Get the most out of your Centmin Mod LEMP stack
Become a Member

Stable Branch add AlmaLinux compat-openssl11 security fixes to OpenSSL 1.1.1w build…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 24, 2026 at 10:34 AM.

  1. eva2000

    eva2000 Administrator Staff Member

    60,106
    12,587
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,244
    Local Time:
    5:02 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    add AlmaLinux compat-openssl11 security fixes to OpenSSL 1.1.1w builds in 132.00stable

    Upstream stopped releasing OpenSSL 1.1.1 fixes after 1.1.1w, which Centmin Mod
    still builds into /opt/openssl for EL9 PHP 7.4/8.0 and for source-built Nginx
    OpenSSL. These builds now carry the fixes AlmaLinux 9 backports to
    compat-openssl11, which is Red Hat's selection, not every 1.1.1 CVE since.


    Changes:
    - add the six compat-openssl11 security patches rebased onto 1.1.1w
    - apply them all or none before /opt/openssl is replaced, rebuilding once
    when the patch set changes
    - build /opt/openssl for EL9/EL10 PHP 7.4/8.0 when it is missing instead of
    falling back to system OpenSSL 3
    - add OPENSSL_ALMA_PATCHES and OPENSSL_ALMA_PATCHES_STRICT options

    Continue reading...

    132.00stable branch