PHP’s official lifecycle shows the emergency PHP2Shell fixes can land on 8.2–8.5, whose security support ends from December 2026 through December 2029, but PHP 8.1 and older branches had already reached end of life by the disclosure. That support cliff matters because the AI-assisted discoveries described by SI News affect a widely deployed runtime, yet operators on obsolete branches cannot receive the upstream fix without upgrading. This independently quantifies the remediation window behind the PHP2Shell emergency.
Data sources
- PHP: Supported Versions
- PHP: Unsupported Branches
- OpenAI: Patch the Planet / PHP vulnerability disclosure
Leave a comment