Quick script to install the version of PHP that’s been patched for the two critical vulns today
dnf install koji
mkdir -p /root/php-8.5.12-koji
cd /root/php-8.5.12-koji
koji download-build --arch=x86_64 --arch=noarch php-8.5.12-1.fc44
# Select only RPMs whose package name and architecture are already installed.
rpms=()
for file in ./*.rpm; do
package=$(rpm -qp --qf '%{NAME}.%{ARCH}' "$file") || exit 1
if rpm -q "$package" >/dev/null 2>&1; then
rpms+=("$file")
fi
done
if ((${#rpms[@]} == 0)); then
echo "No downloaded RPMs match installed packages."
exit 1
fi
printf 'Selected: %s\n' "${rpms[@]}"
dnf install "${rpms[@]}"