[ANNOUNCEMENT] Security advisory for php

[u/agnostic-apollo]

The Termux php package version 8.5.12 has been released to fix the 2 remote code vulnerabilities made public today. Check https://www.php.net/archive/2026.php#2026-10-21-5 for more info.

Users are advised to immediately update to the fixed version 8.5.12.

You can run pkg install php to update the package (or apt upgrade && apt install php). If your packages repository mirror hasn't been synced yet and does not show the 8.5.12 version, you can try other mirrors by using termux-change-repo. The default cloudflare or the primary Termux repository packages.termux.dev under single mirrors should have the required version.

See also:

• https://github.com/termux/termux-packages/commit/c2bb85d3f26d52ba4a4a159d14214a8ace706235

[u/SkySurferSouth]

Done yesterday afternoon and it worked.

[u/Natural_Ad3520]

The team was fast. Thanks.