how do you handle the new php security issue?

[PeterPan]

https://www.php.net/archive/2026.php#2026-10-20-1

 

https://www.heise.de/news/Wichtige-PHP-Updates-am-21-Oktober-beheben-Codeeinschleusung-Schwachstellen-11495072.html

 

 

Edited 12 hours ago by PeterPan

[the.rampage.rado]

As far as I read the info online, just update with today's update for your PHP version and everything should be fine.

Already online: https://github.com/php/php-src/releases

[Yabber]

49 minutes ago, the.rampage.rado said:

s far as I read the info online, just update with today's update for your PHP version and everything should be fine.

Installing the PHP patch causes very serious problems in Thirtybees. It is not possible to save ANY data in the back office.  The problem occurs with both PHP 8.1 and PHP 8.3

[wakabayashi]

2 hours ago, Yabber said:

Installing the PHP patch causes very serious problems in Thirtybees. It is not possible to save ANY data in the back office.  The problem occurs with both PHP 8.1 and PHP 8.3

Why? As far as I understand this are just minor updates. Of course they are very crucial, but if you stay on your main version, you should be fine or not?

[Yabber]

7 hours ago, wakabayashi said:

Why? As far as I understand this are just minor updates. Of course they are very crucial, but if you stay on your main version, you should be fine or not?

I apologise for the incorrect information.
My hosting provider, which runs servers on FreeBSD, somehow applied this PHP patch incorrectly yesterday, and as a result, data saving in Thirtybees within the back office wasn’t working across all PHP versions.
They’ve now fixed the issue and everything is working fine today. 🙂