git: fdbbc5f67ab0 - main - security/vuxml: Fix PHP entry d8e16d08-cd2f-11f1-8135-8447094a420f
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 21 Oct 2026 14:27:36 UTC
The branch main has been updated by joneum:
URL: https://cgit.FreeBSD.org/ports/commit/?id=fdbbc5f67ab0e9fa763fd75fdf7892f735f7df77
commit fdbbc5f67ab0e9fa763fd75fdf7892f735f7df77
Author: Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-10-21 14:26:54 +0000
Commit: Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-10-21 14:26:54 +0000
security/vuxml: Fix PHP entry d8e16d08-cd2f-11f1-8135-8447094a420f
- php85: the fixed version is 8.5.12, not 8.5.13
- Quote the security advisory instead of the pre-announcement
- Add references to the advisory and both GHSAs
Reported by: Dan Langille <dan@langille.org>
Sponsored by: Netzkommune GmbH
---
security/vuxml/vuln/2026.xml | 13 +++++++++----
1 file changed, 9 insertions(+), 4 deletions(-)
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 3733160792bf..f42c29afd2bf 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -55,7 +55,7 @@
</package>
<package>
<name>php85</name>
- <range><lt>8.5.13</lt></range>
+ <range><lt>8.5.12</lt></range>
</package>
<package>
<name>php86</name>
@@ -65,19 +65,24 @@
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>The PHP project reports:</p>
- <blockquote cite="https://www.php.net/archive/2026.php#2026-10-20-1">
- <p>Upcoming Critical PHP Security Release</p>
+ <blockquote cite="https://www.php.net/archive/2026.php#2026-10-21-5">
+ <p>PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical
+ vulnerabilities that can allow unauthenticated remote code
+ execution.</p>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2026-109618</cvename>
<cvename>CVE-2026-109619</cvename>
- <url>https://www.php.net/archive/2026.php#2026-10-20-1</url>
+ <url>https://www.php.net/archive/2026.php#2026-10-21-5</url>
+ <url>https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w</url>
+ <url>https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp</url>
</references>
<dates>
<discovery>2026-10-20</discovery>
<entry>2026-10-21</entry>
+ <modified>2026-10-21</modified>
</dates>
</vuln>