New PHP security issue

[matrixino]

When LSWS releases the patched php versions? It's kinda urgent

 

[youknowra]

Hi! The same question here!

 

[espijkerman]

Same here. If you have an ETA for us we can inform our customers when they can expect their site to be online again or if we need to temporarily switch back to normal apache+php till the update releases.

 

[matrixino]

Same here. If you have an ETA for us we can inform our customers when they can expect their site to be online again or if we need to temporarily switch back to normal apache+php till the update releases.

well switching to apache won't fix the issue. not even distro PHP have the patch yet. and they won't patch anything below 8.2 anyway.

 

[espijkerman]

well switching to apache won't fix the issue. not even distro PHP have the patch yet. and they won't patch anything below 8.2 anyway.

Most distro have patches available, for debian based distros it's in the sury repository, for redhat/fedora based distros it's in the remi repository

 

[matrixino]

Most distro have patches available, for debian based distros it's in the sury repository, for redhat/fedora based distros it's in the remi repository

there wasn't sure update when I checked. did they update <7.4 too?

 

[espijkerman]

there wasn't sure update when I checked. did they update <7.4 too?

No, only 8.2 and up

 

[matrixino]

No, only 8.2 and up

ok then it's useless. we already have official patches from 7.4 up. problem is <7.4.

 

[espijkerman]

ok then it's useless. we already have official patches from 7.4 up. problem is <7.4.

It looks like the litespeed repo is updated, but only from 7.4 and up.

 

[abk]

Correct, this is the latest status, shared on our Slack Community (https://www.litespeedtech.com/slack):

 

[OvcaX]

Guys are you joking around?
Still no update

 

[matrixino]

Guys are you joking around?
Still no update

what are you talking about? everything got updated.

 

[OvcaX]

Not by last post from abk on el9.
But now after i checked it got updated even there