HCE2-SA-2025-0245 Important HCE 2.0 Security Fix(es): In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like fsockopen() lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parse_url() treat the hostname in different way, thus opening way to security problems if the user code implements access checks before access using such functions. (CVE-2025-1220) In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server. (CVE-2025-6491) In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid. (CVE-2025-1735) HCE 2.0 php-8.0.30-9.r1.hce2.aarch64.rpm php-bcmath-8.0.30-9.r1.hce2.aarch64.rpm php-cli-8.0.30-9.r1.hce2.aarch64.rpm php-common-8.0.30-9.r1.hce2.aarch64.rpm php-dba-8.0.30-9.r1.hce2.aarch64.rpm php-dbg-8.0.30-9.r1.hce2.aarch64.rpm php-devel-8.0.30-9.r1.hce2.aarch64.rpm php-embedded-8.0.30-9.r1.hce2.aarch64.rpm php-enchant-8.0.30-9.r1.hce2.aarch64.rpm php-ffi-8.0.30-9.r1.hce2.aarch64.rpm php-fpm-8.0.30-9.r1.hce2.aarch64.rpm php-gd-8.0.30-9.r1.hce2.aarch64.rpm php-gmp-8.0.30-9.r1.hce2.aarch64.rpm php-help-8.0.30-9.r1.hce2.noarch.rpm php-intl-8.0.30-9.r1.hce2.aarch64.rpm php-ldap-8.0.30-9.r1.hce2.aarch64.rpm php-mbstring-8.0.30-9.r1.hce2.aarch64.rpm php-mysqlnd-8.0.30-9.r1.hce2.aarch64.rpm php-odbc-8.0.30-9.r1.hce2.aarch64.rpm php-opcache-8.0.30-9.r1.hce2.aarch64.rpm php-pdo-8.0.30-9.r1.hce2.aarch64.rpm php-pgsql-8.0.30-9.r1.hce2.aarch64.rpm php-process-8.0.30-9.r1.hce2.aarch64.rpm php-snmp-8.0.30-9.r1.hce2.aarch64.rpm php-soap-8.0.30-9.r1.hce2.aarch64.rpm php-tidy-8.0.30-9.r1.hce2.aarch64.rpm php-xml-8.0.30-9.r1.hce2.aarch64.rpm php-8.0.30-9.r1.hce2.x86_64.rpm php-bcmath-8.0.30-9.r1.hce2.x86_64.rpm php-cli-8.0.30-9.r1.hce2.x86_64.rpm php-common-8.0.30-9.r1.hce2.x86_64.rpm php-dba-8.0.30-9.r1.hce2.x86_64.rpm php-dbg-8.0.30-9.r1.hce2.x86_64.rpm php-devel-8.0.30-9.r1.hce2.x86_64.rpm php-embedded-8.0.30-9.r1.hce2.x86_64.rpm php-enchant-8.0.30-9.r1.hce2.x86_64.rpm php-ffi-8.0.30-9.r1.hce2.x86_64.rpm php-fpm-8.0.30-9.r1.hce2.x86_64.rpm php-gd-8.0.30-9.r1.hce2.x86_64.rpm php-gmp-8.0.30-9.r1.hce2.x86_64.rpm php-intl-8.0.30-9.r1.hce2.x86_64.rpm php-ldap-8.0.30-9.r1.hce2.x86_64.rpm php-mbstring-8.0.30-9.r1.hce2.x86_64.rpm php-mysqlnd-8.0.30-9.r1.hce2.x86_64.rpm php-odbc-8.0.30-9.r1.hce2.x86_64.rpm php-opcache-8.0.30-9.r1.hce2.x86_64.rpm php-pdo-8.0.30-9.r1.hce2.x86_64.rpm php-pgsql-8.0.30-9.r1.hce2.x86_64.rpm php-process-8.0.30-9.r1.hce2.x86_64.rpm php-snmp-8.0.30-9.r1.hce2.x86_64.rpm php-soap-8.0.30-9.r1.hce2.x86_64.rpm php-tidy-8.0.30-9.r1.hce2.x86_64.rpm php-xml-8.0.30-9.r1.hce2.x86_64.rpm