PHP 8.3.8, 8.2.20, 8.1.29

[Erulezz]

PHP 8.2.20 Released!​

The PHP development team announces the immediate availability of PHP 8.2.20. This is a security release.
All PHP 8.2 users are encouraged to upgrade to this version.
For source downloads of PHP 8.2.20 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 8.3.8 Released!​

The PHP development team announces the immediate availability of PHP 8.3.8. This is a security release.
All PHP 8.3 users are encouraged to upgrade to this version.
For source downloads of PHP 8.3.8 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

PHP 8.1.29 Released!​

The PHP development team announces the immediate availability of PHP 8.1.29. This is a security release.
All PHP 8.1 users are encouraged to upgrade to this version.
For source downloads of PHP 8.1.29 please visit our downloads page, Windows source and binaries can be found on windows.php.net/download/. The list of changes is recorded in the ChangeLog.

 

[Aar]

I understood that this can only be exploited via PHP-CGI installation in Windows. Something that is not present on DirectAdmin, and in addition, Windows is not used either.

But this seems to be important because updating is important.

More info:https://devco.re/blog/2024/06/06/se...tion-vulnerability-en/?ref=labs.watchtowr.com

 

[Ohm J]

On directadmin, it will safe 100% because CGI already unchecked on domain creation page by default. and mostly everyone don't use it.