Re: PHP2Shell 0Day

[P Gman <patrickgunsolley%gmail.com@localhost>]

Yup - 8.5.12 confirmed in pkgsrc. Cheers.

On Wed, Oct 21, 2026 at 4:52 PM Greg Troxel <gdt%lexort.com@localhost> wrote:
>
> P Gman <patrickgunsolley%gmail.com@localhost> writes:
>
> > Looks like CVE-2026-109618 and CVE-2026-109619 are pretty severe at 9.2.
> >
> > Is there WIP to ship these to pkgsrc?
>
> The PHP versions released today are already in pkgsrc master and pulled
> up to the 2026Q3 branch.  I would imagine that binary packges will
> follow pretty soon.
>
> (I've already built my own packages and updated, and did not have any
> problems doing so.)