From e9be6e35d3da84c9ba1ea792169641b38e086e34 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Wed, 21 Oct 2026 16:36:06 +0200 Subject: [PATCH] package/php: security bump to v8.5.12 This release include fixes for critical remote code execution vulnerabilities: - https://www.php.net/archive/2026.php#2026-10-21-5 See the release notes: https://www.php.net/ChangeLog-8.php#8.5.12 This fixes the following vulnerabilities: - CVE-2026-109618: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w - CVE-2026-109619: https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp Signed-off-by: Thomas Perale Signed-off-by: Julien Olivain --- package/php/php.hash | 2 +- package/php/php.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/php/php.hash b/package/php/php.hash index 0f2b6785bf..e1e92781ea 100644 --- a/package/php/php.hash +++ b/package/php/php.hash @@ -1,5 +1,5 @@ # From https://www.php.net/downloads.php?source=Y -sha256 d9be75c08e8c316f4c8f4194d8fbe1750a15f6a6d9d4e3fe72082abeeb800360 php-8.5.11.tar.xz +sha256 08bc2eba2a588654ade1357174aa646b761556c862dda0678345ee29ed481209 php-8.5.12.tar.xz # License file sha256 b42e4df5e50e6ecda1047d503d6d91d71032d09ed1027ba1ef29eed26f890c5a LICENSE diff --git a/package/php/php.mk b/package/php/php.mk index cd1270be57..1bb25d0863 100644 --- a/package/php/php.mk +++ b/package/php/php.mk @@ -4,7 +4,7 @@ # ################################################################################ -PHP_VERSION = 8.5.11 +PHP_VERSION = 8.5.12 PHP_SITE = https://www.php.net/distributions PHP_SOURCE = php-$(PHP_VERSION).tar.xz PHP_INSTALL_STAGING = YES