PHP LTS security fixes have arrived
Blog post from Upsun
Freexian offers extended support for end-of-life PHP versions, allowing developers to maintain application security even when they cannot upgrade to the latest PHP releases. Typically, a PHP version receives 2 years of active support followed by 1 year of security fixes, after which it is deemed "end of life" and no longer maintained. However, through a subscription with Freexian, these older PHP versions can still receive security updates, mirroring the support originally provided by upstream PHP. This extended support is crucial for developers facing challenges such as custom code dependencies, unsupported plugins, and long QA cycles, making it difficult to upgrade PHP versions promptly. Freexian's approach involves backporting security and stability fixes from stable PHP releases to their LTS-supported versions, ensuring continued security without additional charges for developers. Although extended support is beneficial, the recommendation remains to upgrade PHP versions to enhance performance and security whenever feasible.