Oct 21, 2026, 2:04 PMSury PHP repo has upgrades already.
I see upgrades also for 7x and 8.0.x, 8.1.x, which I thought are not getting the patch. Unclear what that means, but those updated packages were not there 10min ago, so it seems related to the CVEs?
Oct 21, 2026, 2:07 PM@rysiek They've backported some source changes:
« Given the severity of these vulnerabilities, the PHP security team provided minimal source-backports for PHP 7.4, PHP 8.0, and PHP 8.1 to help people building from source or without access to an LTS vendor. »
