Skip to content

Require PHP 8.4.27+ or 8.5.12+ in WoltLab Suite 6.3 - #6747

Open
SoftCreatR wants to merge 1 commit into
WoltLab:6.3from
SoftCreatR:feature/php-security-version-checks
Open

SoftCreatR wants to merge 1 commit into
WoltLab:6.3from
SoftCreatR:feature/php-security-version-checks

Conversation

@SoftCreatR

Copy link
Copy Markdown
Contributor

This change enforces the patched (CVE-2026-109618 and CVE-2026-109619) minimum for each supported series across the standalone requirements test, installer, request middleware, ACP dashboard, system check, package list, and upgrade override form. Requirement messages are updated to show both minimum versions.

Validation:

  • PHP syntax checks passed for all six modified PHP files.
  • git diff --check passed.
  • The standalone requirements page correctly rejects PHP 8.5.11.
  • Installed WSC runtime behavior has not been verified.

Require PHP 8.4.27+ or 8.5.12+ following the October 21 security releases addressing CVE-2026-109618 and CVE-2026-109619.

Apply separate minimum versions for each supported PHP series across setup, runtime, and ACP checks. Update requirement messages accordingly.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant