GMO Pepabo's "Lolipop! Rental Server" announced on its official X account on October 22 that it had applied a fix for a critical PHP vulnerability and restarted users' suspended sites at 13:11 on the same day. The company explained that it also applied proprietary fixes to older PHP versions for which no official patches were available.
Regarding customer sites that were suspended, we applied a fix and restarted them on 10/22 at 13:11. We have also applied proprietary fixes to older PHP versions for which no official patches are available. With some exceptions, service sites are also scheduled to resume shortly. We apologize for any inconvenience this may cause and appreciate your understanding. — Lolipop! by GMO Pepabo (@lolipopjp) October 22, 2026
The PHP development team has released versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12, which address the aforementioned vulnerability. Versions prior to PHP 8.1 are no longer officially supported, and no official patches are provided for them. However, the PHP development team has released source code to backport the fixes for versions 7.4, 8.0, and 8.1.
Made with AI
