SHM PHP security source log
PHP slot: 83
PHP version: 8.3.35
Source strategy: official
Official source SHA256: ff4630fbbbd94359134b7d3c223db59329905bdc4f5a9ef93d257b48e358619a
Legacy overlay mode: official-source-only
Legacy overlay action: official-source-no-legacy-overlay
Overlay manifest SHA256: e403d989e83e63af03bf23735aef56504523b4e16c6ea5d1753acf576d4a0e79
Integrated SHM FPM patch SHA256: f44490ec34f0a548df4dd8667b84ae66230db8e0fb7f9b74798eda0a86cc89e0
Runtime reliability correction: child shutdown signals remain blocked through initialization.
Reviewed overlay identifiers:
- none; this slot uses the selected official source without a legacy overlay
Reviewed security-relevant bug fixes without a public identifier:
- none
Public source inputs:
- none; use the official release provenance above
Explicit component exclusions:
- PDO DBLIB / CVE-2024-11236: No SHM PHP build enables or packages PDO DBLIB.
- PDO Firebird / CVE-2024-11236, CVE-2025-14179: No SHM PHP build enables or packages PDO Firebird.
Runtime source corrections:
- PHP issue #8699: applied
- Keep ini_get() runtime-bound across OPcache-shared requests and FPM pools; other optimizations remain enabled.
- https://github.com/php/php-src/issues/8699
- Effective runtime correction SHA256: 429b0a74383e74103a9f65713d4d6cabfbd2977ec54db805698e527e9199bde4
Vendor implementation inputs:
- none; no CloudLinux or TuxCare implementation code is included.
Coverage notice:
- Reviewed identifiers describe the fixes represented by this overlay and are not a universal vulnerability or private-vendor coverage guarantee.
