Conversation

Notices

1. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 24-Oct-2026 17:00:20 EDT Clarissa Walker
   Okay, my PHP 7.4.33 now has a pre-patch (read: incomplete patch) for a known newer CVE. I never applied that to either supported 8.x version I have because it will make it to the next normal release cycle.
   
   PHP 5.6.40 does not have the code snippet I used from the Github repo; it does not exist in its current form.
   
   I also compiled ICU4C 79.1 for this server, but I will only apply that to the next 8.6.0 release, which is RC5.
   • Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 24-Oct-2026 17:03:46 EDT Clarissa Walker

     in reply to
     I do not consider this a true update for PHP 7.4.33... that is, until the backports start showing up for the known newer CVE.