Skip to content

v5.1.4

Choose a tag to compare

@ari-wg-gitbot ari-wg-gitbot released this 21 Oct 20:30
faaeda8
  • SECURITY: Update PHP to address critical vulnerabilities
    CVE-2026-109618 and CVE-2026-109619 (php2shell RCE chain, CVSS v4.0 9.2)

  • Add php 8.2.35, remove php 8.2.34 for stack(s) cflinuxfs4, cflinuxfs5

  • Add php 8.3.36, remove php 8.3.35 for stack(s) cflinuxfs4, cflinuxfs5

  • Add php 8.4.27, remove php 8.4.26 for stack(s) cflinuxfs4, cflinuxfs5

  • Add php 8.5.12, remove php 8.5.11 for stack(s) cflinuxfs4, cflinuxfs5

  • Add nginx 1.31.8, remove nginx 1.31.7 for stack cflinuxfs4

Packaged binaries:

name version cf_stacks modules
appdynamics 25.5.0-1371 cflinuxfs4, cflinuxfs5
composer 2.10.3 cflinuxfs4, cflinuxfs5
httpd 2.4.68 cflinuxfs4
httpd 2.4.68 cflinuxfs5
newrelic 10.21.0.11 cflinuxfs4
nginx 1.29.8 cflinuxfs4
nginx 1.29.8 cflinuxfs5
nginx 1.30.6 cflinuxfs4
nginx 1.30.6 cflinuxfs5
nginx 1.31.7 cflinuxfs5
nginx 1.31.8 cflinuxfs4
nginx 1.31.8 cflinuxfs5
php 8.2.35 cflinuxfs4 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.2.35 cflinuxfs5 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.3.36 cflinuxfs4 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.3.36 cflinuxfs5 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, imap, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phalcon, phpiredis, pspell, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tideways_xhprof, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.4.27 cflinuxfs4 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phpiredis, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.4.27 cflinuxfs5 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, opcache, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phpiredis, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, stomp, sysvmsg, sysvsem, sysvshm, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.5.12 cflinuxfs4 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phpiredis, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, sysvmsg, sysvsem, sysvshm, tidy, xdebug, xsl, yaf, yaml, zip, zlib
php 8.5.12 cflinuxfs5 amqp, apcu, bz2, curl, dba, enchant, exif, fileinfo, ftp, gd, gettext, gmp, igbinary, imagick, ioncube, ldap, lzf, mailparse, maxminddb, mbstring, memcached, mongodb, msgpack, mysqli, oauth, openssl, pcntl, pdo, pdo_firebird, pdo_mysql, pdo_odbc, pdo_pgsql, pdo_sqlite, pdo_sqlsrv, pgsql, phpiredis, psr, rdkafka, readline, redis, shmop, snmp, soap, sockets, sodium, solr, sqlsrv, ssh2, sysvmsg, sysvsem, sysvshm, tidy, xdebug, xsl, yaf, yaml, zip, zlib

Default binary versions:

name version
php 8.3.x
httpd 2.4.68
nginx 1.31.8
composer 2.10.3
  • Uncached buildpack SHA256: 7ed857706533c40ca93bb207c4a6989a0766393010594c10f0762fe3b1e4a4db
  • Uncached buildpack SHA256: 1368f207011c237eab7c8469f04e843caec9428e25b91b7105dcf90def7f54a0

What's Changed

Full Changelog: v5.1.3...v5.1.4