MySQL Database

php-mysqlnd - A module for PHP applications that use MySQL databases

Website: http://www.php.net/
License: PHP
Vendor: Alcance Libre, Inc.
Description:
The php-mysqlnd package contains a dynamic shared object that will add
MySQL database support to PHP. MySQL is an object-relational database
management system. PHP is an HTML-embeddable scripting language. If
you need MySQL support for PHP applications, you will need to install
this package and the php package.

This package use the MySQL Native Driver

Packages

php-mysqlnd-7.4.33-14.aldos.x86_64 [249 KiB] Changelog by Joel Barrios (2026-10-22):
- Sync patches with Remi.
- Mitigation fix Avoid state corruption via bailout
  CVE-2026-109618, CVE-2026-109619
- Fix FILTER_SANITIZE_ENCODED does not encode 0xFF
- Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison
  CVE-2026-91768
- Fixed Various packet overreads in mysqlnd wire protocol
  CVE-2025-1218
- Fix TLS hostname verification falls back to CN after SAN mismatch
  CVE-2026-91769
- Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN
  CVE-2026-91767
- Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection
  CVE-2026-6103
- Fix Unbounded recursion in server-side cleanup_xml_node()
  CVE-2026-91765
- Fix Integer overflow to buffer overflow in SOAP HTTP parsing
  CVE-2025-14181
- Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL
  CVE-2026-92842
- Fix Cross-origin credential leak in HTTP stream wrapper redirects
  CVE-2026-91766
- Fix leak on double DatePeriod::__construct() call
- Fixed SQL injection via E'...' backslash breakout
  CVE-2026-17543
- Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks
  CVE-2026-7260
- Fix XSS within status endpoint
  CVE-2026-6735
- Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
  CVE-2026-6722
- Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
  CVE-2026-7261
- Fix Broken Apache map value NULL check
  CVE-2026-7262
- Fix Signed integer overflow of char array offset
  CVE-2026-7568
- Fix Consistently pass unsigned char to ctype.h functions
  CVE-2026-7258

Listing created by Repoview-0.7.1