Nickske00 Adam Nice! Just restarting the container through the UI is enough to load the updated PHP version?
xyzulu Adam Should be in the next hour or so, just waiting on CI. Obviously not using Railway: https://blog.railway.com/p/security-disclosure-wednesday-october-21st What a mess.. sorry.. a bit offtopic. Thanks for sacrificing your sleep for the greater good @Adam
swannyd Servers patched without fuss. And moving on. Emails flying everywhere from each and every company, making customers panic. This vulnerability had roots going back to 2024 HA. Chill. Thanks to Adam as always.
ordinary swannyd All my clients are coming out of the woodwork with emails from their Cyber insurance providers... I guess this will be my day!
marowi Thanks for the quick support, @Adam! My servers were secured faster than those of most hosting providers here in Germany. 🙂
JohnB Perfectly handled and the update was super easy. Amazing. I remember in the past the slow PHP releases made people worry that security releases would be slow too. I don't think that's a concern anymore
XN-Matt Anyone else see the cron process get stopped and then not restarted as part of this upgrade? Had to restart it on multiple servers this morning.
Dan XN-Matt Just checked all of ours and cron is up and running, showing restarted a couple of weeks ago so doesn't seem to have been affected.
Dan Looks like we're in for another one: https://thehackernews.com/2026/10/urgent-php-warns-of-another-unpatched.html https://www.php.net/archive/2026.php#2026-10-23-1
Adam We have released updates packages for 5.6 to 7.3 with the patches for this CVE. We have also released updated packages for all other PHP versions to bump Brotli to 1.2.1. The upgrade process as always is: apt update apt upgrade -y ecp restart-php
matrix Adam Yay! Great as usual. Just an heads up. If a website is currently being backuped the ecp restart-php fails. Wait or kill the backup process to isntant restart it.
