SHM PHP security source log
PHP slot: 83
PHP version: 8.3.36
Source strategy: official
Official source SHA256: dd54693aa334c5c4d72e9aee96b082c2473750a18a6c1d105789c93a3b1692fd
Legacy overlay mode: official-source-only
Legacy overlay action: official-source-no-legacy-overlay
Overlay manifest SHA256: 94946187e74711ea8cc2041288443b8c4de68412f5ee9f5a18ca5902843bc2e4
Integrated SHM FPM patch SHA256: f44490ec34f0a548df4dd8667b84ae66230db8e0fb7f9b74798eda0a86cc89e0
Runtime reliability correction: child shutdown signals remain blocked through initialization.
Reviewed overlay identifiers:
- none; this slot uses the selected official source without a legacy overlay
Reviewed security-relevant bug fixes without a public identifier:
- none
Public source inputs:
- none; use the official release provenance above
Explicit component exclusions:
- PDO DBLIB / CVE-2024-11236: No SHM PHP build enables or packages PDO DBLIB.
- PDO Firebird / CVE-2024-11236, CVE-2025-14179: No SHM PHP build enables or packages PDO Firebird.
Runtime source corrections:
- PHP issue #8699: applied
- Keep ini_get() runtime-bound across OPcache-shared requests and FPM pools; other optimizations remain enabled.
- https://github.com/php/php-src/issues/8699
- Effective runtime correction SHA256: 429b0a74383e74103a9f65713d4d6cabfbd2977ec54db805698e527e9199bde4
Coverage notice:
- Reviewed identifiers describe the fixes represented by this overlay and are not a universal vulnerability coverage guarantee.
