/ Register

Learn about Centmin Mod LEMP Stack today
Become a Member

Beta Branch fix PHP 7.4/8.0 custom OpenSSL builds and add OpenSSL 1.1.1w CVE-2024…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 24, 2026 at 10:34 AM.

Previous Thread Next Thread
Loading...
  1. Oct 24, 2026 at 10:34 AM #1
    eva2000

    eva2000 Administrator Staff Member

    60,106
    12,587
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,244
    Local Time:
    5:02 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    fix PHP 7.4/8.0 custom OpenSSL builds and add OpenSSL 1.1.1w CVE-2024-9143 fix in 140.00beta01

    On EL9, a menu 5 build of PHP 7.4/8.0 linked system OpenSSL 3 whenever the
    default PHP_VERSION was 8.1 or newer, because the check read the default
    version instead of the one being built.

    OpenSSL 1.1.1w builds also get upstream's CVE-2024-9143 fix, which RHEL does
    not patch because it builds without binary field curves. The patch set
    changes, so /opt/openssl is rebuilt once.

    Changes:
    - choose PHP_CUSTOMSSL from the PHP version being built (PHPVER_ID)
    - add patch 07, upstream commit 72ae83ad, to patches/openssl/almalinux-1.1.1w
    - rebuild a static-only /opt/openssl for PHP with shared libraries
    - build /opt/openssl for PHP also when Nginx uses quicTLS or AWS-LC

    Continue reading...

    140.00beta01 branch
     
Previous Thread Next Thread
Loading...

.