Want to subscribe to topics you're interested in?
Become a Member

Stable Branch backport PHP 8.2.33/8.2.34 security fixes to PHP 7.2-8.1 EOL in 132.0…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 21, 2026 at 10:34 AM.

  1. eva2000

    eva2000 Administrator Staff Member

    59,950
    12,556
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,201
    Local Time:
    5:25 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    backport PHP 8.2.33/8.2.34 security fixes to PHP 7.2-8.1 EOL in 132.00stable

    Backport upstream PHP 8.2.33 and 8.2.34 security fixes to EOL PHP versions
    and bump installer PHPVERLATEST fallback defaults to current upstream
    releases.

    Changes:
    - PHP 7.2.34 / 7.3.33: add cve-2026-9672, cve-2026-17543, cve-2026-7260
    patches
    - PHP 7.4.33 / 8.0.x / 8.1.x: add cve-2026-9672, cve-2026-17543,
    cve-2026-7260, gh22643 and cumulative from-8.2.34 patches (CVE-2025-1218,
    CVE-2025-14181, CVE-2026-6103, CVE-2026-17545, CVE-2026-91765,
    CVE-2026-91766, CVE-2026-91767, CVE-2026-91768, CVE-2026-91769,
    CVE-2026-92842, CVE-2026-93682)
    - the cve-2026-9672 patch fixes PHP's bundled libgd only; builds using the
    external libgd need a separate libgd fix
    - installer-latest.sh: PHPVERLATEST fallback 8.2.32 to 8.2.34
    - installer82.sh: PHPVERLATEST fallback 8.2.32 to 8.2.34
    - installer83.sh: PHPVERLATEST fallback 8.3.32 to 8.3.35

    Continue reading...

    132.00stable branch