From: Thomas Perale via buildroot <buildroot@buildroot.org>
To: buildroot@buildroot.org
Cc: Bernd Kuhls <bernd@kuhls.net>, Thomas Perale <thomas.perale@mind.be>
Subject: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
Date: Wed, 21 Oct 2026 16:36:06 +0200 [thread overview]
Message-ID: <20261021143606.428870-2-thomas.perale@mind.be> (raw)
In-Reply-To: <20261021143606.428870-1-thomas.perale@mind.be>
This release include fixes for critical remote code execution
vulnerabilities:
- https://www.php.net/archive/2026.php#2026-10-21-5
See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
This fixes the following vulnerabilities:
- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/php/php.hash | 2 +-
package/php/php.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/php/php.hash b/package/php/php.hash
index 0f2b6785bf..e1e92781ea 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
# From https://www.php.net/downloads.php?source=Y
-sha256 d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360 php-8.5.11.tar.xz
+sha256 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 php-8.5.12.tar.xz
# License file
sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index cd1270be57..1bb25d0863 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
#
################################################################################
-PHP_VERSION = 8.5.11
+PHP_VERSION = 8.5.12
PHP_SITE = https://www.php.net/distributions
PHP_SOURCE = php-$(PHP_VERSION).tar.xz
PHP_INSTALL_STAGING = YES
--
2.56.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2026-10-21 14:36 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
2026-10-21 14:36 ` Thomas Perale via buildroot [this message]
2026-10-21 15:20 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261021143606.428870-2-thomas.perale@mind.be \
--to=buildroot@buildroot.org \
--cc=bernd@kuhls.net \
--cc=thomas.perale@mind.be \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox