| Message ID | 20261023085051.1417202-1-Ghanshyam.BanaitSanjay@windriver.com |
|---|---|
| State | New |
| Headers | show |
| Series | [meta-oe] php: upgrade 8.5.11 -> 8.5.12 | expand |
Already sent earlier https://lists.openembedded.org/g/openembedded-devel/message/131301 On Fri, Oct 23, 2026 at 9:52 PM Ghanshyam Banait via lists.openembedded.org <Ghanshyam.BanaitSanjay=windriver.com@lists.openembedded.org> wrote: > > - CVE-2026-109618 (GHSA-w8hw-w9fx-j79w): RCE via OOM corruption. > longjmp() on out-of-memory could exit a context where request > memory was only partially initialized; request shutdown then > processed the invalid state. > > - CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp): RCE via stale global state. > Request-owned global state could survive after its backing request > heap was freed and be consumed by a later request on the same > worker before normal initialization reset it. > > Upstream advisory: https://www.php.net/archive/2026.php#2026-10-21-5 > > Changelog: https://www.php.net/ChangeLog-8.php#8.5.12 > > Signed-off-by: Ghanshyam Banait <Ghanshyam.BanaitSanjay@windriver.com> > --- > meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%) > > diff --git a/meta-oe/recipes-devtools/php/php_8.5.11.bb b/meta-oe/recipes-devtools/php/php_8.5.12.bb > similarity index 99% > rename from meta-oe/recipes-devtools/php/php_8.5.11.bb > rename to meta-oe/recipes-devtools/php/php_8.5.12.bb > index 831e926880..f9759cf7a5 100644 > --- a/meta-oe/recipes-devtools/php/php_8.5.11.bb > +++ b/meta-oe/recipes-devtools/php/php_8.5.12.bb > @@ -32,7 +32,7 @@ UPSTREAM_CHECK_REGEX = "releases/tag/php-(?P<pver>\d+(\.\d+)+)" > > S = "${UNPACKDIR}/php-${PV}" > > -SRC_URI[sha256sum] = "dc940716a8c73e531c0078eecb955d595d321ec2cc9d47149cf0089ea6e18f64" > +SRC_URI[sha256sum] = "ffb60edc437ced63b5137e4984db379a8111c50049c711510d8b958277efc1a8" > > CVE_PRODUCT = "php:php php_group:php" > > -- > 2.40.0 > > > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > View/Reply Online (#131357): https://lists.openembedded.org/g/openembedded-devel/message/131357 > Mute This Topic: https://lists.openembedded.org/mt/121867758/3619737 > Group Owner: openembedded-devel+owner@lists.openembedded.org > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [ankur.tyagi85@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=- >
diff --git a/meta-oe/recipes-devtools/php/php_8.5.11.bb b/meta-oe/recipes-devtools/php/php_8.5.12.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.5.11.bb rename to meta-oe/recipes-devtools/php/php_8.5.12.bb index 831e926880..f9759cf7a5 100644 --- a/meta-oe/recipes-devtools/php/php_8.5.11.bb +++ b/meta-oe/recipes-devtools/php/php_8.5.12.bb @@ -32,7 +32,7 @@ UPSTREAM_CHECK_REGEX = "releases/tag/php-(?P<pver>\d+(\.\d+)+)" S = "${UNPACKDIR}/php-${PV}" -SRC_URI[sha256sum] = "dc940716a8c73e531c0078eecb955d595d321ec2cc9d47149cf0089ea6e18f64" +SRC_URI[sha256sum] = "ffb60edc437ced63b5137e4984db379a8111c50049c711510d8b958277efc1a8" CVE_PRODUCT = "php:php php_group:php"
- CVE-2026-109618 (GHSA-w8hw-w9fx-j79w): RCE via OOM corruption. longjmp() on out-of-memory could exit a context where request memory was only partially initialized; request shutdown then processed the invalid state. - CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp): RCE via stale global state. Request-owned global state could survive after its backing request heap was freed and be consumed by a later request on the same worker before normal initialization reset it. Upstream advisory: https://www.php.net/archive/2026.php#2026-10-21-5 Changelog: https://www.php.net/ChangeLog-8.php#8.5.12 Signed-off-by: Ghanshyam Banait <Ghanshyam.BanaitSanjay@windriver.com> --- meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%)