Remi's RPM repository - Packages

Blog | Support | Repository | Wizard

php-json - JavaScript Object Notation extension for PHP

Website:
http://www.php.net/
Licence:
PHP
Vendor:
Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine
Description:
The php-json package provides an extension that will add
support for JavaScript Object Notation (JSON) to PHP.

Packages

php-json-7.4.33-21.el8.remi.aarch64 [75 KiB] Changelog by Remi Collet (2024-11-27):
- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929
php-json-7.4.33-20.el8.remi.aarch64 [75 KiB] Changelog by Remi Collet (2024-11-22):
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233
php-json-7.3.33-18.el8.remi.aarch64 [72 KiB] Changelog by Remi Collet (2024-11-27):
- Fix Leak partial content of the heap through heap buffer over-read
  CVE-2024-8929
php-json-7.3.33-17.el8.remi.aarch64 [72 KiB] Changelog by Remi Collet (2024-11-22):
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233
php-json-7.2.34-25.el8.remi.aarch64 [70 KiB] Changelog by Remi Collet (2024-11-26):
- Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface
  GHSA-4w77-75f9-2c8w
- Fix OOB access in ldap_escape
  CVE-2024-8932
- Fix Integer overflow in the dblib/firebird quoter causing OOB writes
  CVE-2024-11236
- Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
  CVE-2024-11234
- Fix Single byte overread with convert.quoted-printable-decode filter
  CVE-2024-11233
php-json-7.2.34-24.el8.remi.aarch64 [70 KiB] Changelog by Remi Collet (2024-09-26):
- Fix Bypass of CVE-2012-1823, Argument Injection in PHP-CGI
  CVE-2024-4577
- Fix Bypass of CVE-2024-4577, Parameter Injection Vulnerability
  CVE-2024-8926
- Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
  CVE-2024-8927
- Fix Erroneous parsing of multipart form data
  CVE-2024-8925

Provided by: Nexcess.net