Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36
@ 2026-10-21 14:36 Thomas Perale via buildroot
  2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
  2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
  0 siblings, 2 replies; 5+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-21 14:36 UTC (permalink / raw)
  To: buildroot; +Cc: Bernd Kuhls, Thomas Perale

This release include fixes for critical remote code execution
vulnerabilities:

- https://www.php.net/archive/2026.php#2026-10-21-5

See the release notes: https://www.php.net/ChangeLog-8.php#8.3.36

This fixes the following vulnerabilities:

- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 package/php/php.hash | 2 +-
 package/php/php.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/php/php.hash b/package/php/php.hash
index 99ce84673e..604e52a54f 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
 # From https://www.php.net/downloads.php
-sha256  ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a  php-8.3.35.tar.xz
+sha256  dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd  php-8.3.36.tar.xz
 
 # License file
 sha256  b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a  LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index 497ccc49e4..fd01d75e7f 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 8.3.35
+PHP_VERSION = 8.3.36
 PHP_SITE = https://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
-- 
2.56.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 5+ messages in thread
* [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
  2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
@ 2026-10-21 14:36 ` Thomas Perale via buildroot
  2026-10-21 15:20   ` Julien Olivain via buildroot
  2026-10-23 13:21   ` Raphaël Mélotte via buildroot
  2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
  1 sibling, 2 replies; 5+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-21 14:36 UTC (permalink / raw)
  To: buildroot; +Cc: Bernd Kuhls, Thomas Perale

This release include fixes for critical remote code execution
vulnerabilities:

- https://www.php.net/archive/2026.php#2026-10-21-5

See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12

This fixes the following vulnerabilities:

- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
 package/php/php.hash | 2 +-
 package/php/php.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/php/php.hash b/package/php/php.hash
index 0f2b6785bf..e1e92781ea 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
 # From https://www.php.net/downloads.php?source=Y
-sha256  d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360  php-8.5.11.tar.xz
+sha256  08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209  php-8.5.12.tar.xz
 
 # License file
 sha256  b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a  LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index cd1270be57..1bb25d0863 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PHP_VERSION = 8.5.11
+PHP_VERSION = 8.5.12
 PHP_SITE = https://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES
-- 
2.56.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
  2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
@ 2026-10-21 15:20   ` Julien Olivain via buildroot
  2026-10-23 13:21   ` Raphaël Mélotte via buildroot
  1 sibling, 0 replies; 5+ messages in thread
From: Julien Olivain via buildroot @ 2026-10-21 15:20 UTC (permalink / raw)
  To: Thomas Perale; +Cc: buildroot, Bernd Kuhls

On 21/10/2026 16:36, Thomas Perale via buildroot wrote:
> This release include fixes for critical remote code execution
> vulnerabilities:
> 
> - https://www.php.net/archive/2026.php#2026-10-21-5
> 
> See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
> 
> This fixes the following vulnerabilities:
> 
> - CVE-2026-109618: 
> https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: 
> https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
> 
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>

Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36
  2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
  2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
@ 2026-10-23 13:21 ` Raphaël Mélotte via buildroot
  1 sibling, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-23 13:21 UTC (permalink / raw)
  To: buildroot, Thomas Perale; +Cc: Raphaël Mélotte

In reply of:
> This release include fixes for critical remote code execution
> vulnerabilities:
> 
> - https://www.php.net/archive/2026.php#2026-10-21-5
> 
> See the release notes: https://www.php.net/ChangeLog-8.php#8.3.36
> 
> This fixes the following vulnerabilities:
> 
> - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
> 
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>

Applied to 2025.02.x. Thanks

> ---
>  package/php/php.hash | 2 +-
>  package/php/php.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/package/php/php.hash b/package/php/php.hash
> index 99ce84673e..604e52a54f 100644
> --- a/package/php/php.hash
> +++ b/package/php/php.hash
> @@ -1,5 +1,5 @@
>  # From https://www.php.net/downloads.php
> -sha256  ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a  php-8.3.35.tar.xz
> +sha256  dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd  php-8.3.36.tar.xz
>  
>  # License file
>  sha256  b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a  LICENSE
> diff --git a/package/php/php.mk b/package/php/php.mk
> index 497ccc49e4..fd01d75e7f 100644
> --- a/package/php/php.mk
> +++ b/package/php/php.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -PHP_VERSION = 8.3.35
> +PHP_VERSION = 8.3.36
>  PHP_SITE = https://www.php.net/distributions
>  PHP_SOURCE = php-$(PHP_VERSION).tar.xz
>  PHP_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
  2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
  2026-10-21 15:20   ` Julien Olivain via buildroot
@ 2026-10-23 13:21   ` Raphaël Mélotte via buildroot
  1 sibling, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-23 13:21 UTC (permalink / raw)
  To: buildroot, Thomas Perale; +Cc: Raphaël Mélotte

In reply of:
> This release include fixes for critical remote code execution
> vulnerabilities:
> 
> - https://www.php.net/archive/2026.php#2026-10-21-5
> 
> See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
> 
> This fixes the following vulnerabilities:
> 
> - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
> 
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>

Applied to 2026.08.x. Thanks

> ---
>  package/php/php.hash | 2 +-
>  package/php/php.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/package/php/php.hash b/package/php/php.hash
> index 0f2b6785bf..e1e92781ea 100644
> --- a/package/php/php.hash
> +++ b/package/php/php.hash
> @@ -1,5 +1,5 @@
>  # From https://www.php.net/downloads.php?source=Y
> -sha256  d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360  php-8.5.11.tar.xz
> +sha256  08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209  php-8.5.12.tar.xz
>  
>  # License file
>  sha256  b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a  LICENSE
> diff --git a/package/php/php.mk b/package/php/php.mk
> index cd1270be57..1bb25d0863 100644
> --- a/package/php/php.mk
> +++ b/package/php/php.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -PHP_VERSION = 8.5.11
> +PHP_VERSION = 8.5.12
>  PHP_SITE = https://www.php.net/distributions
>  PHP_SOURCE = php-$(PHP_VERSION).tar.xz
>  PHP_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-10-23 13:21 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-21 15:20   ` Julien Olivain via buildroot
2026-10-23 13:21   ` Raphaël Mélotte via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox