# Upgrading PHP on Trellis servers for the Oct 21 security release (PHP2Shell)

**URL:** https://discourse.roots.io/t/upgrading-php-on-trellis-servers-for-the-oct-21-security-release-php2shell/30439
**Category:** trellis
**Created:** 2026-10-20T21:08:20Z
**Posts:** 5
**Showing post:** 2 of 5

## Post 2 by @ben — 2026-10-20T23:07:22Z

> **[Critical Vulnerabilities in PHP](https://cert.europa.eu/publications/security-advisories/2026-018/)**
>
> Critical Vulnerabilities in PHP

> At this time, no technical details have been made public. CERT-EU advises organisations to prepare for **immediate patching of affected assets**. Where immediate patching is not feasible, organisations should **consider isolating internet-facing applications from public networks until a fix is available**

---

_[View the full topic](https://discourse.roots.io/t/upgrading-php-on-trellis-servers-for-the-oct-21-security-release-php2shell/30439)._