PHP Security Update coming Oct 20

[xirtam]

Can anyone confirm that the fix was also included in the patches for lsphp74?
I can see that it was updated yesterday, but it doesn't say anywhere whether the fix for these 2 vulnerabilities was included?
https://rpms.litespeedtech.com/debian/pool/main/focal/

just do lsphp -v and check compile time

 

[Cold-Egg]

Just a quick update: PHP 7.4–8.5(both amd64 and arm64) have been updated across all currently maintained OS versions, with the updates released on day one. We've also backported the fix to some EOL operating systems. The package for Bionic is also done now, @papa zulu, feel free to give it a try .

If you notice any missing updates, feel free to post them here.

 

[nanas]

Just a quick update: PHP 7.4–8.5(both amd64 and arm64) have been updated across all currently maintained OS versions, with the updates released on day one. We've also backported the fix to some EOL operating systems. The package for Bionic is also done now, @papa zulu, feel free to give it a try .

If you notice any missing updates, feel free to post them here.

Thanks for the update! Could you please confirm whether the packages in the Jammy repository have also been updated with the security patches? I’d appreciate the clarification.

I tried updating lsphp for CyberPanel


but I couldn't find any changelog to verify whether the security patches have been applied.

 

[Cold-Egg]

Those versions include the security patches. You can also check the build timestamps to confirm they are recent builds.