Is Joomshaper addressing the major remote code execution vulnerability in PHP? https://www.php.net/archive/2026.php#2026-10-21-5
Will I have any issues if I update my sites from PHP 8.3.35 to the patched 8.3.36 release?
Thanks,
Chris
Is Joomshaper addressing the major remote code execution vulnerability in PHP? https://www.php.net/archive/2026.php#2026-10-21-5
Will I have any issues if I update my sites from PHP 8.3.35 to the patched 8.3.36 release?
Thanks,
Chris
Updating from PHP 8.3.35 to 8.3.36 is the correct action and should not cause compatibility issues. It is a security patch release within the same PHP 8.3 branch, not an upgrade to a new PHP minor version.
The vulnerabilities are in PHP itself, not specifically in SP Page Builder or Joomla, so there is nothing JoomShaper needs to patch in SP Page Builder to fix the PHP vulnerability.
Your hosting/server provider needs to provide the patched PHP release. Once PHP 8.3.36 is available, you should update to it as soon as possible.
I have already updated my own Joomla environments to the patched PHP releases without issues so far.
Thanks. And yes, my web host already has the patch being applied across all of the hosted sites. I just wanted to make sure that I wouldn't break anything. ;)