Checked fact 248023 Oct 2026Safety and security
The PHP project’s advisory of 21 October 2026 says that, "Given the severity of these vulnerabilities, the PHP security team provided minimal source-backports for PHP 7.4, PHP 8.0, and PHP 8.1 to help people building from source or without access to an LTS vendor."
The exact words it rests on
Given the severity of these vulnerabilities, the PHP security team provided minimal source-backports for PHP 7.4, PHP 8.0, and PHP 8.1 to help people building from source or without access to an LTS vendor.
What the source said when we opened it, on 23 Oct 2026.
The source
PHP News Archive 2026: security advisory and releases of 21 Oct 2026
Checked
Checked by the notis newsroom on , against the source above.
In the story
PHP patches two critical remote code execution flaws 23 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.