* [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36
@ 2026-10-21 14:36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
0 siblings, 2 replies; 5+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-21 14:36 UTC (permalink / raw)
To: buildroot; +Cc: Bernd Kuhls, Thomas Perale
This release include fixes for critical remote code execution
vulnerabilities:
- https://www.php.net/archive/2026.php#2026-10-21-5
See the release notes: https://www.php.net/ChangeLog-8.php#8.3.36
This fixes the following vulnerabilities:
- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/php/php.hash | 2 +-
package/php/php.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/php/php.hash b/package/php/php.hash
index 99ce84673e..604e52a54f 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
# From https://www.php.net/downloads.php
-sha256 ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a php-8.3.35.tar.xz
+sha256 dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd php-8.3.36.tar.xz
# License file
sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index 497ccc49e4..fd01d75e7f 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
#
################################################################################
-PHP_VERSION = 8.3.35
+PHP_VERSION = 8.3.36
PHP_SITE = https://www.php.net/distributions
PHP_SOURCE = php-$(PHP_VERSION).tar.xz
PHP_INSTALL_STAGING = YES
--
2.56.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 5+ messages in thread
* [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
@ 2026-10-21 14:36 ` Thomas Perale via buildroot
2026-10-21 15:20 ` Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
1 sibling, 2 replies; 5+ messages in thread
From: Thomas Perale via buildroot @ 2026-10-21 14:36 UTC (permalink / raw)
To: buildroot; +Cc: Bernd Kuhls, Thomas Perale
This release include fixes for critical remote code execution
vulnerabilities:
- https://www.php.net/archive/2026.php#2026-10-21-5
See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
This fixes the following vulnerabilities:
- CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
- CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
---
package/php/php.hash | 2 +-
package/php/php.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/php/php.hash b/package/php/php.hash
index 0f2b6785bf..e1e92781ea 100644
--- a/package/php/php.hash
+++ b/package/php/php.hash
@@ -1,5 +1,5 @@
# From https://www.php.net/downloads.php?source=Y
-sha256 d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360 php-8.5.11.tar.xz
+sha256 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 php-8.5.12.tar.xz
# License file
sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
diff --git a/package/php/php.mk b/package/php/php.mk
index cd1270be57..1bb25d0863 100644
--- a/package/php/php.mk
+++ b/package/php/php.mk
@@ -4,7 +4,7 @@
#
################################################################################
-PHP_VERSION = 8.5.11
+PHP_VERSION = 8.5.12
PHP_SITE = https://www.php.net/distributions
PHP_SOURCE = php-$(PHP_VERSION).tar.xz
PHP_INSTALL_STAGING = YES
--
2.56.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
@ 2026-10-21 15:20 ` Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 5+ messages in thread
From: Julien Olivain via buildroot @ 2026-10-21 15:20 UTC (permalink / raw)
To: Thomas Perale; +Cc: buildroot, Bernd Kuhls
On 21/10/2026 16:36, Thomas Perale via buildroot wrote:
> This release include fixes for critical remote code execution
> vulnerabilities:
>
> - https://www.php.net/archive/2026.php#2026-10-21-5
>
> See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
>
> This fixes the following vulnerabilities:
>
> - CVE-2026-109618:
> https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619:
> https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-21 15:20 ` Julien Olivain via buildroot
@ 2026-10-23 13:21 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-23 13:21 UTC (permalink / raw)
To: buildroot, Thomas Perale; +Cc: Raphaël Mélotte
In reply of:
> This release include fixes for critical remote code execution
> vulnerabilities:
>
> - https://www.php.net/archive/2026.php#2026-10-21-5
>
> See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12
>
> This fixes the following vulnerabilities:
>
> - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2026.08.x. Thanks
> ---
> package/php/php.hash | 2 +-
> package/php/php.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/php/php.hash b/package/php/php.hash
> index 0f2b6785bf..e1e92781ea 100644
> --- a/package/php/php.hash
> +++ b/package/php/php.hash
> @@ -1,5 +1,5 @@
> # From https://www.php.net/downloads.php?source=Y
> -sha256 d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360 php-8.5.11.tar.xz
> +sha256 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 php-8.5.12.tar.xz
>
> # License file
> sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
> diff --git a/package/php/php.mk b/package/php/php.mk
> index cd1270be57..1bb25d0863 100644
> --- a/package/php/php.mk
> +++ b/package/php/php.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -PHP_VERSION = 8.5.11
> +PHP_VERSION = 8.5.12
> PHP_SITE = https://www.php.net/distributions
> PHP_SOURCE = php-$(PHP_VERSION).tar.xz
> PHP_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
@ 2026-10-23 13:21 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 5+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-23 13:21 UTC (permalink / raw)
To: buildroot, Thomas Perale; +Cc: Raphaël Mélotte
In reply of:
> This release include fixes for critical remote code execution
> vulnerabilities:
>
> - https://www.php.net/archive/2026.php#2026-10-21-5
>
> See the release notes: https://www.php.net/ChangeLog-8.php#8.3.36
>
> This fixes the following vulnerabilities:
>
> - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
> - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
>
> Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Applied to 2025.02.x. Thanks
> ---
> package/php/php.hash | 2 +-
> package/php/php.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/php/php.hash b/package/php/php.hash
> index 99ce84673e..604e52a54f 100644
> --- a/package/php/php.hash
> +++ b/package/php/php.hash
> @@ -1,5 +1,5 @@
> # From https://www.php.net/downloads.php
> -sha256 ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a php-8.3.35.tar.xz
> +sha256 dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd php-8.3.36.tar.xz
>
> # License file
> sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE
> diff --git a/package/php/php.mk b/package/php/php.mk
> index 497ccc49e4..fd01d75e7f 100644
> --- a/package/php/php.mk
> +++ b/package/php/php.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -PHP_VERSION = 8.3.35
> +PHP_VERSION = 8.3.36
> PHP_SITE = https://www.php.net/distributions
> PHP_SOURCE = php-$(PHP_VERSION).tar.xz
> PHP_INSTALL_STAGING = YES
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2026-10-23 13:21 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-21 14:36 [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Thomas Perale via buildroot
2026-10-21 14:36 ` [Buildroot] [PATCH 1/1] package/php: security bump to v8.5.12 Thomas Perale via buildroot
2026-10-21 15:20 ` Julien Olivain via buildroot
2026-10-23 13:21 ` Raphaël Mélotte via buildroot
2026-10-23 13:21 ` [Buildroot] [PATCH 2025.02.x 1/1] package/php: security bump to v8.3.36 Raphaël Mélotte via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox