.module_php.7.2.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-ldap-7.2.34-30.module_php.7.2.el8.remi.aarch64 [77 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-litespeed-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-litespeed
Summary: LiteSpeed Web Server PHP support

Description:
The php-litespeed package provides the /usr/bin/lsphp command used by the LiteSpeed Web Server (LSAPI enabled PHP).

Changes:

php-litespeed-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-litespeed-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [2.9 MiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-litespeed-8.5.12-1.module_php.8.5.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-litespeed-8.5.11-1.module_php.8.5.el8.remi.aarch64 [2.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-litespeed-8.4.27-1.module_php.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-litespeed-8.4.26-1.module_php.8.4.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-litespeed-8.3.36-1.module_php.8.3.el8.remi.aarch64 [1.8 MiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-litespeed-8.3.35-1.module_php.8.3.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-litespeed-8.2.35-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-litespeed-8.2.34-1.module_php.8.2.el8.remi.aarch64 [1.7 MiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-litespeed-8.1.34-6.module_php.8.1.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-litespeed-8.1.34-5.module_php.8.1.el8.remi.aarch64 [1.6 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-litespeed-8.0.30-21.module_php.8.0.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-litespeed-8.0.30-19.module_php.8.0.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-litespeed-7.4.33-31.module_php.7.4.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-litespeed-7.4.33-29.module_php.7.4.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-litespeed-7.3.33-24.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-litespeed-7.3.33-23.module_php.7.3.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-litespeed-7.2.34-31.module_php.7.2.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-litespeed-7.2.34-30.module_php.7.2.el8.remi.aarch64 [1.4 MiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-mbstring-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-mbstring
Summary: A module for PHP applications which need multi-byte string handling

Description:
The php-mbstring package contains a dynamic shared object that will add support for multi-byte string handling to PHP.

Changes:

php-mbstring-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [521 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-mbstring-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [519 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-mbstring-8.5.12-1.module_php.8.5.el8.remi.aarch64 [535 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-mbstring-8.5.11-1.module_php.8.5.el8.remi.aarch64 [534 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-mbstring-8.4.27-1.module_php.8.4.el8.remi.aarch64 [533 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-mbstring-8.4.26-1.module_php.8.4.el8.remi.aarch64 [532 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-mbstring-8.3.36-1.module_php.8.3.el8.remi.aarch64 [524 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-mbstring-8.3.35-1.module_php.8.3.el8.remi.aarch64 [523 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-mbstring-8.2.35-1.module_php.8.2.el8.remi.aarch64 [526 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-mbstring-8.2.34-1.module_php.8.2.el8.remi.aarch64 [524 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-mbstring-8.1.34-6.module_php.8.1.el8.remi.aarch64 [482 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mbstring-8.1.34-5.module_php.8.1.el8.remi.aarch64 [482 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mbstring-8.0.30-21.module_php.8.0.el8.remi.aarch64 [480 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mbstring-8.0.30-19.module_php.8.0.el8.remi.aarch64 [480 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mbstring-7.4.33-31.module_php.7.4.el8.remi.aarch64 [480 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mbstring-7.4.33-29.module_php.7.4.el8.remi.aarch64 [479 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mbstring-7.3.33-24.module_php.7.3.el8.remi.aarch64 [474 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-mbstring-7.3.33-23.module_php.7.3.el8.remi.aarch64 [473 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-mbstring-7.2.34-31.module_php.7.2.el8.remi.aarch64 [460 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-mbstring-7.2.34-30.module_php.7.2.el8.remi.aarch64 [460 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-mysqlnd-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-mysqlnd
Summary: A module for PHP applications that use MySQL databases

Description:
The php-mysqlnd package contains a dynamic shared object that will add MySQL database support to PHP. MySQL is an object-relational database management system. PHP is an HTML-embeddable scripting language. If you need MySQL support for PHP applications, you will need to install this package and the php package. This package use the MySQL Native Driver

Changes:

php-mysqlnd-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [198 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-mysqlnd-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [197 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-mysqlnd-8.5.12-1.module_php.8.5.el8.remi.aarch64 [197 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-mysqlnd-8.5.11-1.module_php.8.5.el8.remi.aarch64 [197 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-mysqlnd-8.4.27-1.module_php.8.4.el8.remi.aarch64 [196 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-mysqlnd-8.4.26-1.module_php.8.4.el8.remi.aarch64 [196 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-mysqlnd-8.3.36-1.module_php.8.3.el8.remi.aarch64 [193 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-mysqlnd-8.3.35-1.module_php.8.3.el8.remi.aarch64 [193 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-mysqlnd-8.2.35-1.module_php.8.2.el8.remi.aarch64 [190 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-mysqlnd-8.2.34-1.module_php.8.2.el8.remi.aarch64 [190 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-mysqlnd-8.1.34-6.module_php.8.1.el8.remi.aarch64 [188 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mysqlnd-8.1.34-5.module_php.8.1.el8.remi.aarch64 [188 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mysqlnd-8.0.30-21.module_php.8.0.el8.remi.aarch64 [193 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mysqlnd-8.0.30-19.module_php.8.0.el8.remi.aarch64 [193 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mysqlnd-7.4.33-31.module_php.7.4.el8.remi.aarch64 [189 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-mysqlnd-7.4.33-29.module_php.7.4.el8.remi.aarch64 [189 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-mysqlnd-7.3.33-24.module_php.7.3.el8.remi.aarch64 [182 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-mysqlnd-7.3.33-23.module_php.7.3.el8.remi.aarch64 [182 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-mysqlnd-7.2.34-31.module_php.7.2.el8.remi.aarch64 [179 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-mysqlnd-7.2.34-30.module_php.7.2.el8.remi.aarch64 [179 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-oci8-8.3.36-1.module_php.8.3.el8.remi

Wed, 21 Oct 2026 07:41:17 +0000

Package: php-oci8
Summary: A module for PHP applications that use OCI8 databases

Description:
The php-oci8 packages provides the OCI8 extension version 3.3.0 and the PDO driver to access Oracle Database. The extension is linked with Oracle client libraries 23.26.3 (Oracle Instant Client). For details, see Oracle's note "Oracle Client / Server Interoperability Support" (ID 207303.1). You must install libclntsh.so.23.1 to use this package, provided by Oracle Instant Client RPM available from Oracle on: https://www.oracle.com/database/technologies/instant-client/downloads.html Documentation is at http://php.net/oci8 and http://php.net/pdo_oci

Changes:

php-oci8-8.3.36-1.module_php.8.3.el8.remi.aarch64 [135 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-oci8-8.3.35-1.module_php.8.3.el8.remi.aarch64 [135 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-oci8-8.2.35-1.module_php.8.2.el8.remi.aarch64 [132 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-oci8-8.2.34-1.module_php.8.2.el8.remi.aarch64 [132 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-oci8-8.1.34-6.module_php.8.1.el8.remi.aarch64 [130 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-oci8-8.1.34-5.module_php.8.1.el8.remi.aarch64 [130 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-oci8-8.0.30-21.module_php.8.0.el8.remi.aarch64 [130 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-oci8-8.0.30-19.module_php.8.0.el8.remi.aarch64 [130 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-oci8-7.4.33-31.module_php.7.4.el8.remi.aarch64 [128 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-oci8-7.4.33-29.module_php.7.4.el8.remi.aarch64 [128 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-oci8-7.3.33-24.module_php.7.3.el8.remi.aarch64 [122 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-oci8-7.3.33-23.module_php.7.3.el8.remi.aarch64 [122 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-oci8-7.2.34-31.module_php.7.2.el8.remi.aarch64 [120 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-oci8-7.2.34-30.module_php.7.2.el8.remi.aarch64 [120 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765

Update: php-odbc-8.6.0~RC4-1.module_php.8.6.el8.remi

Fri, 23 Oct 2026 05:14:30 +0000

Package: php-odbc
Summary: A module for PHP applications that use ODBC databases

Description:
The php-odbc package contains a dynamic shared object that will add database support through ODBC to PHP. ODBC is an open specification which provides a consistent API for developers to use for accessing data sources (which are often, but not always, databases). PHP is an HTML-embeddable scripting language. If you need ODBC support for PHP applications, you will need to install this package and the php package.

Changes:

php-odbc-8.6.0~RC4-1.module_php.8.6.el8.remi.aarch64 [110 KiB]	Changelog by Remi Collet (2026-10-23): - Update to 8.6.0RC4
php-odbc-8.6.0~RC3-1.module_php.8.6.el8.remi.aarch64 [110 KiB]	Changelog by Remi Collet (2026-10-07): - Update to 8.6.0RC3
php-odbc-8.5.12-1.module_php.8.5.el8.remi.aarch64 [108 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.5.12 - http://www.php.net/releases/8_5_12.php
php-odbc-8.5.11-1.module_php.8.5.el8.remi.aarch64 [108 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.5.11 - http://www.php.net/releases/8_5_11.php
php-odbc-8.4.27-1.module_php.8.4.el8.remi.aarch64 [107 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.4.27 - http://www.php.net/releases/8_4_27.php
php-odbc-8.4.26-1.module_php.8.4.el8.remi.aarch64 [107 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.4.26 - http://www.php.net/releases/8_4_26.php
php-odbc-8.3.36-1.module_php.8.3.el8.remi.aarch64 [102 KiB]	Changelog by Remi Collet (2026-10-22): - Update to 8.3.36 - http://www.php.net/releases/8_3_36.php
php-odbc-8.3.35-1.module_php.8.3.el8.remi.aarch64 [102 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.3.35 - http://www.php.net/releases/8_3_35.php
php-odbc-8.2.35-1.module_php.8.2.el8.remi.aarch64 [99 KiB]	Changelog by Remi Collet (2026-10-21): - Update to 8.2.35 - http://www.php.net/releases/8_2_35.php
php-odbc-8.2.34-1.module_php.8.2.el8.remi.aarch64 [99 KiB]	Changelog by Remi Collet (2026-09-22): - Update to 8.2.34 - http://www.php.net/releases/8_2_34.php
php-odbc-8.1.34-6.module_php.8.1.el8.remi.aarch64 [97 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-odbc-8.1.34-5.module_php.8.1.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-odbc-8.0.30-21.module_php.8.0.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-odbc-8.0.30-19.module_php.8.0.el8.remi.aarch64 [96 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Partially Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-odbc-7.4.33-31.module_php.7.4.el8.remi.aarch64 [93 KiB]	Changelog by Remi Collet (2026-10-21): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619
php-odbc-7.4.33-29.module_php.7.4.el8.remi.aarch64 [93 KiB]	Changelog by Remi Collet (2026-10-01): - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fixed Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682
php-odbc-7.3.33-24.module_php.7.3.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-odbc-7.3.33-23.module_php.7.3.el8.remi.aarch64 [88 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181
php-odbc-7.2.34-31.module_php.7.2.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-27): - rebuild with proper patch (Avoid state corruption via bailout)
php-odbc-7.2.34-30.module_php.7.2.el8.remi.aarch64 [85 KiB]	Changelog by Remi Collet (2026-10-25): - Mitigation fix Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765