Want more timely Centmin Mod News Updates?
Become a Member

Stable Branch backport PHP 8.1.33/8.2.34 security fixes to PHP 7.2-7.3 EOL in 132.0…

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 31, 2026 at 12:34 PM.

  1. eva2000

    eva2000 Administrator Staff Member

    60,209
    12,603
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,261
    Local Time:
    7:08 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    backport PHP 8.1.33/8.2.34 security fixes to PHP 7.2-7.3 EOL in 132.00stable

    Centmin Mod ports of two upstream fixes that no EOL patch source carries
    for PHP 7.2/7.3. Each patch header lists the reference commit and every
    adaptation for the older PHP version.

    Changes:
    - php7234-cve-2025-14181.patch: SOAP HTTP chunked and Content-Length
    size checks for PHP 7.2 (CVE-2025-14181, GHSA-cj93-vc83-wgqv), port of
    php-src b11bd1d9390b
    - php7234-cve-2025-1735.patch, php7331-cve-2025-1735.patch: check pgsql
    and pdo_pgsql escaping errors for PHP 7.2/7.3 (CVE-2025-1735,
    GHSA-hrwm-9436-5mv3), port of php-src 9376aeef9f8f
    - inc/php_patch.inc: append cve-2025-1735 and cve-2025-14181 to the PHP
    7.2 list and cve-2025-1735 to the PHP 7.3 list

    Continue reading...

    132.00stable branch