Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface GHSA-4w77-75f9-2c8w
Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234
Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233
Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929
Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219
Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736
Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861
Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734
Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217
Fix pgsql extension does not check for errors during escaping CVE-2025-1735
Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491
Fix Null byte termination in hostnames CVE-2025-1220
Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf
Fix Heap buffer overflow in array_merge() CVE-2025-14178
Fix Information Leak of Memory in getimagesize CVE-2025-14177
Resolves: RHEL-141181