From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 21 Oct 2026 16:10:51 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xJX1m-001UH3-2O for lore@lore.pengutronix.de; Wed, 21 Oct 2026 16:10:51 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJX1m-0001eI-3M; Wed, 21 Oct 2026 16:10:50 +0200 Received: from dude04.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::ac]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJX1X-0001e2-Ei; Wed, 21 Oct 2026 16:10:35 +0200 From: =?UTF-8?q?Sven=20P=C3=BCschel?= To: ptxdist@pengutronix.de Date: Wed, 21 Oct 2026 16:10:10 +0200 Message-ID: <20261021141034.1945215-1-s.pueschel@pengutronix.de> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: [ptxdist] [PATCH] php8: version bump 8.5.5 -> 8.5.12 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Fix two critical vulnerabilities allowing remote code execution [1][2]: https://www.php.net/ChangeLog-8.php#PHP_8_5 [1] https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w [2] https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp Signed-off-by: Sven Püschel --- rules/php8.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/php8.make b/rules/php8.make index 084f2c34e..cf4d3b9db 100644 --- a/rules/php8.make +++ b/rules/php8.make @@ -18,8 +18,8 @@ PACKAGES-$(PTXCONF_PHP8) += php8 # # Paths and names # -PHP8_VERSION := 8.5.5 -PHP8_SHA256 := 95bec382f4bd00570a8ef52a58ec04d8d9b9a90494781f1c106d1b274a3902f2 +PHP8_VERSION := 8.5.12 +PHP8_SHA256 := 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 PHP8 := php-$(PHP8_VERSION) PHP8_SUFFIX := tar.xz PHP8_SOURCE := $(SRCDIR)/$(PHP8).$(PHP8_SUFFIX) -- 2.47.3