PHP 5.6 EOLed (no more security updates)

[Azareal]

This actually happened a couple of months ago, so old news, but just in case people haven't noticed, PHP 5.6 has been EOLed (end of life), this means that the PHP Team will no longer release security fixes for any security vulnerabilities which may appear.

Core PHP vulnerabilities don't appear too frequently, only once every few months or so, but you do run the serious risk of being completely screwed over, if you don't upgrade / migrate.

 

[Elli]

Hopefully most server admins have upgraded to 7.2 by now. Who knows how many unmaintained sites are still out there on older versions, though.

The PHP home page says that 5.6.40 was released Jan 10, though? For security fixes. Will that be the last release?

 

[Azareal]

Hopefully most server admins have upgraded to 7.2 by now. Who knows how many unmaintained sites are still out there on older versions, though.

The PHP home page says that 5.6.40 was released Jan 10, though? For security fixes. Will that be the last release?

No idea. Maybe, they issued an update to replace the version of the package manager which was replaced with a virus? Could also be a delayed release or just one last one for stragglers.