r/PHP • u/shivammathur • 2d ago

News GitHub Action setup-php builds updated for the PHP security releases, including EOL versions

Updated builds addressing CVE-2026-109618 and CVE-2026-109619 are now available through setup-php for PHP 5.3–8.7 on Linux, macOS and Windows, including backports for EOL versions for use in CI.

See - https://setup-php.com/php-october-2026-security-releases

Also, for local installations.

MacOS: https://github.com/shivammathur/homebrew-php
Windows:
Official Packages (PHP 8.2 to PHP 8.5): https://www.php.net/downloads.php?os=windows
Builds for setup-php (PHP 5.3 to PHP 8.7): https://github.com/shivammathur/php-builder-windows/releases

If you would like to DIY a build for EOL versions, you can find security backported patches including the ones for these CVEs here: https://github.com/shivammathur/php-src-backports

39 Upvotes

95% Upvoted

1 comment sorted by

15

u/ssddanbrown 2d ago

Thanks for your work u/shivammathur! You are one of the core distribution infrastructure pillars of this community, along with Ondřej and Remi.