Upgrade php security updates

Trying to recompile php to address vulnerability. I am getting this:

Error: Failed to download metadata for repo 'mariadb': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
yum -y install libicu69 libicu69-devel --allowerasing --enablerepo=remi --disablerepo=epel
MariaDB 0.0 B/s | 0 B 01:00
Errors during downloading metadata for repository 'mariadb':
- Curl error (28): Timeout was reached for https://mirror.docker.ru/mariadb/yum/10.6/rhel9-amd64/repodata/repomd.xml [Failed to connect to mirror.docker.ru port 443: Connection timed out]
Error: Failed to download metadata for repo 'mariadb': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
PHPDEBUGMODE: disabled – reverting tweaks
PHPDEBUGMODE: deleting stale core files in /tmp
MariaDB 0.0 B/s | 0 B 01:00
Errors during downloading metadata for repository 'mariadb':
- Curl error (28): Timeout was reached for https://mirror.docker.ru/mariadb/yum/10.6/rhel9-amd64/repodata/repomd.xml [Failed to connect to mirror.docker.ru port 443: Connection timed out]
Error: Failed to download metadata for repo 'mariadb': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
ERROR: GCC Toolset 15 packages could not be installed. Check enabled repositories and retry.

Thu Oct 22 04:13:00 PM UTC 2026
Error: 1, PHP configure failed (132.00stable.b223)


System info:

lscpu
Architecture: x86_64
CPU op-mode(s): 32-bit, 64-bit
Address sizes: 40 bits physical, 48 bits virtual
Byte Order: Little Endian
CPU(s): 2
On-line CPU(s) list: 0,1
Vendor ID: GenuineIntel
BIOS Vendor ID: QEMU
Model name: Intel Core Processor (Skylake, IBRS, no TSX)
BIOS Model name: pc-q35-8.2
CPU family: 6
Model: 94
Thread(s) per core: 2
Core(s) per socket: 1
Socket(s): 1
Stepping: 3
BogoMIPS: 6816.00
Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx rdtscp lm constant_tsc rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm abm cpuid_fault pti ssbd ibrs ibpb fsgsbase bmi1 avx2 smep bmi2 erms invpcid xsaveopt arat
Hypervisor vendor: Microsoft
Virtualization type: full
L1d cache: 64 KiB (2 instances)
L1i cache: 64 KiB (2 instances)
L2 cache: 4 MiB (1 instance)
L3 cache: 16 MiB (1 instance)
NUMA node(s): 1
NUMA node0 CPU(s): 0,1
Vulnerability Gather data sampling: Unknown: Dependent on hypervisor status
Vulnerability Indirect target selection: Mitigation; Aligned branch/return thunks
Vulnerability Itlb multihit: KVM: Mitigation: VMX unsupported
Vulnerability L1tf: Mitigation; PTE Inversion
Vulnerability Mds: Vulnerable: Clear CPU buffers attempted, no microcode; SMT Host state unknown
Vulnerability Meltdown: Mitigation; PTI
Vulnerability Mmio stale data: Vulnerable: Clear CPU buffers attempted, no microcode; SMT Host state unknown
Vulnerability Reg file data sampling: Not affected
Vulnerability Retbleed: Mitigation; IBRS
Vulnerability Spec rstack overflow: Not affected
Vulnerability Spec store bypass: Mitigation; Speculative Store Bypass disabled via prctl
Vulnerability Spectre v1: Mitigation; usercopy/swapgs barriers and __user pointer sanitization
Vulnerability Spectre v2: Mitigation; IBRS; IBPB conditional; STIBP disabled; RSB filling; PBRSB-eIBRS Not affected; BHI SW loop, KVM SW loop
Vulnerability Srbds: Unknown: Dependent on hypervisor status
Vulnerability Tsx async abort: Not affected

CFLAGS=
CXXFLAGS=
GCC_NONNATIVEFLAGS=

total used free shared buff/cache available
Mem: 3649 1448 394 195 2279 2201
Low: 3649 3254 394
High: 0 0 0
Swap: 8191 193 7998
Total: 11841 1642 8393

Filesystem Type Size Used Avail Use% Mounted on
devtmpfs devtmpfs 4.0M 0 4.0M 0% /dev
tmpfs tmpfs 1.8G 0 1.8G 0% /dev/shm
tmpfs tmpfs 730M 67M 664M 10% /run
efivarfs efivarfs 256K 19K 233K 8% /sys/firmware/efi/efivars
/dev/vda2 ext4 120G 23G 93G 20% /
/dev/vda1 vfat 260M 7.6M 253M 3% /boot/efi
/dev/loop0 ext4 3.9G 72K 3.7G 1% /tmp
tmpfs tmpfs 365M 4.0K 365M 1% /run/user/0

CPU: Intel Core Processor (Skylake, IBRS, no TSX) (2)

---

version increment history
132.00stable.b095 #Fri Jul 25 05:37:05 PM UTC 2025
132.00stable.b095 #Sat Jul 26 06:04:42 PM UTC 2025
132.00stable.b223 #Thu Oct 22 03:24:53 PM UTC 2026
132.00stable.b223 #Thu Oct 22 03:30:30 PM UTC 2026
132.00stable.b223 #Thu Oct 22 04:02:30 PM UTC 2026


THX

 

no , it doesnt give me 200.

You have new mail in /var/spool/mail/root

in csf I have this rule:

as denied countries:
# Each option is a comma separated list of CC's, e.g. "US,GB,DE"
CC_DENY = "CN,RU,ID,VN,TR,IR"
CC_ALLOW = ""

Might this be a problem?

 

Poland vs Russia....I guess geopolitics. Going to adjust and restart csf

 

THX, this was the problem. Resolved.