Skip to content

🧱 Mason '6'

Latest
Latest

Choose a tag to compare

View all tags
@mychidarko mychidarko released this 22 Oct 08:39
v4.5.6
d05f963

Security

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 (released 21 Oct 2026) fix CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell"), critical unauthenticated remote code execution bugs in the PHP runtime that are being exploited in the wild. Leaf's code is not affected, but please update PHP on every server you run.

Advisory: https://www.php.net/archive/2026.php

Changes

  • The docker scaffold now uses php:8.4.27-apache (was php:8.1-apache, which is end-of-life and gets no fix).
  • Existing projects: change the FROM line in docker/Dockerfile and rebuild with docker build --pull.
Assets 2
Loading