SHM PHP security source log
PHP slot: 82
PHP version: 8.2.35
Source strategy: official
Official source SHA256: 5737b98601fe5ab1b8c5db0c82ed3158acb9283ed3081ffe2faffb9ac81455e6
Legacy overlay mode: official-source-only
Legacy overlay action: official-source-no-legacy-overlay
Overlay manifest SHA256: 94946187e74711ea8cc2041288443b8c4de68412f5ee9f5a18ca5902843bc2e4
Integrated SHM FPM patch SHA256: 642e01c0263563c1e87cb0ae05376f74a245bc5788e3092647c3504a807d224f
Reviewed overlay identifiers:
- none; this slot uses the selected official source without a legacy overlay
Reviewed security-relevant bug fixes without a public identifier:
- none
Public source inputs:
- none; use the official release provenance above
Explicit component exclusions:
- PDO DBLIB / CVE-2024-11236: No SHM PHP build enables or packages PDO DBLIB.
- PDO Firebird / CVE-2024-11236, CVE-2025-14179: No SHM PHP build enables or packages PDO Firebird.
Runtime source corrections:
- PHP issue #8699: applied
- Keep ini_get() runtime-bound across OPcache-shared requests and FPM pools; other optimizations remain enabled.
- https://github.com/php/php-src/issues/8699
- Effective runtime correction SHA256: 429b0a74383e74103a9f65713d4d6cabfbd2977ec54db805698e527e9199bde4
Coverage notice:
- Reviewed identifiers describe the fixes represented by this overlay and are not a universal vulnerability coverage guarantee.
