* [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36
@ 2026-10-21 14:36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
0 siblings, 2 replies; 5+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-21 14:36 UTC (permalink / raw)
To: buildroot; +Cc: Bernd Kuhls, Thomas Perale
This release include fixes for critical remote code execution
vulnerabilities:
- https://www.php.net/archive/2026.php#2026-10-21-5
See the release notes: https://www.php.net/ChangeLog-8.php#8.3.36
This fixes the following vulnerabilities:
- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/php/php.hash | 2 +-
package/php/php.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/php/php.hash b/package/php/php.hash
index 99ce84673e..604e52a54f 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
# From https://www.php.net/downloads.php
-sha256 ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a php-8.3.35.tar.xz
+sha256 dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd php-8.3.36.tar.xz
# License file
sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index 497ccc49e4..fd01d75e7f 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
#
################################################################################
-PHP_VERSION = 8.3.35
+PHP_VERSION = 8.3.36
PHP_SITE = https://www.php.net/distributions
PHP_SOURCE = php-$(PHP_VERSION).tar.xz
PHP_INSTALL_STAGING = YES
--
2.56.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
@ 2026-10-21 14:36 ` Thomas Perale via buildroot
2026-10-21 15:20 ` Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
1 sibling, 2 replies; 5+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-21 14:36 UTC (permalink / raw)
To: buildroot; +Cc: Bernd Kuhls, Thomas Perale
This release include fixes for critical remote code execution
vulnerabilities:
- https://www.php.net/archive/2026.php#2026-10-21-5
See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
This fixes the following vulnerabilities:
- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/php/php.hash | 2 +-
package/php/php.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/php/php.hash b/package/php/php.hash
index 0f2b6785bf..e1e92781ea 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
# From https://www.php.net/downloads.php?source=Y
-sha256 d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360 php-8.5.11.tar.xz
+sha256 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 php-8.5.12.tar.xz
# License file
sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index cd1270be57..1bb25d0863 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
#
################################################################################
-PHP_VERSION = 8.5.11
+PHP_VERSION = 8.5.12
PHP_SITE = https://www.php.net/distributions
PHP_SOURCE = php-$(PHP_VERSION).tar.xz
PHP_INSTALL_STAGING = YES
--
2.56.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
@ 2026-10-21 15:20 ` Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 5+ messages in thread
From: Julien Olivain via buildroot @ 2026-10-21 15:20 UTC (permalink / raw)
To: Thomas Perale; +Cc: buildroot, Bernd Kuhls
On 21/10/2026 16:36, Thomas Perale via buildroot wrote:
> This release include fixes for critical remote code execution
> vulnerabilities:
>
> - https://www.php.net/archive/2026.php#2026-10-21-5
>
> See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
>
> This fixes the following vulnerabilities:
>
> - CVE-2026-109618:
> https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619:
> https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-21 15:20 ` Julien Olivain via buildroot
@ 2026-10-23 13:21 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-23 13:21 UTC (permalink / raw)
To: buildroot, Thomas Perale; +Cc: Raphaël Mélotte
In reply of:
> This release include fixes for critical remote code execution
> vulnerabilities:
>
> - https://www.php.net/archive/2026.php#2026-10-21-5
>
> See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
>
> This fixes the following vulnerabilities:
>
> - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2026.08.x. Thanks
> ---
> package/php/php.hash | 2 +-
> package/php/php.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/php/php.hash b/package/php/php.hash
> index 0f2b6785bf..e1e92781ea 100644
> --- a/package/php/php.hash
> +++ b/package/php/php.hash
> @@ -1,5 +1,5 @@
> # From https://www.php.net/downloads.php?source=Y
> -sha256 d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360 php-8.5.11.tar.xz
> +sha256 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 php-8.5.12.tar.xz
>
> # License file
> sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
> diff --git a/package/php/php.mk b/package/php/php.mk
> index cd1270be57..1bb25d0863 100644
> --- a/package/php/php.mk
> +++ b/package/php/php.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -PHP_VERSION = 8.5.11
> +PHP_VERSION = 8.5.12
> PHP_SITE = https://www.php.net/distributions
> PHP_SOURCE = php-$(PHP_VERSION).tar.xz
> PHP_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
@ 2026-10-23 13:21 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-23 13:21 UTC (permalink / raw)
To: buildroot, Thomas Perale; +Cc: Raphaël Mélotte
In reply of:
> This release include fixes for critical remote code execution
> vulnerabilities:
>
> - https://www.php.net/archive/2026.php#2026-10-21-5
>
> See the release notes: https://www.php.net/ChangeLog-8.php#8.3.36
>
> This fixes the following vulnerabilities:
>
> - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2025.02.x. Thanks
> ---
> package/php/php.hash | 2 +-
> package/php/php.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/php/php.hash b/package/php/php.hash
> index 99ce84673e..604e52a54f 100644
> --- a/package/php/php.hash
> +++ b/package/php/php.hash
> @@ -1,5 +1,5 @@
> # From https://www.php.net/downloads.php
> -sha256 ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a php-8.3.35.tar.xz
> +sha256 dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd php-8.3.36.tar.xz
>
> # License file
> sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
> diff --git a/package/php/php.mk b/package/php/php.mk
> index 497ccc49e4..fd01d75e7f 100644
> --- a/package/php/php.mk
> +++ b/package/php/php.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -PHP_VERSION = 8.3.35
> +PHP_VERSION = 8.3.36
> PHP_SITE = https://www.php.net/distributions
> PHP_SOURCE = php-$(PHP_VERSION).tar.xz
> PHP_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-10-23 13:21 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-21 15:20 ` Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.