1.4.7

1.4.7

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

bug

• 644: 640: fixing build tools installer on EL10 thanks to @asgrim

1.4.6

1.4.6

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

bug

• 637: 579: fix self update issues thanks to @asgrim

1.4.5

This release contains vulnerability fixes for the following security advisories:

• GHSA-h842-vjwg-pxxx - Sudo-elevated arbitrary file deletion via extra.pie-installed-binary metadata in UninstallUsingUnlink
• GHSA-pm6p-666q-hvj5 - Sudo-elevated root code execution via TOCTOU between self-update verify and write
• GHSA-f67f-c344-cqqr - PIE self-update accepts any historically-attested pie.phar (rollback gap)
• GHSA-vcv4-gmjc-mxvq - php-ext.build-path traversal escapes PIE's vendor extract directory
• GHSA-8xmh-xrvp-hwrf - WindowsInstall::copyExtraFile lacks destination containment check (Windows-only path traversal)
• GHSA-p4j8-36rr-gjfq - Self-update attestation verification is scoped to --owner=php, not --repo=php/pie

1.3.13

This release contains vulnerability fixes for the following security advisories:

• GHSA-h842-vjwg-pxxx - Sudo-elevated arbitrary file deletion via extra.pie-installed-binary metadata in UninstallUsingUnlink
• GHSA-pm6p-666q-hvj5 - Sudo-elevated root code execution via TOCTOU between self-update verify and write
• GHSA-f67f-c344-cqqr - PIE self-update accepts any historically-attested pie.phar (rollback gap)
• GHSA-vcv4-gmjc-mxvq - php-ext.build-path traversal escapes PIE's vendor extract directory
• GHSA-8xmh-xrvp-hwrf - WindowsInstall::copyExtraFile lacks destination containment check (Windows-only path traversal)
• GHSA-p4j8-36rr-gjfq - Self-update attestation verification is scoped to --owner=php, not --repo=php/pie

1.4.4

1.4.4

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

dependencies

• 612: [1.4.x] Update Composer to 2.9.8 thanks to @asgrim

1.3.12

1.3.12

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

dependencies

• 611: Update Composer to 2.9.8 thanks to @asgrim

1.4.3

1.4.3

• Total issues resolved: 2
• Total pull requests resolved: 3
• Total contributors: 2

bug

• 608: 597: add output check for dnf permission denied thanks to @asgrim and @hackel
• 607: 597: don't auto install re2c and bison thanks to @asgrim and @hackel
• 606: 596: fix two packages found for same ext in pie show etc thanks to @asgrim and @hackel

1.4.2

1.4.2

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

bug

• 593: 590: prevent pre-packaged-binary from being used when configure options are passed thanks to @asgrim

1.4.1

1.4.1

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

dependencies,php

• 582: [1.4.x] Update Composer to 2.9.7 thanks to @asgrim

1.3.11

1.3.11

• Total issues resolved: 0
• Total pull requests resolved: 1
• Total contributors: 1

dependencies,php

• 581: [1.3.x] Update Composer to 2.9.7 thanks to @asgrim