Join the community today
Register Now

Beta Branch add patched distro brotli rpm option to tools/phpfpm-brotli.sh in 140…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 27, 2026 at 10:14 AM.

  1. eva2000

    eva2000 Administrator Staff Member

    60,147
    12,591
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,249
    Local Time:
    5:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    add patched distro brotli rpm option to tools/phpfpm-brotli.sh in 140.00beta01

    With PHPFPM_BROTLI_RPM='y', tools/phpfpm-brotli.sh on and the menu 5
    prepare hook first install a Centmin Mod rebuild of the distro brotli
    packages with the CVE-2026-111497 fix, when one matches the installed
    release exactly. That fixes the system libbrotlidec for php-fpm, PHP CLI
    and everything else, so the LD_LIBRARY_PATH override retires itself. With
    no matching build, or on a download, sha256 or dnf failure, the override
    is used as before.

    Changes:
    - pinned table of patched builds of brotli-1.0.6-4.el8_10,
    brotli-1.0.9-10.el9_8 and brotli-1.1.0-8.el10_2 on parts.centminmod.com,
    keyed by distro source rpm, with a sha256 per package
    - install only the brotli subpackages already installed, from local files
    so tools/php-libs-versionlock.sh leaves them unlocked; the .cmm1 release
    suffix lets the distro's own fixed release replace them
    - rpm-revert subcommand downgrades back to the distro release
    - status shows whether the patched rpm is installed or available
    - on restarts php-fpm when it still maps a replaced libbrotli
    - off no longer says menu 5 turns the override back on when the distro
    brotli is already fixed
    - PHPFPM_BROTLI_RPM='y' setting in centmin.sh


    Continue reading...

    140.00beta01 branch