how do you handle the new php security issue?

[PeterPan]

https://www.php.net/archive/2026.php#2026-10-20-1

 

https://www.heise.de/news/Wichtige-PHP-Updates-am-21-Oktober-beheben-Codeeinschleusung-Schwachstellen-11495072.html

 

 

Edited 5 hours ago by PeterPan

[the.rampage.rado]

As far as I read the info online, just update with today's update for your PHP version and everything should be fine.

Already online: https://github.com/php/php-src/releases

[Yabber]

49 minutes ago, the.rampage.rado said:

s far as I read the info online, just update with today's update for your PHP version and everything should be fine.

Installing the PHP patch causes very serious problems in Thirtybees. It is not possible to save ANY data in the back office.  The problem occurs with both PHP 8.1 and PHP 8.3

[wakabayashi]

2 hours ago, Yabber said:

Installing the PHP patch causes very serious problems in Thirtybees. It is not possible to save ANY data in the back office.  The problem occurs with both PHP 8.1 and PHP 8.3

Why? As far as I understand this are just minor updates. Of course they are very crucial, but if you stay on your main version, you should be fine or not?