Security - PHP RCEs - when will packages be available?

I'm not entirely sure what I'm reading here:


The 144amd64 quarterly line shows parallel-build in progress, running for 8 hours now, with 35 "things" remaining (ports?). Been 35 for a while, so guessing it is building something huge.

Last quarterly line shows 37h17m to build, but that was for 10K "things" versus this other build of 3.5K "things". So maybe it will take roughly 13 hours in all, maybe 5 hours left? But will depend on those "things" left I assume, what failures there might be, and then someone/something has to test & copy packages to distribution points?

All speculation.
 
Build in one jail, move pkg to another. Seems to run fine even through modules are 8.3.35...
Code: 
# jexec  15 php -v | grep built
PHP 8.3.36 (cli) (built: Oct 21 2026 19:53:52) (NTS)
# jexec 14 php -v | grep built
PHP 8.3.35 (cli) (built: Oct 15 2026 02:52:14) (NTS)
# jexec 15 csh
# pkg create -o /tmp php83-8.3.36 mod_php83-8.3.36
Creating package for php83-8.3.36
Creating package for mod_php83-8.3.36
# ls -l /tmp/*php*
-rw-r--r--  1 root wheel 1780410 Oct 21 21:42 /tmp/mod_php83-8.3.36.pkg
-rw-r--r--  1 root wheel 5410667 Oct 21 21:42 /tmp/php83-8.3.36.pkg
# exit
# cp /data/frog.example.com/tmp/*php* /data/pear.example.come/tmp/
# jexec 14 csh
# cd /tmp && pkg install php83-8.3.36.pkg mod_php83-8.3.36.pkg
# apachectl restart
# php --version
 
You must log in or register to reply here.
Back
Top