fix(images): install Remi packages from the origin, not the lagging mirrors #28

Merged

jknapp merged 1 commits from fix/remi-origin into trunk

2026-10-21 15:02:41 +00:00

Author	SHA1	Message	Date
shadowdaoandClaude Opus 5.5	c49f456336	fix(images): install Remi packages from the origin, not the lagging mirrors During the php2shell release the Remi mirrors still served 8.2.34 hours after 8.2.35 was published, so cac/cac-fpm builds shipped vulnerable PHP. Enable the repo files' baseurl (rpms.remirepo.net) and comment the mirrorlist. Verified on the build server: a clean almalinux/10-base install now gets PHP 8.2.35. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 08:02:38 -07:00

Author

SHA1

Message

Date

shadowdaoandClaude Opus 5.5

c49f456336

fix(images): install Remi packages from the origin, not the lagging mirrors

During the php2shell release the Remi mirrors still served 8.2.34 hours after
8.2.35 was published, so cac/cac-fpm builds shipped vulnerable PHP. Enable the
repo files' baseurl (rpms.remirepo.net) and comment the mirrorlist. Verified on
the build server: a clean almalinux/10-base install now gets PHP 8.2.35.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-21 08:02:38 -07:00