From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 13 Nov 2026 09:39:56 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xRmp9-00AMFy-39 for lore@lore.pengutronix.de; Fri, 13 Nov 2026 09:39:56 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmp7-00082V-HJ; Fri, 13 Nov 2026 09:39:53 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xRmoD-0004Cr-HI for ptxdist@pengutronix.de; Fri, 13 Nov 2026 09:38:58 +0100 Received: from dude05.red.stw.pengutronix.de (dude05.red.stw.4.pengutronix.de [10.17.1.19]) (Authenticated sender: relay-from-dude05.red.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 5F4D62020ED; Fri, 13 Nov 2026 09:38:57 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1794559137; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=nbBo7lsCNHjbSsBULE09AFW5CFwWKsOJ5MK/FFHzgFc=; b=JPEz/yA3EY+Eq8o68tlLsxBrbAvccuhxwKGbOfNGg/+EQW6TwzOPK7XEGPVQnOEupeJVd4 GD9xMUW1BJMZlmtBfauvr+jNffDayVyqRhx5XIIJ2zOCHkiwcfeoLZnIPci/VvR+pD/ZIk qYezV+OoCiIW0mjJ2fHD6LfXTy6+lrYNaGaCN6Ut2b1HY3tuI2yCYqnkrisllx46iKJWT7 GVMRxW3gY+JXKYsoVFZ1v01VJTqBuuSKOm+Vk3cknRmQ2jVCE6ddTPKDMRHoj4jrUiHUyx 6xHKKPj2Lv1xCOS0lSmBNrLQQ1zSMBeGhZdwQeQXi2NaReDcDGb55KVjS/veNw== ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1794559137; a=rsa-sha256; cv=none; b=D1csFbGERtL0/iStIW1JYnjJ7blhB+D2Jk+RzKHsEK7ufFkP8+eFWULBXWhoiUCXe1UE8O VcZRKc8OiD3m5+cACfRulbF509dzvGcqNC3TGD7XIspoRDPgUgEOWaQTiccFzL/pVVxYZy WwDRNPFpk7rlKSkmj0sr9vcYP+N7U973kcYsRJjSjxIQpftuY+9MNtnKJ+DCr08lMl4ISs SU1GUVFIlT3wRg0qRIaPyCN7feohf9dFzgSDccxm+2y4+u9iPPZK76+yFju7xO6TmS3Sw6 qHcz0C76kevp7P4z2YIcbdvm84fS0m/SVY6V3AeJjoVyA30uUwzz1nRJMlC5gA== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=relay-from-dude05.red.stw.pengutronix.de smtp.mailfrom=mol@pengutronix.de Received: by dude05.red.stw.pengutronix.de (Postfix, from userid 1014) id 512D1743103; Fri, 13 Nov 2026 09:38:57 +0100 (CET) From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 13 Nov 2026 09:38:57 +0100 Message-ID: <20261113083857.1379092-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261021141034.1945215-1-s.pueschel@pengutronix.de> References: <20261021141034.1945215-1-s.pueschel@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.0 required=5.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [APPLIED] php8: version bump 8.5.5 -> 8.5.12 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: =?UTF-8?q?Sven=20P=C3=BCschel?= Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 06d9171e63213805029865c5d639aa3151baf887. Michael [sent from post-receive hook] On Fri, 13 Nov 2026 09:38:57 +0100, Sven Püschel wrote: > Fix two critical vulnerabilities allowing remote code execution [1][2]: > https://www.php.net/ChangeLog-8.php#PHP_8_5 > > [1] https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w > [2] https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp > > Signed-off-by: Sven Püschel > Message-Id: <20261021141034.1945215-1-s.pueschel@pengutronix.de> > Signed-off-by: Michael Olbrich > > diff --git a/rules/php8.make b/rules/php8.make > index 084f2c34e900..cf4d3b9db050 100644 > --- a/rules/php8.make > +++ b/rules/php8.make > @@ -18,8 +18,8 @@ PACKAGES-$(PTXCONF_PHP8) += php8 > # > # Paths and names > # > -PHP8_VERSION := 8.5.5 > -PHP8_SHA256 := 95bec382f4bd00570a8ef52a58ec04d8d9b9a90494781f1c106d1b274a3902f2 > +PHP8_VERSION := 8.5.12 > +PHP8_SHA256 := 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 > PHP8 := php-$(PHP8_VERSION) > PHP8_SUFFIX := tar.xz > PHP8_SOURCE := $(SRCDIR)/$(PHP8).$(PHP8_SUFFIX)