Critical PHP vulnerabilities: an urgent update is required

Critical PHP vulnerabilities: an urgent update is required

Dear customers,

Two critical vulnerabilities have been discovered in PHP that could allow attackers to execute code remotely on a server without authentication. The developers have already released fixes and urge users to update immediately.

Fixes are available in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. If you use operating system packages, check with your vendor to confirm that fixes are available. Official announcement.

If you have our server administration service, please contact our technical support team to check your installation and agree on the update.

Websites running PHP 5.6 and 7.x require particular attention: these branches are no longer supported under PHP's standard support lifecycle. Moving to a modern version may require updates to your CMS, modules or website code.

Before changing the version, create a backup and check compatibility. If you manage your server yourself, please forward this message to your system administrator.

Do not postpone the update.

The BestHosting team