Major PHP patch issued today

[KH-DanielP]

Thanks for the information.
I am using Cpanel, and didn't realize they offered a patch for 7.4 - 7.1.

It was my understanding that anything older than 8.2 would be vulnerable. I guess this helps calm the fire a little.
Thanks!

I assume you meant 7.4 > 8.1? but yes they released patches for all of those.

If you need patched versions for even older PHP it can be obtained, Imunify360 is an easy way to get that by using the cloudlinux repos which patched it all the way back to 5.6

 

[Canadianllama]

I checked done of my cpoanel sites; it still shows PHP 8.3 (ea-php83)
How do i know if its been patched or not?

Thanks

 

[KH-JonathanKW]

You have to be able to see the minor version number or have root access to look at changelog history.

We wrote up on how we handled this and what others can do if they want to verify themselves, should they have access:

How We Patched PHP Across KnownHost's Managed Infrastructure - KnownHost

We have been applying the fix for a critical remote code execution vulnerability in PHP across our shared hosting servers and the managed cPanel, DirectAdmin, and Plesk servers we maintain for customers. cPanel, CloudLinux, DirectAdmin, and Plesk each released patched PHP builds, and we have...

www.knownhost.com