PHP Security Update coming Oct 20

[Bayview]

It sounds like a very serious PHP issue is being addressed tomorrow, or maybe even earlier, according to an announcement here: https://www.php.net/archive/2026.php#2026-10-20-1
Any idea how quickly we can expect new lsphp versions on the repository?

 

[Cold-Egg]

Once the upstream is ready, we will do it as fast as we can.

 

[xirtam]

Once the upstream is ready, we will do it as fast as we can.

Any update? Everyone is out with their PHP but OLS still has the old lsphp

 

[papa zulu]

Can you guys also port this fix to older versions of php, such as 7.4 and on older, Bionic servers?

 

[xirtam]

Can you guys also port this fix to older versions of php, such as 7.4 and on older, Bionic servers?

there is no fix for PHP older than 7.4

 

[papa zulu]

Yes, but there is a fix for php 7.4
It would be great if this fix can also be in the lsphp version 7.4 for Bionic servers

 

[xirtam]

Yes, but there is a fix for php 7.4
It would be great if this fix can also be in the lsphp version 7.4 for Bionic servers

Yes 7.4, not older. You can always recompile patched PHP yourself. 7.4 patched is in the PHP GitHub repo.