Stable Branch add patched distro brotli rpm option to tools/phpfpm-brotli.sh in 132…

add patched distro brotli rpm option to tools/phpfpm-brotli.sh in 132.00stable

With PHPFPM_BROTLI_RPM='y', tools/phpfpm-brotli.sh on and the menu 5
prepare hook first install a Centmin Mod rebuild of the distro brotli
packages with the CVE-2026-111497 fix, when one matches the installed
release exactly. That fixes the system libbrotlidec for php-fpm, PHP CLI
and everything else, so the LD_LIBRARY_PATH override retires itself. With
no matching build, or on a download, sha256 or dnf failure, the override
is used as before.

---

Changes:
- pinned table of patched builds of brotli-1.0.6-4.el8_10,
brotli-1.0.9-10.el9_8 and brotli-1.1.0-8.el10_2 on parts.centminmod.com,
keyed by distro source rpm, with a sha256 per package
- install only the brotli subpackages already installed, from local files
so tools/php-libs-versionlock.sh leaves them unlocked; the .cmm1 release
suffix lets the distro's own fixed release replace them
- rpm-revert subcommand downgrades back to the distro release
- status shows whether the patched rpm is installed or available
- on restarts php-fpm when it still maps a replaced libbrotli
- off no longer says menu 5 turns the override back on when the distro
brotli is already fixed
- PHPFPM_BROTLI_RPM='y' setting in centmin.sh

Continue reading...

132.00stable branch

• Branch: https://github.com/centminmod/centminmod/tree/132.00stable
• Commit History: https://github.com/centminmod/centminmod/commits/132.00stable