Beta Branch update PHP CVE-2026-109618 login notice for PHP 7.2/7.3 backport in 1…

update PHP CVE-2026-109618 login notice for PHP 7.2/7.3 backport in 140.00beta01

---

Treat PHP 7.2.34 and 7.3.33 like 7.4.33, 8.0.30 and 8.1.34: fixed only
when the patch log of the build that installed php-fpm shows the
backport applied. The 7.2/7.3 backport uses the plain bug id
cve-2026-109618, so both the plain and the <major.minor>- prefixed
label are accepted. Until that backport ships, 7.2/7.3 hosts keep
seeing the notice.

Changes:
- config/motd/dmotd.sh: php_cve_2026_109618_status() adds 7.2 (fixed
from 7.2.34) and 7.3 (fixed from 7.3.33) as backport versions and
accepts "Patch applied successfully for bug #cve-2026-109618" as well
as "#<major.minor>-cve-2026-109618"
- config/motd/dmotd.sh: PHP 7.1 and older stay end-of-life with no fix
- example/custom_config.inc: list PHP 7.2.34 and 7.3.33 in the
DMOTD_PHPCVE_2026_109618 notes

Continue reading...

140.00beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/140.00beta01
• Commit History: https://github.com/centminmod/centminmod/commits/140.00beta01